
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984486035816451/1/323430313a623336303a3a2f33322d3332203d3e20313531323830.roa
File: 323430313a623336303a3a2f33322d3332203d3e20313531323830.roa (raw, json)
Hash identifier: 5SJEj1nc3qGBhaCTByzHxgbcFU/ieorqq3xy9zqQc3g=
Subject key identifier: 9C:12:5B:A4:FB:D7:03:3B:C2:44:A4:F3:44:DB:C4:62:CD:08:15:B3
Certificate issuer: /CN=A29880A26322EAD895FA176AD4CD3EEC5B8916F3
Certificate serial: 385D8F37DECC672BE927AD0B4CAE1BB59109D4EF
Authority key identifier: A2:98:80:A2:63:22:EA:D8:95:FA:17:6A:D4:CD:3E:EC:5B:89:16:F3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/323430313a623336303a3a2f33322d3332203d3e20313531323830.roa
Signing time: Mon 13 Apr 2026 08:21:30 +0000
ROA not before: Mon 13 Apr 2026 08:16:30 +0000
ROA not after: Mon 12 Apr 2027 08:21:30 +0000
asID: 151280
IP address blocks: 2401:b360::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl
rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 04:23:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:5d:8f:37:de:cc:67:2b:e9:27:ad:0b:4c:ae:1b:b5:91:09:d4:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A29880A26322EAD895FA176AD4CD3EEC5B8916F3
Validity
Not Before: Apr 13 08:16:30 2026 GMT
Not After : Apr 12 08:21:30 2027 GMT
Subject: CN=9C125BA4FBD7033BC244A4F344DBC462CD0815B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b6:c4:84:88:68:fa:5a:f0:8c:de:ef:b5:05:
9f:b5:36:bc:e7:af:1a:e8:4d:c0:32:47:b6:97:b1:
8f:f6:61:2c:f0:62:2b:f5:5b:4e:63:11:34:3c:8f:
56:80:5a:ed:ab:95:ec:3f:45:ef:89:91:70:ca:d1:
df:91:f9:04:d6:5d:f4:7c:35:e3:2b:50:d4:ee:66:
77:1d:0d:6d:13:e9:97:f8:de:6a:ac:41:9d:22:65:
86:0f:60:c6:96:f5:58:48:ed:e8:cb:9c:dd:ca:ca:
3e:9e:4c:6a:51:d9:54:63:d8:e2:96:cd:8c:9e:cf:
88:10:f9:22:da:5e:fd:35:f5:b6:7a:c0:88:87:58:
3f:df:f0:e6:84:87:a2:21:e4:78:e4:2c:c5:3d:cb:
80:8d:ea:3a:55:7f:39:a1:b0:a5:06:98:2c:f1:59:
ca:6c:fe:b5:ac:fe:dd:8a:42:df:ce:12:7a:58:94:
73:dd:48:1f:53:a2:d5:a7:71:ec:ef:2d:e6:75:38:
91:7b:e0:ff:f2:2a:07:8f:ac:8a:06:f3:ae:66:db:
3c:c5:a5:88:16:44:00:51:30:1d:27:fc:03:92:0a:
5a:52:ec:30:6d:e4:92:22:96:52:4d:db:68:4c:2a:
a0:09:71:68:6b:2d:48:70:46:b1:7a:a9:7d:0d:f1:
e4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:12:5B:A4:FB:D7:03:3B:C2:44:A4:F3:44:DB:C4:62:CD:08:15:B3
X509v3 Authority Key Identifier:
keyid:A2:98:80:A2:63:22:EA:D8:95:FA:17:6A:D4:CD:3E:EC:5B:89:16:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/323430313a623336303a3a2f33322d3332203d3e20313531323830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:b360::/32
Signature Algorithm: sha256WithRSAEncryption
