
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a643a3a2f34382d3438203d3e203137343930.roa
File: 323430313a396130303a643a3a2f34382d3438203d3e203137343930.roa (raw, json)
Hash identifier: A9uaSWXoT79HYHnGjvmraGV5OJoWMLbKxHM7r3vs7Is=
Subject key identifier: 44:80:31:FB:07:EC:48:4E:C5:BB:85:73:40:07:F1:3C:C0:86:66:A4
Certificate issuer: /CN=5253565A27C06C800009631402F5A6EE85C46456
Certificate serial: 5B00B1BD53B29656EAABD208B63C20AD339EF89C
Authority key identifier: 52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a643a3a2f34382d3438203d3e203137343930.roa
Signing time: Mon 01 Jun 2026 02:17:12 +0000
ROA not before: Mon 01 Jun 2026 02:12:12 +0000
ROA not after: Mon 31 May 2027 02:17:12 +0000
asID: 17490
IP address blocks: 2401:9a00:d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl
rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 07:28:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:00:b1:bd:53:b2:96:56:ea:ab:d2:08:b6:3c:20:ad:33:9e:f8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5253565A27C06C800009631402F5A6EE85C46456
Validity
Not Before: Jun 1 02:12:12 2026 GMT
Not After : May 31 02:17:12 2027 GMT
Subject: CN=448031FB07EC484EC5BB85734007F13CC08666A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:22:55:da:92:35:21:d9:51:10:4a:cb:ab:a5:
fe:5c:75:bd:6e:56:97:e5:93:b5:0c:d3:fa:67:2f:
3a:b3:07:4c:11:9a:c3:c6:e0:92:49:97:ca:de:6f:
45:d0:40:03:e4:ed:df:e0:9f:9c:97:84:4b:83:fd:
74:bd:af:23:65:f1:4e:94:9a:ee:4a:ce:b6:b9:48:
cc:3f:cd:c9:ba:b4:83:81:7f:2b:27:f2:2a:71:7e:
b3:67:1e:3b:92:14:7b:9c:48:91:a0:49:a2:a5:a9:
9d:1d:f4:6d:6c:e3:f4:8d:af:cc:bb:e2:6c:7c:2b:
4d:98:32:db:2d:43:b5:9d:2a:ee:a8:21:aa:8f:3a:
02:c8:2b:b9:a9:8c:1b:ce:2d:96:c2:50:83:96:2a:
9f:ad:18:ae:1c:88:09:54:eb:cb:a0:fe:fb:bd:50:
86:da:da:3f:7c:53:e8:31:57:dc:69:9c:65:9f:c5:
a5:2c:19:39:fd:b3:88:b9:a1:07:e3:fe:93:90:c3:
e7:80:95:7d:2b:5b:dc:fb:9e:05:68:71:0c:ee:22:
2f:fe:2d:64:45:1a:6e:99:59:65:07:0e:6e:45:1c:
b9:8d:0e:46:7a:74:d3:6c:cd:2b:66:00:d8:92:f7:
bb:17:a7:14:b8:d3:71:83:e7:f1:28:1a:11:34:8e:
35:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:80:31:FB:07:EC:48:4E:C5:BB:85:73:40:07:F1:3C:C0:86:66:A4
X509v3 Authority Key Identifier:
keyid:52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a643a3a2f34382d3438203d3e203137343930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:9a00:d::/48
Signature Algorithm: sha256WithRSAEncryption
be:03:53:6c:b8:45:ff:ef:77:b6:a8:7f:65:57:e2:e1:c6:89:
f9:53:58:95:6d:2c:db:74:b1:f1:27:ae:a7:e4:f8:4c:cf:bf:
77:9f:30:42:d1:5b:87:38:7c:e6:25:d2:b8:7c:8f:57:44:ec:
6c:06:a0:95:77:3d:1b:56:5c:49:56:c5:ce:e5:ae:5b:02:a1:
47:77:9b:a3:d6:96:be:61:93:5f:7a:dc:22:ea:f1:85:f8:ea:
25:58:4a:d4:c8:57:0c:11:cb:74:e8:ed:b4:ad:19:bc:d6:48:
81:6a:3f:c5:eb:32:95:6b:9b:ec:54:22:7c:00:7c:14:0b:5a:
17:c1:b5:ba:d8:d1:29:cc:d6:64:94:03:89:ec:49:1f:70:ae:
8a:fa:c0:13:13:10:17:75:42:cc:36:84:d5:28:e2:cf:ed:c4:
88:eb:78:9d:32:bd:10:26:1f:79:11:80:55:fa:13:cf:dc:1f:
6a:18:f0:08:1e:e7:6c:a3:0c:97:d3:ce:b9:b4:d1:f9:d3:fe:
6e:44:2d:77:e9:a6:8d:09:e0:74:a0:38:f8:7c:ec:a2:dc:57:
c6:20:f7:9a:f6:db:9e:cc:3a:bd:04:1e:5d:97:dc:07:ac:a6:
43:7b:9a:40:67:95:9f:7e:6e:01:65:c4:66:4e:58:60:68:c1:
d7:0f:df:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:00:44 2026 by rpki-client