
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a396330303a3a2f34382d3438203d3e203234343233.roa
File: 323430323a343434303a396330303a3a2f34382d3438203d3e203234343233.roa (raw, json)
Hash identifier: qtyqe0+FZBxyZixkJ98sy0dX8gOtPvzFGnQ1Lc5fjds=
Subject key identifier: 22:B9:4F:50:FB:39:20:1E:BC:79:EC:32:7A:85:08:61:64:0C:1B:E9
Certificate issuer: /CN=050FFFF977C2D4CDECAE9AD46790A6C5631235A9
Certificate serial: 222299965D90C28E9A68082F0B88A09DEEBC0654
Authority key identifier: 05:0F:FF:F9:77:C2:D4:CD:EC:AE:9A:D4:67:90:A6:C5:63:12:35:A9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a396330303a3a2f34382d3438203d3e203234343233.roa
Signing time: Wed 15 Apr 2026 01:59:32 +0000
ROA not before: Wed 15 Apr 2026 01:54:32 +0000
ROA not after: Wed 14 Apr 2027 01:59:32 +0000
asID: 24423
IP address blocks: 2402:4440:9c00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.crl
rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:22:99:96:5d:90:c2:8e:9a:68:08:2f:0b:88:a0:9d:ee:bc:06:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050FFFF977C2D4CDECAE9AD46790A6C5631235A9
Validity
Not Before: Apr 15 01:54:32 2026 GMT
Not After : Apr 14 01:59:32 2027 GMT
Subject: CN=22B94F50FB39201EBC79EC327A850861640C1BE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ab:1f:0b:17:2d:b4:58:67:ce:3f:49:07:df:
04:8d:3b:4c:80:54:65:a0:58:f8:0c:f1:b4:e9:4e:
91:be:2f:df:89:19:a8:7f:bb:c6:34:e1:6e:39:72:
63:e9:86:dd:92:98:7e:d6:f7:1e:f8:63:ef:ce:23:
ec:40:89:10:29:67:5e:85:3b:55:83:95:0e:d7:f3:
01:1c:13:91:3c:d2:15:0f:33:9a:71:d1:ff:50:1d:
5f:91:69:49:7c:c3:e6:d5:23:2e:cb:f8:cd:f1:bc:
c3:cd:28:57:47:69:f0:98:95:2f:6a:4a:59:a3:29:
fa:76:ec:f7:f7:44:b2:11:5e:f1:6b:20:f5:a1:98:
6a:e0:c8:d1:21:03:2d:db:64:48:c2:f8:29:aa:b3:
01:ee:48:94:78:0e:68:75:45:6f:d0:33:4a:34:33:
9f:fe:05:2d:6a:a4:27:1a:0c:0c:73:a4:66:23:09:
5b:06:5e:d3:12:8c:75:d3:df:f0:c5:0c:48:c0:ae:
b2:95:31:ab:39:04:2b:56:5d:30:e7:6f:81:e7:73:
5a:46:b9:80:02:a5:ab:6c:f5:e2:49:29:42:5a:05:
33:67:2a:cd:24:0d:ff:64:af:b2:e1:64:c7:e2:51:
67:5f:c2:c5:cb:32:56:1d:01:1b:7d:e5:a6:76:b6:
2d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B9:4F:50:FB:39:20:1E:BC:79:EC:32:7A:85:08:61:64:0C:1B:E9
X509v3 Authority Key Identifier:
keyid:05:0F:FF:F9:77:C2:D4:CD:EC:AE:9A:D4:67:90:A6:C5:63:12:35:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a396330303a3a2f34382d3438203d3e203234343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:4440:9c00::/48
Signature Algorithm: sha256WithRSAEncryption
89:4d:29:0b:f4:81:02:40:08:4d:08:45:33:13:87:8b:b8:58:
6f:4d:ca:dc:72:46:97:82:12:5b:c5:3c:09:0f:43:99:06:0d:
25:31:00:9a:81:cc:2d:7e:d5:0c:52:28:b0:90:f6:56:e7:77:
42:bc:4b:b1:23:5c:6d:9c:cc:d9:9d:c5:44:78:3f:ca:6a:7c:
02:2f:55:c1:54:99:9c:38:c6:b3:86:9e:ba:59:84:30:c4:ef:
bb:83:68:8d:d0:86:94:78:a5:e7:dd:36:f5:8d:1f:d4:8f:b3:
76:f3:4f:74:8c:9f:42:d5:69:e4:32:eb:c4:85:ca:52:be:c8:
af:df:6f:be:01:37:22:4d:e7:f5:0a:d3:9f:ff:9c:83:c0:ae:
96:d9:df:86:67:94:d1:b9:91:e9:d4:42:ad:72:10:82:88:45:
8e:b5:e7:ba:92:a7:ba:54:eb:e3:9d:62:7f:85:8e:92:56:b7:
f6:1d:f7:96:a4:3c:2d:37:15:e2:4e:43:9c:5c:9a:33:17:90:
6d:b9:d9:d8:63:cf:ec:3d:b0:37:45:60:ba:fb:b7:66:e9:bb:
1b:7d:41:06:eb:c9:f6:15:42:8b:dd:71:b1:be:d4:7a:dc:dc:
28:79:c1:c2:a2:06:ce:55:27:ad:04:58:e7:14:3c:05:75:d8:
87:96:40:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:15:11 2026 by rpki-client