
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a396130303a3a2f34382d3438203d3e203234343233.roa
File: 323430323a343434303a396130303a3a2f34382d3438203d3e203234343233.roa (raw, json)
Hash identifier: EkBwEq+Thg5eoHd88NnHBPrO9dAu1w+Q+MC4xBewKoM=
Subject key identifier: 59:D0:0C:CB:AE:8A:5D:44:E4:65:34:61:70:5A:C5:CC:64:5A:49:F5
Certificate issuer: /CN=050FFFF977C2D4CDECAE9AD46790A6C5631235A9
Certificate serial: 7CACC8F6F61FBC06686A3F5240BE71441D77CFB4
Authority key identifier: 05:0F:FF:F9:77:C2:D4:CD:EC:AE:9A:D4:67:90:A6:C5:63:12:35:A9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a396130303a3a2f34382d3438203d3e203234343233.roa
Signing time: Wed 15 Apr 2026 01:59:33 +0000
ROA not before: Wed 15 Apr 2026 01:54:33 +0000
ROA not after: Wed 14 Apr 2027 01:59:33 +0000
asID: 24423
IP address blocks: 2402:4440:9a00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.crl
rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:ac:c8:f6:f6:1f:bc:06:68:6a:3f:52:40:be:71:44:1d:77:cf:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050FFFF977C2D4CDECAE9AD46790A6C5631235A9
Validity
Not Before: Apr 15 01:54:33 2026 GMT
Not After : Apr 14 01:59:33 2027 GMT
Subject: CN=59D00CCBAE8A5D44E4653461705AC5CC645A49F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c5:83:fe:0d:41:73:ea:09:d0:e6:0c:21:d8:
ae:d4:48:b6:cb:e1:67:e5:33:9f:00:c9:42:e1:20:
8e:dc:ba:86:ae:56:2d:a8:42:ca:e9:98:1e:f9:7a:
63:c1:a2:f0:7b:58:8c:30:84:f7:0b:c4:f5:d6:5d:
ae:52:5e:23:c3:b3:6e:c7:f4:46:33:9f:a1:06:68:
98:8a:62:63:4c:5f:9b:ed:14:7d:3a:cb:a8:2e:e1:
fd:e2:a3:88:2e:ad:30:db:c8:1a:66:a4:d9:6f:86:
cc:9e:48:fd:f6:3d:d0:ba:52:ae:21:00:8b:2c:0a:
52:8b:e9:fd:4f:81:81:56:a9:77:bc:13:92:a8:0b:
ca:4e:15:df:45:89:7d:ab:45:eb:ad:0a:05:ab:da:
91:c7:1d:f5:ae:69:ce:fc:fb:ad:ac:ad:34:28:38:
f6:03:4c:e1:9f:8b:28:30:7b:46:a1:3e:79:07:1b:
a6:e8:2d:34:f0:da:f0:f7:e2:c3:fe:05:3d:cb:ae:
27:34:a8:f9:f4:6d:45:91:40:e7:fc:61:e0:3c:22:
05:59:ab:38:94:ab:a1:0b:a6:80:11:7e:d9:29:ed:
79:65:b6:f1:18:18:58:86:58:20:4a:03:65:5a:05:
e7:c0:4b:66:a8:ae:e0:5e:d0:2d:1f:18:e5:f5:ab:
3e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D0:0C:CB:AE:8A:5D:44:E4:65:34:61:70:5A:C5:CC:64:5A:49:F5
X509v3 Authority Key Identifier:
keyid:05:0F:FF:F9:77:C2:D4:CD:EC:AE:9A:D4:67:90:A6:C5:63:12:35:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a396130303a3a2f34382d3438203d3e203234343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:4440:9a00::/48
Signature Algorithm: sha256WithRSAEncryption
09:38:b9:75:05:6d:39:a9:01:99:78:29:6f:1b:86:61:7b:df:
11:da:04:89:26:70:ed:69:0b:a1:b4:94:01:4e:94:d7:3e:78:
6a:35:01:56:c2:eb:37:4a:ba:5d:08:30:72:05:77:cc:fb:95:
22:a1:fc:57:a1:b8:b6:d7:64:3b:4e:88:df:9e:3b:1e:4b:84:
0e:37:44:38:5d:1d:56:f9:ac:e9:3e:3c:df:a5:3e:e5:d4:de:
08:06:3a:70:c3:38:44:95:70:6c:78:6e:9a:00:73:c4:fe:28:
5f:64:ba:c8:18:47:80:7e:71:0f:2e:8a:02:62:17:ce:7f:7a:
b7:a8:f1:40:b1:6b:69:3e:2d:de:39:f5:2e:70:e6:1f:c4:da:
c2:66:f2:43:26:9d:b6:21:d4:2d:b5:17:be:02:ba:03:60:68:
25:22:89:61:ce:6d:c9:99:29:3f:d2:32:bc:2b:2a:be:aa:bc:
c0:d4:42:ee:4d:28:64:71:32:8a:3a:d3:25:f8:65:41:c3:c9:
db:3e:8c:c6:3b:fd:98:7e:5e:11:fe:3d:a7:14:29:42:03:b4:
28:1d:88:2e:8c:c4:94:56:88:c8:58:99:5c:24:af:82:71:64:
8c:35:28:61:33:68:bb:c8:5b:75:5b:50:dd:2c:75:f1:46:8e:
fb:a0:f7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:15:14 2026 by rpki-client