
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a393030303a3a2f33392d3339203d3e203234343233.roa
File: 323430323a343434303a393030303a3a2f33392d3339203d3e203234343233.roa (raw, json)
Hash identifier: PcINQIvFJTDL7feUyMU+LoM5jK/n0OyohQAvoPiRcTs=
Subject key identifier: 3D:FD:BC:A7:90:0F:09:87:87:D2:73:F8:21:2B:D4:E7:5D:76:6A:EC
Certificate issuer: /CN=050FFFF977C2D4CDECAE9AD46790A6C5631235A9
Certificate serial: 569BC8748B9EE97DC70E849D8BF1374CABF41F44
Authority key identifier: 05:0F:FF:F9:77:C2:D4:CD:EC:AE:9A:D4:67:90:A6:C5:63:12:35:A9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a393030303a3a2f33392d3339203d3e203234343233.roa
Signing time: Wed 15 Apr 2026 01:59:33 +0000
ROA not before: Wed 15 Apr 2026 01:54:33 +0000
ROA not after: Wed 14 Apr 2027 01:59:33 +0000
asID: 24423
IP address blocks: 2402:4440:9000::/39 maxlen: 39
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.crl
rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:9b:c8:74:8b:9e:e9:7d:c7:0e:84:9d:8b:f1:37:4c:ab:f4:1f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050FFFF977C2D4CDECAE9AD46790A6C5631235A9
Validity
Not Before: Apr 15 01:54:33 2026 GMT
Not After : Apr 14 01:59:33 2027 GMT
Subject: CN=3DFDBCA7900F098787D273F8212BD4E75D766AEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:99:97:58:e3:5d:b8:66:d6:75:f1:7e:39:4e:
5a:f9:fa:0a:d3:10:ee:97:8f:1f:87:39:8b:e5:0d:
0b:d0:67:ca:a8:80:89:e1:08:b7:f9:1e:50:1d:78:
ef:f3:ad:56:7e:6f:e7:5d:e6:86:bb:11:22:4e:1b:
a7:4e:a3:15:0d:cf:9f:ab:52:2d:1f:0c:77:08:65:
5b:74:68:93:b1:01:c7:65:c2:56:a1:1d:da:33:6c:
19:71:a6:83:3c:93:58:e9:58:dd:8d:b9:6c:42:b4:
25:13:e5:7c:71:20:3a:16:8e:09:e1:1f:85:f6:9a:
e1:36:24:40:82:f4:37:ec:11:3e:04:37:6d:ea:dd:
7a:9b:3b:01:f7:f1:1e:85:57:c2:d9:e9:d8:55:91:
c8:54:e6:76:77:18:f6:b2:76:e1:97:2a:0e:5d:a8:
7c:9f:91:e1:e8:ad:ee:3b:05:eb:35:d5:73:3e:d2:
8f:fb:7d:2f:b2:b4:f8:25:a0:33:0d:de:08:42:09:
22:de:cc:26:95:dd:b9:af:75:ea:e3:30:94:ea:a6:
26:3e:bd:2d:b5:39:aa:d0:54:b9:40:b9:71:48:a1:
3e:cc:15:1e:42:ce:f1:21:48:6e:cd:a3:7b:22:24:
eb:97:30:26:aa:1b:ea:e4:8d:56:e4:72:39:3f:44:
b3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FD:BC:A7:90:0F:09:87:87:D2:73:F8:21:2B:D4:E7:5D:76:6A:EC
X509v3 Authority Key Identifier:
keyid:05:0F:FF:F9:77:C2:D4:CD:EC:AE:9A:D4:67:90:A6:C5:63:12:35:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a393030303a3a2f33392d3339203d3e203234343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:4440:9000::/39
Signature Algorithm: sha256WithRSAEncryption
b0:96:42:29:c3:44:f6:97:c3:6a:3e:30:e2:74:59:26:b7:d2:
86:38:b1:20:ec:ca:0b:d5:0f:6f:1a:85:f1:70:72:fc:4d:ad:
57:51:e7:e5:fe:c6:12:ae:b2:3a:72:08:f5:6d:7e:80:ff:4a:
fd:43:d8:05:d7:26:71:83:6e:57:a0:fd:1a:23:4c:7b:ce:c9:
b5:4a:e4:bf:29:1d:6f:32:82:c2:32:82:db:a4:93:ad:32:d1:
88:07:a8:27:f9:b6:d7:da:2f:91:6b:b9:3c:c6:15:4f:7b:d7:
44:9a:84:e4:d5:eb:d3:1c:a1:ef:12:91:a9:be:0a:45:98:a8:
f4:07:03:19:17:8b:e4:1f:a3:c1:84:12:fc:e6:9e:f4:40:e9:
76:8a:53:a2:36:b9:68:59:24:23:c3:de:69:b7:28:c2:eb:f3:
0c:4d:7a:02:4d:f4:a9:07:57:60:ed:9d:cd:b8:3a:4f:c5:78:
e2:bf:fb:73:85:a8:42:5b:b4:95:9a:8a:dd:06:6b:c6:1d:32:
05:d3:61:f3:c3:f3:60:b9:8b:5d:81:e4:5d:eb:f4:b2:15:04:
2a:d0:2f:04:d1:f8:27:e6:89:1a:73:69:c2:af:f2:f9:be:6f:
e5:54:1e:15:28:13:a0:d6:0e:26:6b:3b:85:08:35:0e:6d:1a:
dd:71:17:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:15:14 2026 by rpki-client