
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/323430303a613836303a313a3a2f34382d3438203d3e203633363437.roa
File: 323430303a613836303a313a3a2f34382d3438203d3e203633363437.roa (raw, json)
Hash identifier: COonzZG053Dm9ecVP49O7dSolVnbJXpi66s7GpvINRs=
Subject key identifier: 0E:CD:E6:6F:81:7B:30:BA:A3:D8:93:5D:43:88:C6:7D:A5:CA:5E:B4
Certificate issuer: /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Certificate serial: 7DFDE7035B7F36B47B5BA3691D6963445F5674AD
Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/323430303a613836303a313a3a2f34382d3438203d3e203633363437.roa
Signing time: Mon 13 Apr 2026 08:06:59 +0000
ROA not before: Mon 13 Apr 2026 08:01:59 +0000
ROA not after: Mon 12 Apr 2027 08:06:59 +0000
asID: 63647
IP address blocks: 2400:a860:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:fd:e7:03:5b:7f:36:b4:7b:5b:a3:69:1d:69:63:44:5f:56:74:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Validity
Not Before: Apr 13 08:01:59 2026 GMT
Not After : Apr 12 08:06:59 2027 GMT
Subject: CN=0ECDE66F817B30BAA3D8935D4388C67DA5CA5EB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:59:71:47:1c:3e:d0:23:4b:c8:06:26:74:dc:
81:ea:db:c0:19:6b:cc:61:24:91:e6:df:d3:20:06:
7b:9d:96:2f:5d:09:69:65:b3:32:4a:e0:76:a5:b0:
59:fb:f7:5c:78:bf:dc:46:5e:e0:88:3f:d7:04:52:
7d:3f:54:54:36:88:52:ed:f3:7c:44:68:f0:10:21:
cd:ff:53:f9:5f:a3:d0:34:3e:60:7c:22:0a:5e:c6:
cf:7c:64:89:53:26:cc:2b:74:ea:71:6c:2a:50:41:
b0:30:3d:1a:7b:94:9a:f2:bd:6a:0c:7e:f9:3c:64:
7e:a0:71:b6:16:5a:c3:d0:a0:bc:9b:31:4e:f4:71:
94:da:73:f9:a3:10:c3:3e:c4:59:68:9b:ee:88:74:
38:8a:31:01:d1:7f:80:b6:6c:42:1b:ca:e3:b7:bc:
37:d6:76:95:0a:a9:73:e0:3a:8f:ae:26:8c:32:55:
86:b4:c0:98:56:82:7d:52:1d:a3:cf:d2:70:c8:da:
55:40:e6:c5:56:49:4e:54:8f:70:3e:af:f5:02:c5:
a0:bd:ee:db:8c:7a:01:6e:66:b1:99:d2:a1:74:c3:
cb:f3:8e:2b:79:99:f9:a8:01:b6:a3:42:67:7c:ea:
cc:df:f0:e3:f9:88:eb:f3:53:2b:19:8f:68:90:5c:
b4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CD:E6:6F:81:7B:30:BA:A3:D8:93:5D:43:88:C6:7D:A5:CA:5E:B4
X509v3 Authority Key Identifier:
keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/323430303a613836303a313a3a2f34382d3438203d3e203633363437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:a860:1::/48
Signature Algorithm: sha256WithRSAEncryption
6a:6a:de:5e:cb:a7:cf:24:7b:d3:38:6d:0b:2a:ce:51:7a:74:
7c:1b:d3:51:35:37:3d:cf:43:dd:41:6a:61:02:c0:a6:c8:eb:
ba:2a:91:77:5d:fc:d4:17:1c:9c:24:8a:cb:d9:03:2d:33:0a:
