
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a393930303a3a2f34382d3438203d3e203234343233.roa
File: 323430323a343434303a393930303a3a2f34382d3438203d3e203234343233.roa (raw, json)
Hash identifier: ndblkSIAewMS9P14Jm2nCsebMTy0SpRMEqUNQPxXwIM=
Subject key identifier: 52:B5:E3:A6:05:17:30:6D:68:B2:94:86:96:12:A9:D8:E3:2D:E2:33
Certificate issuer: /CN=050FFFF977C2D4CDECAE9AD46790A6C5631235A9
Certificate serial: 01F20ED021715ED6AECE41554B1F1FE7E676CAE2
Authority key identifier: 05:0F:FF:F9:77:C2:D4:CD:EC:AE:9A:D4:67:90:A6:C5:63:12:35:A9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a393930303a3a2f34382d3438203d3e203234343233.roa
Signing time: Wed 15 Apr 2026 01:59:32 +0000
ROA not before: Wed 15 Apr 2026 01:54:32 +0000
ROA not after: Wed 14 Apr 2027 01:59:32 +0000
asID: 24423
IP address blocks: 2402:4440:9900::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.crl
rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:f2:0e:d0:21:71:5e:d6:ae:ce:41:55:4b:1f:1f:e7:e6:76:ca:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050FFFF977C2D4CDECAE9AD46790A6C5631235A9
Validity
Not Before: Apr 15 01:54:32 2026 GMT
Not After : Apr 14 01:59:32 2027 GMT
Subject: CN=52B5E3A60517306D68B294869612A9D8E32DE233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:82:af:f9:1d:51:a8:15:2a:84:cf:a5:ce:b5:
1e:df:27:20:23:19:30:32:a7:85:64:70:49:27:d6:
42:cf:5c:33:ca:70:01:06:03:22:0d:83:bf:2f:4a:
fc:f0:35:b4:64:d3:5f:2d:0c:da:19:e7:cf:87:03:
e8:05:bb:a7:a0:a1:06:26:c2:8e:5b:5c:5a:81:eb:
b2:13:c1:a4:b5:af:d0:bb:ea:72:d6:01:86:8b:ca:
dd:e7:09:9c:35:9e:70:fe:d2:ca:96:02:eb:68:e5:
d8:da:09:ae:07:71:37:48:56:11:77:47:95:92:00:
32:7e:9c:35:91:fc:cb:5b:4a:47:13:0f:86:7d:d4:
28:80:9f:46:ae:58:23:8e:a0:61:94:44:8b:66:c6:
76:5b:f0:c2:b2:5b:c1:be:17:c8:ba:99:ea:bf:47:
85:4a:03:c2:de:d1:8e:45:70:98:d7:b4:81:2c:b8:
86:f2:0e:9e:53:30:fa:2b:bc:4b:2e:9d:bb:89:93:
af:9e:9a:15:aa:55:66:40:d7:d4:b9:1c:d6:dc:e8:
48:d5:b3:27:78:3c:23:3e:eb:6c:c4:e0:1f:0a:a9:
0c:37:b1:e3:6e:d0:da:3e:94:22:43:c8:a2:24:7b:
6c:5b:f0:af:95:cb:80:b1:ba:98:62:c3:63:bd:0f:
29:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B5:E3:A6:05:17:30:6D:68:B2:94:86:96:12:A9:D8:E3:2D:E2:33
X509v3 Authority Key Identifier:
keyid:05:0F:FF:F9:77:C2:D4:CD:EC:AE:9A:D4:67:90:A6:C5:63:12:35:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a393930303a3a2f34382d3438203d3e203234343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:4440:9900::/48
Signature Algorithm: sha256WithRSAEncryption
a9:bf:30:0f:a3:b2:00:47:c5:8f:0c:b5:63:f5:5e:a2:1d:0a:
a8:43:6e:2e:e7:15:45:fa:2e:1d:67:1d:dc:26:40:f9:64:04:
f5:b6:13:6b:9c:14:e2:9c:0f:4c:df:12:4a:70:e9:19:8a:86:
90:13:84:7e:7e:6c:b0:0f:6d:0c:82:a5:65:67:77:fa:3c:8f:
82:49:4e:0c:47:7c:1a:3b:a4:51:ae:56:b2:04:70:cc:e6:ca:
11:75:06:10:16:78:8f:f6:c2:51:05:86:bc:4e:c6:0a:3c:9f:
89:1a:b8:b6:cd:3c:70:a3:85:bc:a2:8a:a3:a9:f9:db:2d:cc:
8e:ef:4c:7e:ba:a0:f9:90:3d:9c:c2:92:14:3d:dc:3b:3a:23:
f9:31:90:ff:5e:c3:57:07:85:84:50:57:de:46:b5:1d:d8:61:
a6:db:0c:5c:49:30:1f:49:00:dd:5c:d2:c2:75:72:2a:1f:f6:
ba:e2:8b:79:00:a3:1a:45:e4:c3:b9:91:c5:b6:aa:98:94:d2:
66:47:72:31:1b:13:ba:b9:90:56:89:3f:76:b1:c0:1b:93:6a:
01:62:7f:4a:ea:bf:a5:62:6e:68:1c:7b:d4:b2:33:55:2b:d6:
ad:e8:64:44:71:92:6e:60:15:56:2f:56:99:60:fe:a1:f6:28:
eb:63:4f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:15:10 2026 by rpki-client