
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a623a3a2f34382d3438203d3e203137343930.roa
File: 323430313a396130303a623a3a2f34382d3438203d3e203137343930.roa (raw, json)
Hash identifier: g/ZKVIFc+IRf2mnYP7GmQBBIzQKwBB5hIWin4U8QLpk=
Subject key identifier: 2A:64:6C:63:A4:C9:06:12:75:C5:E8:04:68:E1:6D:D2:BC:5A:C7:FF
Certificate issuer: /CN=5253565A27C06C800009631402F5A6EE85C46456
Certificate serial: 378D7DA614E4E549E0EBD01C85F55EC0DB11B7A7
Authority key identifier: 52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a623a3a2f34382d3438203d3e203137343930.roa
Signing time: Mon 01 Jun 2026 02:17:12 +0000
ROA not before: Mon 01 Jun 2026 02:12:12 +0000
ROA not after: Mon 31 May 2027 02:17:12 +0000
asID: 17490
IP address blocks: 2401:9a00:b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl
rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:8d:7d:a6:14:e4:e5:49:e0:eb:d0:1c:85:f5:5e:c0:db:11:b7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5253565A27C06C800009631402F5A6EE85C46456
Validity
Not Before: Jun 1 02:12:12 2026 GMT
Not After : May 31 02:17:12 2027 GMT
Subject: CN=2A646C63A4C9061275C5E80468E16DD2BC5AC7FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ea:41:85:a8:89:e1:91:98:bf:52:de:fb:ee:
93:40:c6:bf:a0:70:cd:5b:f1:2c:02:3e:e3:78:ca:
a2:e5:47:d0:24:89:3a:62:80:c0:9a:b8:bc:6d:7c:
77:7b:e3:42:d5:0f:af:a7:8d:03:de:17:49:cf:a5:
17:f9:b0:fc:0e:1c:1c:94:5b:70:d7:46:4f:91:eb:
1f:6e:05:48:c1:36:29:a0:5d:5e:fd:50:df:9f:82:
b9:ff:88:31:0b:03:89:6a:2a:e3:e5:e3:ba:21:46:
ee:84:f6:29:0a:85:b7:9e:38:da:42:2c:cc:a7:56:
46:53:f1:23:0a:ba:fb:14:2c:4b:2f:2f:ec:5d:20:
6f:84:be:83:4b:af:19:0a:d0:3b:b9:0a:5b:63:a5:
1e:e5:88:e1:4d:28:6e:4c:08:f4:a2:6a:d9:90:f1:
60:50:95:d6:63:a2:db:7f:a6:60:39:56:b4:e0:6d:
57:c5:a2:a1:14:c5:fd:6b:34:2a:84:27:93:91:cd:
2a:6c:5b:a1:c5:d1:2d:e3:07:84:aa:86:68:57:68:
3a:df:48:91:dc:20:bc:fd:7a:8c:99:0f:32:d0:a7:
ae:60:1e:5b:07:b7:25:92:c2:28:b1:5f:ff:03:1b:
65:f3:ac:e1:60:90:33:9f:87:f0:e0:b5:c8:51:b4:
d3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:64:6C:63:A4:C9:06:12:75:C5:E8:04:68:E1:6D:D2:BC:5A:C7:FF
X509v3 Authority Key Identifier:
keyid:52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a623a3a2f34382d3438203d3e203137343930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:9a00:b::/48
Signature Algorithm: sha256WithRSAEncryption
8a:c2:b8:f7:28:3a:2c:16:1f:f2:17:b1:f2:e6:a8:ed:9c:5a:
9f:54:b7:36:90:26:10:92:fa:5d:96:14:2b:cf:b3:dc:42:fc:
f2:8d:16:12:50:ba:c8:80:6a:ac:dd:a9:e7:41:bc:d4:cc:fd:
d6:ae:36:4d:da:ac:bd:70:6d:d4:19:0d:79:e5:6d:f3:4b:77:
0b:3e:b8:8e:d7:61:cd:f2:a1:99:24:82:ca:f4:1a:34:9a:cc:
9c:71:38:62:4e:04:59:fd:b6:db:28:68:a7:23:fa:7e:c5:ac:
3d:23:38:f8:8f:ad:42:7d:75:6a:39:f7:94:49:16:55:8c:e9:
f6:30:b8:d9:03:1a:36:81:ed:af:d0:72:d3:6d:0f:67:90:a9:
77:99:f9:bc:a9:85:c1:40:f6:4f:ef:3c:fb:ab:24:b7:3a:e7:
f3:c0:e3:c1:12:a7:ff:4e:b7:4c:09:01:08:76:15:be:f3:20:
07:17:d9:ba:24:39:36:5b:82:e4:a3:38:d4:31:54:26:ef:f6:
25:fd:f8:c5:d6:d3:67:08:05:0b:ba:e4:a7:37:2f:cd:b6:1e:
29:e1:9f:68:a8:74:e4:e1:ac:e8:af:1b:5a:9c:2e:65:09:ac:
24:26:a1:bb:d1:b5:bb:07:ae:89:01:d8:c4:fb:29:37:81:54:
15:3b:34:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:06:52 2026 by rpki-client