
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a613030303a3a2f33392d3339203d3e203234343233.roa
File: 323430323a343434303a613030303a3a2f33392d3339203d3e203234343233.roa (raw, json)
Hash identifier: XpJgVEulLl9bwEFIJDOJHAVDLFn8iXc3ReP+cH5H/z0=
Subject key identifier: 35:41:6C:8A:AA:E7:AF:86:9D:45:37:7A:67:3F:39:46:E8:1B:0F:C8
Certificate issuer: /CN=050FFFF977C2D4CDECAE9AD46790A6C5631235A9
Certificate serial: 36CF2AC593576A897594703EFAD7AE545FB49063
Authority key identifier: 05:0F:FF:F9:77:C2:D4:CD:EC:AE:9A:D4:67:90:A6:C5:63:12:35:A9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a613030303a3a2f33392d3339203d3e203234343233.roa
Signing time: Wed 15 Apr 2026 01:59:32 +0000
ROA not before: Wed 15 Apr 2026 01:54:32 +0000
ROA not after: Wed 14 Apr 2027 01:59:32 +0000
asID: 24423
IP address blocks: 2402:4440:a000::/39 maxlen: 39
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.crl
rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:cf:2a:c5:93:57:6a:89:75:94:70:3e:fa:d7:ae:54:5f:b4:90:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050FFFF977C2D4CDECAE9AD46790A6C5631235A9
Validity
Not Before: Apr 15 01:54:32 2026 GMT
Not After : Apr 14 01:59:32 2027 GMT
Subject: CN=35416C8AAAE7AF869D45377A673F3946E81B0FC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:16:ea:71:a8:56:83:e0:24:c1:2b:d7:95:e1:
14:f6:f2:6e:ef:cd:c6:4f:25:2f:57:34:87:18:72:
e9:d8:9e:f2:06:ee:95:8c:6b:bb:f8:9c:2f:2f:9f:
7d:ac:7f:d9:65:3f:4f:27:cb:21:fe:27:16:cd:f9:
3a:b7:66:3d:dc:31:f8:82:0a:ff:f4:24:cc:05:3c:
2b:a3:d8:7a:8a:c7:c3:f2:21:a1:60:11:ed:01:3d:
35:c7:b9:f7:ea:aa:4b:81:2e:21:fe:a9:14:17:83:
df:7c:b4:73:61:49:fe:aa:f1:cb:31:0e:24:83:ae:
f3:00:fa:57:8f:04:fd:43:81:50:e1:14:1e:2f:ce:
ab:5c:01:6c:6a:78:52:fe:c7:67:f7:4d:c6:1f:3d:
ba:11:e2:85:7c:78:0d:cb:45:be:e1:23:4d:20:65:
e3:b1:dc:0d:a0:4c:5e:3d:ba:82:21:68:51:91:28:
4a:c9:cb:5f:f8:ca:ae:fe:b0:48:e7:dd:99:31:0a:
30:2b:28:5f:9b:2c:dc:70:cb:ce:c4:bb:55:62:16:
5a:da:47:95:ee:55:01:cf:f6:b3:d0:b3:29:6c:2c:
70:7c:45:a6:55:ab:ea:e7:d5:d1:ea:15:f1:94:31:
9a:71:bb:6d:12:e3:08:36:6c:22:f4:74:c5:0b:d4:
5d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:41:6C:8A:AA:E7:AF:86:9D:45:37:7A:67:3F:39:46:E8:1B:0F:C8
X509v3 Authority Key Identifier:
keyid:05:0F:FF:F9:77:C2:D4:CD:EC:AE:9A:D4:67:90:A6:C5:63:12:35:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a613030303a3a2f33392d3339203d3e203234343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:4440:a000::/39
Signature Algorithm: sha256WithRSAEncryption
a9:f5:19:ab:2f:d4:5d:df:1d:8b:37:35:df:e0:c2:a0:0e:f0:
ad:aa:d1:8b:77:33:ee:39:7d:d1:e6:09:94:86:bc:e1:28:79:
13:2e:e9:61:2c:1e:2c:0f:bc:a7:c5:41:a5:20:e7:00:05:dc:
0c:92:1d:10:42:97:22:9d:58:6a:09:41:4a:5f:4a:47:d8:74:
ca:07:69:61:0d:fe:40:21:ee:be:60:62:9f:68:39:32:6c:60:
97:92:af:c0:9f:fc:26:f2:3a:76:c3:8d:3b:7e:33:21:4a:49:
b2:5c:e5:41:25:3e:ec:0b:d6:95:97:72:9f:69:2c:b2:5c:de:
57:de:27:ec:a0:bd:4d:73:d1:7d:10:95:66:2f:7f:36:18:bf:
5e:20:f3:a2:82:fa:ef:b5:6c:f4:64:22:81:30:4d:89:0f:4e:
96:be:f1:93:44:9e:16:f7:2d:0b:93:2f:bc:fd:17:70:04:33:
42:52:49:20:55:71:06:45:1f:e3:bf:5d:d8:6e:20:6c:84:9c:
25:45:c3:67:cc:08:b8:85:9e:53:25:64:04:cf:9d:de:f0:9e:
b3:00:31:18:97:af:f2:6e:9d:9e:78:8d:3a:90:56:4f:9f:dc:
4b:f5:b6:b2:58:d1:9a:ba:53:b7:bf:b5:e9:d6:9f:66:66:45:
f4:20:d1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:15:15 2026 by rpki-client