28:22:c6:f3:94:26:9b:1c:e7:af:39:63:28:a6:0f:e0:3e:60:
0b:e9:24:10:b7:a6:ed:b6:a0:87:2b:54:63:83:75:eb:53:dd:
73:0d:f0:8e:ec:77:1b:95:56:52:e1:c6:0b:62:2b:8a:2d:72:
aa:b3:d3:ef:8d:c8:b2:26:a0:db:e3:fc:2f:9d:a1:c8:60:93:
6c:8a:28:6e:8e:a1:82:41:90:79:76:f1:93:49:ed:df:bd:eb:
31:d0:5f:24:14:2e:cb:56:65:70:39:d5:3d:2e:e4:3f:92:c7:
6f:8b:26:9b:34:a8:7e:47:ea:e1:da:21:e1:49:f4:6c:ac:85:
8d:e2:39:f6:db:4c:f1:6e:35:25:35:18:ba:2e:7d:fe:bb:57:
2c:fa:58:81:88:7f:be:8d:63:64:bb:e8:55:97:46:ed:d6:63:
8e:ac:c0:c6:7f:d1:bd:e3:4c:50:a2:c1:de:72:90:04:23:93:
c5:c3:39:31:b4:4c:8f:f7:e1:c1:d5:fe:c4:31:48:b4:ed:e6:
de:76:af:a9:d7:38:f5:82:d6:f4:17:be:30:ec:1b:70:d0:ac:
8a:e8:62:b7:33:67:4d:bf:ae:d2:d0:c4:17:d1:76:6b:07:c9:
8b:89:ce:ff:d5:56:4e:24:f3:2b:05:54:1d:71:9f:79:b3:a4:
30:57:78:17
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIUOF2PN97MZyvpJ60LTK4btZEJ1O8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTI5ODgwQTI2MzIyRUFEODk1RkExNzZBRDRDRDNFRUM1
Qjg5MTZGMzAeFw0yNjA0MTMwODE2MzBaFw0yNzA0MTIwODIxMzBaMDMxMTAvBgNV
BAMTKDlDMTI1QkE0RkJENzAzM0JDMjQ0QTRGMzQ0REJDNDYyQ0QwODE1QjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/tsSEiGj6WvCM3u+1BZ+1Nrzn
rxroTcAyR7aXsY/2YSzwYiv1W05jETQ8j1aAWu2rlew/Re+JkXDK0d+R+QTWXfR8
NeMrUNTuZncdDW0T6Zf43mqsQZ0iZYYPYMaW9VhI7ejLnN3Kyj6eTGpR2VRj2OKW
zYyez4gQ+SLaXv019bZ6wIiHWD/f8OaEh6Ih5HjkLMU9y4CN6jpVfzmhsKUGmCzx
Wcps/rWs/t2KQt/OEnpYlHPdSB9TotWncezvLeZ1OJF74P/yKgePrIoG865m2zzF
pYgWRABRMB0n/AOSClpS7DBt5JIillJN22hMKqAJcWhrLUhwRrF6qX0N8eQLAgMB
AAGjggIVMIICETAdBgNVHQ4EFgQUnBJbpPvXAzvCRKTzRNvEYs0IFbMwHwYDVR0j
BBgwFoAUopiAomMi6tiV+hdq1M0+7FuJFvMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTk4NDQ4NjAzNTgxNjQ1MS8xL0EyOTg4MEEyNjMyMkVBRDg5NUZBMTc2QUQ0Q0Qz
RUVDNUI4OTE2RjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTI5ODgwQTI2MzIyRUFEODk1RkExNzZBRDRDRDNFRUM1Qjg5MTZGMy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NTk4NDQ4NjAzNTgxNjQ1MS8xLzMyMzQzMDMxM2E2
MjMzMzYzMDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMxMzUzMTMyMzgzMC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQC
AAIwBwMFACQBs2AwDQYJKoZIhvcNAQELBQADggEBACgixvOUJpsc5685YyimD+A+
YAvpJBC3pu22oIcrVGODdetT3XMN8I7sdxuVVlLhxgtiK4otcqqz0++NyLImoNvj
/C+dochgk2yKKG6OoYJBkHl28ZNJ7d+96zHQXyQULstWZXA51T0u5D+Sx2+LJps0
qH5H6uHaIeFJ9GyshY3iOfbbTPFuNSU1GLouff67Vyz6WIGIf76NY2S76FWXRu3W
Y46swMZ/0b3jTFCiwd5ykAQjk8XDOTG0TI/34cHV/sQxSLTt5t52r6nXOPWC1vQX
vjDsG3DQrIroYrczZ02/rtLQxBfRdmsHyYuJzv/VVk4k8ysFVB1xn3mzpDBXeBc=
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:38:22 2026 by rpki-client