98:2a:92:5a:88:21:e4:f2:1d:76:15:fa:90:f8:3b:11:ba:1c:
fd:27:67:22:72:f6:42:1a:f4:66:ab:46:10:ee:6a:50:c1:07:
85:1f:7f:fc:af:4b:aa:3f:e5:7c:d4:38:88:a2:5e:61:83:7e:
2a:da:96:2a:e4:61:c6:03:45:00:c6:f8:98:a9:02:6a:ab:fc:
fc:61:7e:a1:22:25:f3:1d:94:a6:51:01:4c:7b:29:e4:33:ce:
0b:bd:0f:a4:2f:09:dd:36:2b:7d:bb:07:d5:f3:51:ce:7e:76:
e3:d5:c1:5b:c5:ef:91:84:cd:06:fd:1d:c8:1f:f5:f1:60:ee:
11:ab:ef:f8:27:6f:2b:8e:7b:bc:91:b2:8d:13:9e:6f:39:d5:
67:73:fe:b7:d3:5f:0e:78:3a:4a:bc:dc:26:1f:97:0a:d1:a2:
f2:ed:f5:8d:d2:48:1d:42:eb:3a:5a:0e:57:15:05:06:e8:81:
0f:f5:89:b5:ac:b4:c7:2f:a8:d7:60:6d:85:a2:54:c8:7b:58:
be:e9:ab:6b
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUff3nA1t/NrR7W6NpHWljRF9WdK0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzFDNDhGOTU5M0Q2QTE5REJEM0ZBQ0E5QzZFRkE1QjU1
QUQzRjM5ODAeFw0yNjA0MTMwODAxNTlaFw0yNzA0MTIwODA2NTlaMDMxMTAvBgNV
BAMTKDBFQ0RFNjZGODE3QjMwQkFBM0Q4OTM1RDQzODhDNjdEQTVDQTVFQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYWXFHHD7QI0vIBiZ03IHq28AZ
a8xhJJHm39MgBnudli9dCWllszJK4HalsFn791x4v9xGXuCIP9cEUn0/VFQ2iFLt
83xEaPAQIc3/U/lfo9A0PmB8Igpexs98ZIlTJswrdOpxbCpQQbAwPRp7lJryvWoM
fvk8ZH6gcbYWWsPQoLybMU70cZTac/mjEMM+xFlom+6IdDiKMQHRf4C2bEIbyuO3
vDfWdpUKqXPgOo+uJowyVYa0wJhWgn1SHaPP0nDI2lVA5sVWSU5Uj3A+r/UCxaC9
7tuMegFuZrGZ0qF0w8vzjit5mfmoAbajQmd86szf8OP5iOvzUysZj2iQXLTfAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUDs3mb4F7MLqj2JNdQ4jGfaXKXrQwHwYDVR0j
BBgwFoAUwcSPlZPWoZ29P6ypxu+ltVrT85gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTk3ODMxNjg4NTY1NTU1NS8wL0MxQzQ4Rjk1OTNENkExOURCRDNGQUNBOUM2RUZB
NUI1NUFEM0YzOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzFDNDhGOTU5M0Q2QTE5REJEM0ZBQ0E5QzZFRkE1QjU1QUQzRjM5OC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwOTU5NzgzMTY4ODU2NTU1NTUvMC8zMjM0MzAzMDNh
NjEzODM2MzAzYTMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzYzMzM2MzQzNy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACQAqGAAATANBgkqhkiG9w0BAQsFAAOCAQEAamreXsunzyR70zht
CyrOUXp0fBvTUTU3Pc9D3UFqYQLApsjruiqRd1381BccnCSKy9kDLTMKmCqSWogh
5PIddhX6kPg7Eboc/SdnInL2Qhr0ZqtGEO5qUMEHhR9//K9Lqj/lfNQ4iKJeYYN+
KtqWKuRhxgNFAMb4mKkCaqv8/GF+oSIl8x2UplEBTHsp5DPOC70PpC8J3TYrfbsH
1fNRzn5249XBW8XvkYTNBv0dyB/18WDuEavv+CdvK457vJGyjROebznVZ3P+t9Nf
Dng6SrzcJh+XCtGi8u31jdJIHULrOloOVxUFBuiBD/WJtay0xy+o12BthaJUyHtY
vumraw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 04:15:19 2026 by rpki-client