
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096586764014845955/0/323430343a333730303a3a2f33322d3634203d3e203231383539.roa
File: 323430343a333730303a3a2f33322d3634203d3e203231383539.roa (raw, json)
Hash identifier: Sn+tT3R7FUIVQa1TjOf+NsbHTswr92j/YhOMUuFNzYg=
Subject key identifier: 20:32:00:83:06:55:DB:A1:AC:4F:35:B0:82:F7:33:B9:28:2B:EB:2A
Certificate issuer: /CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Certificate serial: 619FEEA91F5A985A0651E7AA87DBAC2D76E4CA31
Authority key identifier: F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/323430343a333730303a3a2f33322d3634203d3e203231383539.roa
Signing time: Thu 16 Apr 2026 00:21:03 +0000
ROA not before: Thu 16 Apr 2026 00:16:03 +0000
ROA not after: Thu 15 Apr 2027 00:21:03 +0000
asID: 21859
IP address blocks: 2404:3700::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 12:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:9f:ee:a9:1f:5a:98:5a:06:51:e7:aa:87:db:ac:2d:76:e4:ca:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Validity
Not Before: Apr 16 00:16:03 2026 GMT
Not After : Apr 15 00:21:03 2027 GMT
Subject: CN=203200830655DBA1AC4F35B082F733B9282BEB2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3c:90:cb:61:b0:c2:38:04:ae:52:ed:a0:69:
c4:34:12:59:dd:a9:e1:da:cc:a5:54:c3:68:aa:e3:
69:a8:41:5c:6d:d5:ec:79:91:1d:59:72:44:d5:2f:
61:4e:47:04:5d:d3:55:5e:43:11:56:08:e4:03:12:
3b:57:07:c2:7d:05:f2:54:78:fa:64:10:1c:83:5e:
29:85:36:ff:39:06:12:27:7b:2d:8b:70:6c:ac:29:
ec:4c:2f:32:21:e7:f3:5c:fd:5f:ab:84:76:6c:d0:
38:4b:2b:25:fd:d7:b3:a9:e4:05:b4:81:b1:e5:6b:
7e:6f:97:42:2e:29:8c:78:f4:28:24:c5:33:77:46:
cb:f6:2c:b2:7e:7f:73:80:fd:ee:54:bc:ec:92:a0:
d3:ed:45:d5:f8:1e:fa:52:f1:df:71:04:a6:2f:5b:
f0:d9:5b:23:dc:2a:8d:c8:29:76:f9:a5:a2:65:8c:
64:bf:50:46:2b:c2:19:43:de:d1:eb:b1:73:c9:f5:
bc:94:ae:ca:34:7a:f3:48:7e:61:22:31:aa:fa:c4:
a7:09:24:8b:11:79:cc:08:6d:45:e3:43:09:c2:a5:
53:95:1c:8d:c0:09:27:cc:1d:16:6f:90:35:bb:14:
4d:66:ba:bc:18:62:27:ae:db:07:66:ad:e0:12:8d:
74:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:32:00:83:06:55:DB:A1:AC:4F:35:B0:82:F7:33:B9:28:2B:EB:2A
X509v3 Authority Key Identifier:
keyid:F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/323430343a333730303a3a2f33322d3634203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:3700::/32
Signature Algorithm: sha256WithRSAEncryption
81:c7:c5:00:cc:df:d2:f6:4d:6b:7e:52:f5:c3:79:46:0b:b3:
51:d9:a3:55:86:40:76:f7:25:fc:96:c4:3e:f3:3f:71:8d:7d:
1c:0c:3c:73:ce:85:61:83:44:dd:9e:91:11:76:64:86:56:14:
28:b1:ba:e2:a3:43:71:8d:9f:8d:e6:16:59:d4:68:d0:53:e7:
ee:9c:e9:16:cd:6d:41:71:77:d0:bd:67:2c:10:7a:82:a3:7c:
d1:be:10:7c:77:be:11:7b:a3:2b:be:47:9a:02:2a:d9:00:6e:
79:46:91:4c:74:16:43:f1:47:bc:d1:04:75:14:74:86:83:f1:
27:00:27:98:87:47:a1:ef:4b:17:57:1e:5a:fa:58:69:72:3d:
37:d9:56:6e:bb:73:65:27:ce:e0:cc:ba:8f:fc:51:a8:71:7b:
e2:fe:bd:23:48:2e:ef:d3:e3:0b:12:54:62:35:28:1b:3b:d3:
e2:59:ee:37:e0:77:7b:83:db:6a:3d:c3:f6:89:b3:fd:31:24:
a3:5f:17:bd:0d:21:b0:07:88:ea:db:09:ff:70:60:2c:b6:26:
9d:fa:26:d0:f4:17:30:54:b6:2a:3c:05:6a:1c:14:af:6e:51:
c8:47:a9:a0:3d:35:28:d5:72:83:a9:6a:b9:42:8d:f3:e1:e3:
56:38:51:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:28:19 2026 by rpki-client