
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a613830303a3a2f34362d3436203d3e203234343233.roa
File: 323430323a343434303a613830303a3a2f34362d3436203d3e203234343233.roa (raw, json)
Hash identifier: niXOoiH5dHCA4+uyKGvIZrgvFizwkLTA/Fd9nG3ofak=
Subject key identifier: 24:C1:3C:A3:D7:DD:89:D5:2B:19:10:D9:4E:C4:03:D5:7A:97:8B:CB
Certificate issuer: /CN=050FFFF977C2D4CDECAE9AD46790A6C5631235A9
Certificate serial: 6414E58DCD541AD0E32C91A987A817AD58CC69CA
Authority key identifier: 05:0F:FF:F9:77:C2:D4:CD:EC:AE:9A:D4:67:90:A6:C5:63:12:35:A9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a613830303a3a2f34362d3436203d3e203234343233.roa
Signing time: Wed 15 Apr 2026 01:59:33 +0000
ROA not before: Wed 15 Apr 2026 01:54:33 +0000
ROA not after: Wed 14 Apr 2027 01:59:33 +0000
asID: 24423
IP address blocks: 2402:4440:a800::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.crl
rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:14:e5:8d:cd:54:1a:d0:e3:2c:91:a9:87:a8:17:ad:58:cc:69:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050FFFF977C2D4CDECAE9AD46790A6C5631235A9
Validity
Not Before: Apr 15 01:54:33 2026 GMT
Not After : Apr 14 01:59:33 2027 GMT
Subject: CN=24C13CA3D7DD89D52B1910D94EC403D57A978BCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:67:11:65:ee:8b:f2:3a:d4:95:98:58:d8:6f:
e7:d9:d5:a5:dd:1e:95:fe:ad:00:0a:19:aa:98:76:
2c:d1:c6:50:41:88:37:71:df:a2:2a:5c:1c:3b:0e:
0f:74:66:b3:91:5b:72:ff:86:78:f8:f4:b8:85:b6:
1c:96:56:07:cb:de:ea:44:b4:db:12:ab:af:92:39:
e4:61:87:65:44:83:f6:c7:53:72:50:47:fb:aa:9c:
a1:4e:4c:ed:c9:21:0d:51:f3:4b:3b:e5:ef:d0:a0:
8b:00:fe:05:aa:ef:da:8e:0d:99:f4:cf:7d:66:38:
7e:18:bd:60:1e:14:5d:3d:db:b4:dd:2c:6e:2c:5a:
04:29:73:bf:92:05:ae:91:98:2b:15:32:3d:6b:7f:
59:df:9d:06:d0:97:b5:21:47:37:5a:4b:da:68:c0:
17:4a:5c:e3:41:e5:70:73:5b:d2:31:c3:0f:cd:49:
9c:8b:cf:97:65:54:50:7b:89:75:be:96:1d:88:ca:
fb:0b:a2:d7:2a:3b:7d:64:25:b1:58:1e:fe:d6:23:
1d:12:97:18:1e:9c:ba:c1:d9:97:31:72:90:fc:2b:
42:51:aa:78:ee:bb:ff:50:4c:4c:18:ed:f2:49:c0:
db:25:66:1b:d9:7e:42:06:70:99:2f:e3:be:76:4a:
1a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C1:3C:A3:D7:DD:89:D5:2B:19:10:D9:4E:C4:03:D5:7A:97:8B:CB
X509v3 Authority Key Identifier:
keyid:05:0F:FF:F9:77:C2:D4:CD:EC:AE:9A:D4:67:90:A6:C5:63:12:35:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a613830303a3a2f34362d3436203d3e203234343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:4440:a800::/46
Signature Algorithm: sha256WithRSAEncryption
3b:11:5c:39:fd:5a:47:57:30:71:1d:d2:bc:dc:46:1c:e9:84:
2b:ef:cf:24:41:38:56:7e:8d:3b:10:76:59:c5:3c:08:7b:87:
f0:8c:a0:8b:3f:50:35:d0:dc:c6:c9:18:47:8e:e0:e0:a1:44:
a1:dc:cf:7b:f6:49:b4:43:e2:61:fc:c3:67:76:fb:b1:84:12:
44:d2:48:7c:d4:c0:d4:4d:6d:43:35:21:37:db:e9:4f:4a:4e:
5c:73:5c:5b:41:e4:c1:1e:05:aa:7f:f2:a8:a8:53:48:e0:df:
88:57:28:07:72:e1:c0:6a:ea:8f:6d:8e:2c:a9:69:45:fd:f8:
22:a3:f9:3d:3e:e9:9c:ce:05:db:7c:a9:3f:29:c9:85:d2:68:
fa:67:5f:1a:33:c1:15:51:21:23:8b:f7:83:36:ea:e7:59:88:
73:a3:82:65:91:20:dd:7c:a6:3d:9b:09:ba:57:f6:d1:35:bb:
30:40:5e:70:04:9b:95:49:13:29:dd:20:17:11:95:32:58:bc:
dd:09:76:69:30:06:ee:1f:95:7b:8f:13:c1:a2:83:9b:36:02:
44:3b:63:ad:23:53:85:89:60:a0:37:31:2f:a4:1c:1f:e8:0f:
86:01:8f:f2:da:3a:06:f1:a2:52:d0:eb:dd:5a:71:3d:be:a4:
a7:6f:a7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:15:13 2026 by rpki-client