
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a396530303a3a2f34382d3438203d3e203234343233.roa
File: 323430323a343434303a396530303a3a2f34382d3438203d3e203234343233.roa (raw, json)
Hash identifier: 6OSkhLMvoybeYkPSkyahH7dP+iCdC0qVTNIaDmIyV2o=
Subject key identifier: 0A:34:43:03:A7:4E:2E:18:F8:AA:6F:CC:A0:EA:5B:74:3D:A0:34:26
Certificate issuer: /CN=050FFFF977C2D4CDECAE9AD46790A6C5631235A9
Certificate serial: 162060D4358D0F0719781DEBB484DA9535A21683
Authority key identifier: 05:0F:FF:F9:77:C2:D4:CD:EC:AE:9A:D4:67:90:A6:C5:63:12:35:A9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a396530303a3a2f34382d3438203d3e203234343233.roa
Signing time: Wed 15 Apr 2026 01:59:32 +0000
ROA not before: Wed 15 Apr 2026 01:54:32 +0000
ROA not after: Wed 14 Apr 2027 01:59:32 +0000
asID: 24423
IP address blocks: 2402:4440:9e00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.crl
rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:20:60:d4:35:8d:0f:07:19:78:1d:eb:b4:84:da:95:35:a2:16:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050FFFF977C2D4CDECAE9AD46790A6C5631235A9
Validity
Not Before: Apr 15 01:54:32 2026 GMT
Not After : Apr 14 01:59:32 2027 GMT
Subject: CN=0A344303A74E2E18F8AA6FCCA0EA5B743DA03426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ed:72:11:58:5f:ae:05:3a:de:a5:b4:19:32:
04:5c:81:18:f6:e1:34:ef:20:a6:c2:e6:83:1b:02:
46:22:e1:e0:a5:12:ff:2e:e2:22:8f:7e:7c:41:3e:
56:8a:69:61:2d:8e:d1:0e:bc:34:dd:19:00:0b:3c:
27:34:e9:01:86:6b:38:e2:30:03:a0:24:27:5d:1d:
90:74:e1:e9:a7:be:ac:26:3b:a0:e5:ad:2f:44:9a:
d4:8d:b8:c1:a7:d7:69:01:99:dd:6f:dc:d3:a4:d5:
3f:0b:1f:eb:6a:ee:00:e2:9d:25:6b:01:c2:d8:1a:
c6:28:e9:8e:29:21:18:df:a1:40:c9:10:27:09:27:
75:ef:67:34:24:68:da:2f:c4:ca:55:d8:b1:3e:a5:
ce:a9:9c:46:f3:5b:3d:30:76:bc:76:f6:6d:63:25:
f6:0f:9b:b2:43:90:b1:f2:e0:0d:ca:ca:94:e6:7c:
7a:6f:b9:43:ea:a5:b4:95:d6:e7:83:c3:0c:4a:29:
1b:46:43:0a:6c:f4:60:90:ff:d2:e7:6b:10:06:cd:
5b:28:5f:84:8e:64:3b:dc:42:d3:59:13:6c:ed:60:
91:ac:5b:6e:19:22:67:f2:15:40:66:2a:c2:98:95:
02:80:8c:6e:24:df:a2:ce:ed:ab:5e:08:15:eb:2c:
18:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:34:43:03:A7:4E:2E:18:F8:AA:6F:CC:A0:EA:5B:74:3D:A0:34:26
X509v3 Authority Key Identifier:
keyid:05:0F:FF:F9:77:C2:D4:CD:EC:AE:9A:D4:67:90:A6:C5:63:12:35:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a396530303a3a2f34382d3438203d3e203234343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:4440:9e00::/48
Signature Algorithm: sha256WithRSAEncryption
86:42:37:bd:45:f9:ee:04:65:aa:55:18:69:b5:ee:c2:00:7c:
7d:40:5c:42:45:5e:41:0f:e1:f8:e8:84:90:84:51:e8:55:93:
2d:c1:21:30:2f:71:b9:4b:73:42:0a:49:09:ab:32:0f:d4:4b:
93:c6:92:3e:4e:70:da:ce:fc:de:9c:b9:3a:cc:72:ff:68:46:
24:73:fa:3a:6d:77:85:25:d8:ca:9e:1c:76:96:2a:93:fd:89:
22:83:30:31:ad:2e:47:24:06:13:91:5f:3f:f8:61:43:a8:08:
31:6c:09:a0:97:85:87:5a:ed:fe:dd:35:dc:f6:b8:c8:1c:9b:
b0:95:ed:46:93:19:a5:5a:8d:69:69:f1:76:d6:b5:11:db:4b:
69:ae:11:2c:87:8a:b7:ae:db:a1:49:d4:88:e6:fe:71:c2:f2:
8f:f4:5a:83:9f:bd:75:0e:d3:39:3f:a3:0d:18:a3:50:94:33:
46:83:10:f3:b9:53:78:b4:94:b5:dd:3d:a2:9c:6a:1e:1e:20:
05:ad:cc:bb:40:4f:94:12:72:be:bf:c7:be:e8:41:06:86:93:
a7:ae:70:95:67:6c:51:65:d0:ab:96:cf:71:b5:cf:9a:35:00:
b8:b3:0c:45:5f:c6:01:a5:ab:66:ae:12:51:bb:93:26:24:d0:
08:ab:05:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:15:13 2026 by rpki-client