
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096266595270918147/0/323430373a643963303a3a2f33322d3332203d3e20313436383335.roa
File: 323430373a643963303a3a2f33322d3332203d3e20313436383335.roa (raw, json)
Hash identifier: wqwKDkxoiSR0Ndr/C6yuBFJD2jd6jyNdMok0TyWmcjM=
Subject key identifier: 13:EC:5D:F1:4A:0C:AD:35:A8:6A:6A:28:D8:02:A5:9D:4F:48:9E:17
Certificate issuer: /CN=B1B9429336A860467C71053DDEA0565EAE6E7309
Certificate serial: 0F0E7DA19F5D4C66F0931EAB3B3AB38E6D144D81
Authority key identifier: B1:B9:42:93:36:A8:60:46:7C:71:05:3D:DE:A0:56:5E:AE:6E:73:09
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1B9429336A860467C71053DDEA0565EAE6E7309.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/323430373a643963303a3a2f33322d3332203d3e20313436383335.roa
Signing time: Tue 14 Apr 2026 02:57:09 +0000
ROA not before: Tue 14 Apr 2026 02:52:09 +0000
ROA not after: Tue 13 Apr 2027 02:57:09 +0000
asID: 146835
IP address blocks: 2407:d9c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.crl
rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1B9429336A860467C71053DDEA0565EAE6E7309.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:0e:7d:a1:9f:5d:4c:66:f0:93:1e:ab:3b:3a:b3:8e:6d:14:4d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1B9429336A860467C71053DDEA0565EAE6E7309
Validity
Not Before: Apr 14 02:52:09 2026 GMT
Not After : Apr 13 02:57:09 2027 GMT
Subject: CN=13EC5DF14A0CAD35A86A6A28D802A59D4F489E17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:82:34:4b:00:e4:71:06:9d:05:0d:51:2f:de:
3d:12:33:63:94:9c:ef:e1:16:8c:10:97:3e:72:5e:
f3:1b:32:8b:e4:8f:e9:fd:d7:f4:ac:5c:85:10:f8:
72:5d:41:19:55:cf:90:16:2b:e1:bf:4a:6f:61:0a:
d1:45:e3:35:b4:4f:ba:fc:ac:58:b5:7b:7d:fe:2f:
55:a3:2a:61:fe:6d:a0:d7:8c:3e:59:aa:b8:d6:b1:
a5:f8:4c:af:b5:d3:52:a1:d4:59:e0:11:e6:30:1a:
fd:c0:fb:0d:37:f0:69:e7:35:3c:ac:45:d7:c7:b1:
be:ba:d8:6e:4a:63:c2:d6:56:e5:c0:9e:1b:63:54:
7c:7e:4d:4e:e7:72:e8:7b:84:80:9d:f2:32:2c:a9:
92:0e:a0:c7:e7:38:3b:a2:e5:2d:9b:dc:53:86:13:
6e:50:4c:6d:f4:e9:ae:e1:8b:d1:bc:10:dc:c8:0b:
9f:70:83:96:b1:d1:f3:e1:ec:5a:b6:d9:0f:90:d3:
79:43:cd:c1:1b:c3:3a:20:60:2b:49:fa:9a:78:fe:
a0:7e:80:d6:82:28:cc:7c:d9:70:ba:c8:7a:90:40:
92:a3:ea:9a:f4:2c:59:f6:55:b8:04:70:be:ab:cb:
c6:f7:ff:32:8e:cb:22:6f:61:fc:40:0f:8b:ac:61:
49:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EC:5D:F1:4A:0C:AD:35:A8:6A:6A:28:D8:02:A5:9D:4F:48:9E:17
X509v3 Authority Key Identifier:
keyid:B1:B9:42:93:36:A8:60:46:7C:71:05:3D:DE:A0:56:5E:AE:6E:73:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1B9429336A860467C71053DDEA0565EAE6E7309.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/323430373a643963303a3a2f33322d3332203d3e20313436383335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2407:d9c0::/32
