
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a393430303a3a2f34382d3438203d3e203234343233.roa
File: 323430323a343434303a393430303a3a2f34382d3438203d3e203234343233.roa (raw, json)
Hash identifier: szfSeQAabscFweDBnHBrcgmKxlI4eZMN6bvrUqMfqdM=
Subject key identifier: D8:FE:B7:3B:41:9C:A7:0F:B6:9C:FB:3A:60:77:72:18:8A:EE:94:C2
Certificate issuer: /CN=050FFFF977C2D4CDECAE9AD46790A6C5631235A9
Certificate serial: 23E7C9F4087A4CA97C508588C75662BF0E089578
Authority key identifier: 05:0F:FF:F9:77:C2:D4:CD:EC:AE:9A:D4:67:90:A6:C5:63:12:35:A9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a393430303a3a2f34382d3438203d3e203234343233.roa
Signing time: Wed 15 Apr 2026 01:59:33 +0000
ROA not before: Wed 15 Apr 2026 01:54:33 +0000
ROA not after: Wed 14 Apr 2027 01:59:33 +0000
asID: 24423
IP address blocks: 2402:4440:9400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.crl
rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:e7:c9:f4:08:7a:4c:a9:7c:50:85:88:c7:56:62:bf:0e:08:95:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050FFFF977C2D4CDECAE9AD46790A6C5631235A9
Validity
Not Before: Apr 15 01:54:33 2026 GMT
Not After : Apr 14 01:59:33 2027 GMT
Subject: CN=D8FEB73B419CA70FB69CFB3A607772188AEE94C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d1:4e:58:63:7c:aa:73:4b:2f:42:7f:17:7b:
e0:3c:62:ff:fc:86:65:ec:3e:2c:d3:ed:ac:a6:49:
ef:6b:48:18:21:d1:a2:75:d7:5c:39:cf:0c:98:89:
dc:12:ef:61:a4:36:a3:fc:36:d0:b1:e1:e0:71:db:
6f:9e:96:00:5a:f6:00:0f:65:7b:cd:30:3f:8d:c4:
d4:d6:b6:b8:7c:ca:97:a3:a5:ec:fd:a5:94:38:93:
b1:45:a3:08:16:6d:90:21:7d:e9:44:ac:41:e9:eb:
16:ff:8b:42:26:23:40:e2:f9:05:07:f6:eb:64:66:
99:01:5a:e0:8b:7e:2f:8a:7c:44:9e:13:3b:03:3e:
5c:c5:0b:e0:51:29:1b:16:ce:6a:08:39:31:bd:a4:
28:64:a4:8d:52:24:d7:76:d4:e9:c4:64:95:61:05:
22:b1:4c:bf:29:22:f3:84:1c:55:01:0f:27:80:77:
01:67:cb:93:f1:8c:e4:11:47:74:c6:1c:b7:92:67:
2b:e1:56:ae:c2:63:87:98:ab:d7:c9:9c:39:17:a5:
8d:0a:81:89:53:5f:10:f4:92:b8:5a:65:e1:48:41:
12:a0:51:68:20:ed:ef:0d:96:9c:71:78:81:98:95:
af:8f:89:e0:53:23:5b:3c:00:1a:16:e1:79:9c:1a:
f6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FE:B7:3B:41:9C:A7:0F:B6:9C:FB:3A:60:77:72:18:8A:EE:94:C2
X509v3 Authority Key Identifier:
keyid:05:0F:FF:F9:77:C2:D4:CD:EC:AE:9A:D4:67:90:A6:C5:63:12:35:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a393430303a3a2f34382d3438203d3e203234343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:4440:9400::/48
Signature Algorithm: sha256WithRSAEncryption
b4:14:1c:0d:08:70:08:3a:51:41:76:e8:97:27:e6:49:99:fc:
a6:ec:a4:42:3c:cd:76:d1:cd:75:d4:60:86:a9:30:0b:0d:a1:
d5:49:38:15:c9:6b:ca:15:cf:aa:7c:bf:cd:04:3e:d0:29:12:
e5:13:39:4f:43:95:c5:85:f5:c1:89:a9:5d:76:c2:3a:f5:64:
23:10:a1:dd:9c:19:cc:6d:61:36:c1:14:16:5e:d0:a5:81:7e:
c8:94:5b:62:e7:e1:ad:06:4c:f8:d0:0d:81:a6:7f:c0:a5:bd:
0e:e7:eb:d6:c5:59:ff:b9:de:82:41:f7:a5:50:ed:f1:e7:18:
87:46:20:2a:63:97:08:98:4c:30:74:50:24:95:e5:11:97:37:
70:49:7c:96:28:9a:00:a1:61:70:a6:64:46:ad:03:3a:6f:0b:
d5:ca:b4:5d:d8:b9:17:57:89:3f:d7:2e:db:26:bd:da:32:7d:
10:86:e6:a8:98:d3:ba:ac:53:6f:f0:2f:31:fd:96:76:7d:eb:
65:5d:83:ac:20:40:58:06:ef:49:28:c1:23:29:c3:7d:8b:ab:
de:09:18:b2:d8:05:5a:86:6d:c5:9f:61:40:ca:18:1e:f9:85:
4c:73:6d:d1:81:c5:85:d5:38:c3:f6:59:ba:8b:2f:00:1e:ac:
c2:79:aa:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:15:10 2026 by rpki-client