
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096586764014845955/0/323430343a333730303a3a2f33322d3634203d3e203536303436.roa
File: 323430343a333730303a3a2f33322d3634203d3e203536303436.roa (raw, json)
Hash identifier: pOPse9BV3gn6djAX7ecHkFVIUgN70stV1LcDDmPTYl8=
Subject key identifier: A7:E9:2A:20:3E:28:EB:C2:6C:5F:B0:21:67:A1:2B:0D:38:6C:4F:9E
Certificate issuer: /CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Certificate serial: 409CB742FE14E219B7C54018DBB7C72F01135300
Authority key identifier: F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/323430343a333730303a3a2f33322d3634203d3e203536303436.roa
Signing time: Thu 16 Apr 2026 00:21:02 +0000
ROA not before: Thu 16 Apr 2026 00:16:02 +0000
ROA not after: Thu 15 Apr 2027 00:21:02 +0000
asID: 56046
IP address blocks: 2404:3700::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 12:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:9c:b7:42:fe:14:e2:19:b7:c5:40:18:db:b7:c7:2f:01:13:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Validity
Not Before: Apr 16 00:16:02 2026 GMT
Not After : Apr 15 00:21:02 2027 GMT
Subject: CN=A7E92A203E28EBC26C5FB02167A12B0D386C4F9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2f:90:de:05:a4:00:2a:a9:18:7a:ff:18:b8:
5a:7b:cc:f9:8f:37:b1:f6:14:d0:34:fb:ad:36:d4:
79:f4:a6:e3:cc:d1:d4:04:7b:05:d7:26:83:b5:b4:
a0:85:34:c0:d2:f2:f6:fc:df:82:06:1b:69:44:c4:
98:2a:11:48:32:28:04:b9:2e:c4:b5:c1:39:ef:75:
08:9c:61:eb:8c:77:20:58:af:95:b0:a8:e5:d9:be:
a7:0b:aa:1d:f9:6f:48:70:ce:b7:0a:10:cc:5e:50:
cd:73:46:63:d1:89:ac:15:42:8a:70:55:d4:be:60:
f6:c0:34:91:6d:b5:e0:1a:2a:1a:70:04:f9:62:66:
7d:c8:3d:12:32:dc:74:24:a8:2d:54:31:c5:6f:b7:
53:02:e8:67:f4:7b:f3:9c:58:be:a8:b3:c5:67:0c:
9c:54:3f:df:5f:da:23:0f:f4:1b:c7:15:df:bb:5d:
87:63:01:83:2c:da:8c:f3:92:d2:f5:57:4a:86:ca:
7f:d6:f2:1a:9d:0e:47:38:c7:a6:25:de:f1:19:4e:
b0:4d:6f:96:9b:4d:e7:c3:a3:86:0e:be:8e:45:f6:
c4:c3:0b:2d:d0:24:b2:22:77:83:33:16:51:0b:d9:
57:e4:e1:c6:8b:10:85:a7:36:ad:c5:45:09:7f:93:
ea:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E9:2A:20:3E:28:EB:C2:6C:5F:B0:21:67:A1:2B:0D:38:6C:4F:9E
X509v3 Authority Key Identifier:
keyid:F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/323430343a333730303a3a2f33322d3634203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:3700::/32
Signature Algorithm: sha256WithRSAEncryption
c2:7f:42:06:0a:74:f4:de:9b:b1:de:49:85:c4:25:1f:31:d7:
57:72:ad:63:b5:56:dc:e2:15:23:0c:78:3d:45:f5:cd:5c:a6:
05:9e:53:0c:2f:24:b8:63:05:e5:93:09:29:e8:77:11:74:4d:
52:82:a2:4c:36:bc:ac:51:bf:05:21:0d:7c:13:57:b7:1f:a7:
4d:c5:f1:e3:bd:bf:45:5a:2c:99:c4:37:66:9a:7f:a1:4d:3e:
fd:b7:43:fb:82:a1:64:df:51:3e:c9:aa:a3:e8:2b:ac:b1:a0:
15:d9:ff:cc:24:14:99:d3:b6:0a:45:f8:cb:93:00:4a:62:b0:
18:27:59:b3:7e:04:44:05:af:f8:ab:00:39:a8:ce:4e:21:38:
8a:1b:c5:ee:56:81:02:0b:2e:8c:e9:bc:ea:13:f4:a3:b1:a6:
d6:63:05:b9:8a:cc:52:6d:b3:64:36:88:54:77:a4:0c:a3:90:
dc:82:fc:ee:63:9a:ed:56:bc:45:b8:db:04:8b:8f:d4:d7:51:
48:9e:c7:5f:7f:09:a0:c9:dd:32:60:60:cb:52:97:39:2b:51:
4c:bb:ed:6b:3b:82:02:40:6d:58:f5:e0:e3:2f:c5:4b:dd:4d:
83:c4:ed:53:4c:7c:c2:13:95:2b:5b:31:d5:60:83:65:fa:ab:
79:13:cb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:13:02 2026 by rpki-client