Signature Algorithm: sha256WithRSAEncryption
d6:7d:4d:2b:1a:3d:c8:25:9e:d8:52:95:b5:4e:86:4c:32:ce:
63:09:fd:5e:69:15:26:d2:53:8a:47:45:ac:3d:a4:71:00:d6:
41:b1:fd:49:6e:7c:4d:0f:d5:80:d5:c5:b4:2a:68:17:b1:5e:
ea:24:9c:8c:66:05:0e:52:12:18:22:b0:69:3b:8d:5c:b9:35:
d3:9c:0c:e8:29:4f:7a:f1:32:11:0c:e1:17:8b:db:ea:ee:f4:
11:ab:07:5c:d6:cf:b8:df:1e:cb:8a:83:ff:f5:e5:d5:02:98:
cd:04:0a:fa:d2:26:c5:c0:09:13:f4:08:dc:22:26:c4:aa:b8:
89:d0:ee:bb:1d:e8:e4:de:e4:82:32:94:33:8f:94:5a:56:f2:
cd:25:dd:ff:42:33:c6:65:a8:af:65:21:0d:e0:58:a6:2c:74:
9d:f0:66:63:07:c8:b0:d3:d0:31:60:1f:da:d5:3e:1a:1b:e3:
05:83:e2:e1:f2:0f:2a:27:f7:25:e0:82:48:56:84:a4:c2:62:
00:86:64:84:0b:3b:94:3c:14:ea:b0:53:b0:b8:1a:1c:4d:19:
06:4a:ee:f7:86:b2:07:65:a1:dd:2a:00:c8:89:be:9a:8d:d8:
36:8a:00:50:58:b6:6f:67:8b:ee:b1:06:9d:1e:99:8f:0b:5c:
f5:c9:7e:0b
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIUDw59oZ9dTGbwkx6rOzqzjm0UTYEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFCOTQyOTMzNkE4NjA0NjdDNzEwNTNEREVBMDU2NUVB
RTZFNzMwOTAeFw0yNjA0MTQwMjUyMDlaFw0yNzA0MTMwMjU3MDlaMDMxMTAvBgNV
BAMTKDEzRUM1REYxNEEwQ0FEMzVBODZBNkEyOEQ4MDJBNTlENEY0ODlFMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCogjRLAORxBp0FDVEv3j0SM2OU
nO/hFowQlz5yXvMbMovkj+n91/SsXIUQ+HJdQRlVz5AWK+G/Sm9hCtFF4zW0T7r8
rFi1e33+L1WjKmH+baDXjD5ZqrjWsaX4TK+101Kh1FngEeYwGv3A+w038GnnNTys
RdfHsb662G5KY8LWVuXAnhtjVHx+TU7ncuh7hICd8jIsqZIOoMfnODui5S2b3FOG
E25QTG306a7hi9G8ENzIC59wg5ax0fPh7Fq22Q+Q03lDzcEbwzogYCtJ+pp4/qB+
gNaCKMx82XC6yHqQQJKj6pr0LFn2VbgEcL6ry8b3/zKOyyJvYfxAD4usYUm/AgMB
AAGjggIVMIICETAdBgNVHQ4EFgQUE+xd8UoMrTWoamoo2AKlnU9InhcwHwYDVR0j
BBgwFoAUsblCkzaoYEZ8cQU93qBWXq5ucwkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjI2NjU5NTI3MDkxODE0Ny8wL0IxQjk0MjkzMzZBODYwNDY3QzcxMDUzRERFQTA1
NjVFQUU2RTczMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjFCOTQyOTMzNkE4NjA0NjdDNzEwNTNEREVBMDU2NUVBRTZFNzMwOS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NjI2NjU5NTI3MDkxODE0Ny8wLzMyMzQzMDM3M2E2
NDM5NjMzMDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMxMzQzNjM4MzMzNS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQC
AAIwBwMFACQH2cAwDQYJKoZIhvcNAQELBQADggEBANZ9TSsaPcglnthSlbVOhkwy
zmMJ/V5pFSbSU4pHRaw9pHEA1kGx/UlufE0P1YDVxbQqaBexXuoknIxmBQ5SEhgi
sGk7jVy5NdOcDOgpT3rxMhEM4ReL2+ru9BGrB1zWz7jfHsuKg//15dUCmM0ECvrS
JsXACRP0CNwiJsSquInQ7rsd6OTe5IIylDOPlFpW8s0l3f9CM8ZlqK9lIQ3gWKYs
dJ3wZmMHyLDT0DFgH9rVPhob4wWD4uHyDyon9yXggkhWhKTCYgCGZIQLO5Q8FOqw
U7C4GhxNGQZK7veGsgdlod0qAMiJvpqN2DaKAFBYtm9ni+6xBp0emY8LXPXJfgs=
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:01:54 2026 by rpki-client