
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096689320682586114/0/323430323a653638303a3a2f33322d3332203d3e2030.roa
File: 323430323a653638303a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier: 6nLYCWK48FiM/igQDUW+g9AOHXsfwPpZ72/3GSFCJtQ=
Subject key identifier: 42:BB:F8:D3:EF:2E:6C:D9:66:01:90:6A:8E:46:B9:B8:A0:46:2F:94
Certificate issuer: /CN=526198C6FEC4729E2A08209CDB07E7BD6537198F
Certificate serial: 4CDA2377EFB32BE0AC73B898926E9ACA90034063
Authority key identifier: 52:61:98:C6:FE:C4:72:9E:2A:08:20:9C:DB:07:E7:BD:65:37:19:8F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/323430323a653638303a3a2f33322d3332203d3e2030.roa
Signing time: Wed 15 Apr 2026 07:03:03 +0000
ROA not before: Wed 15 Apr 2026 06:58:03 +0000
ROA not after: Wed 14 Apr 2027 07:03:03 +0000
asID: 0
IP address blocks: 2402:e680::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.crl
rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 17:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:da:23:77:ef:b3:2b:e0:ac:73:b8:98:92:6e:9a:ca:90:03:40:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=526198C6FEC4729E2A08209CDB07E7BD6537198F
Validity
Not Before: Apr 15 06:58:03 2026 GMT
Not After : Apr 14 07:03:03 2027 GMT
Subject: CN=42BBF8D3EF2E6CD96601906A8E46B9B8A0462F94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:41:45:7a:13:f2:90:a6:97:0c:8f:a1:1b:ce:
5b:04:8b:66:1f:fb:5e:14:4a:d8:28:29:a7:6c:ec:
93:24:dd:9f:88:cd:2b:54:45:a5:41:95:4d:a6:6b:
80:2c:0e:19:c3:e3:d3:ce:16:d3:24:e7:0e:6e:57:
29:3f:e4:ee:92:ae:5f:b7:b8:1e:cf:58:50:45:3a:
55:51:2a:72:69:19:13:26:c8:e1:35:d5:0e:87:c4:
34:9e:2b:28:cb:06:4a:62:7b:c0:a9:95:4c:49:3a:
72:c9:7e:df:0a:ac:b8:57:92:f1:8c:18:7d:33:a3:
d3:96:1e:f8:12:83:4e:2b:78:9d:f7:ff:45:fd:00:
d3:d3:94:dc:8b:f1:5c:d3:34:2e:92:a8:3e:d4:89:
b5:ff:ae:2a:0d:fc:b4:33:7e:70:98:1f:81:1c:6a:
ec:f6:87:8d:8d:f8:e4:b7:f9:c8:4e:31:5f:62:0b:
2d:e0:35:ed:58:48:c1:7f:23:60:07:24:1a:9e:70:
3c:f9:55:a0:ef:b5:41:b8:fc:65:dc:7c:41:77:54:
26:03:fe:35:f0:23:85:76:e6:67:6b:8e:fc:bb:a3:
24:2c:c3:13:c5:57:99:cb:0e:cc:29:86:74:9c:4f:
1f:a5:50:8d:b7:8b:a4:bc:74:72:c2:d1:91:a7:5c:
91:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BB:F8:D3:EF:2E:6C:D9:66:01:90:6A:8E:46:B9:B8:A0:46:2F:94
X509v3 Authority Key Identifier:
keyid:52:61:98:C6:FE:C4:72:9E:2A:08:20:9C:DB:07:E7:BD:65:37:19:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/323430323a653638303a3a2f33322d3332203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:e680::/32
Signature Algorithm: sha256WithRSAEncryption
c3:eb:f3:1b:ba:89:e0:26:d7:60:0f:59:e3:2d:03:15:96:3c:
9a:c4:23:7f:5b:fa:4b:7f:fd:53:89:8b:b6:b3:6d:37:d0:c3:
e2:a4:4c:ae:66:65:28:07:af:70:17:9d:e7:a2:2d:78:b0:d4:
1c:07:f7:38:57:8b:da:ff:25:dd:67:d8:8e:8c:11:75:43:4e:
3c:0d:1d:30:0f:0e:3b:d8:b6:f9:7b:69:43:55:07:56:9f:c1:
cc:73:85:a9:70:68:e5:c2:7b:8c:ad:6c:33:13:df:e9:4c:84:
18:2d:0c:8d:33:3a:bd:a4:84:db:4f:b0:63:bf:be:bd:72:59:
11:2a:92:9a:bf:fb:b2:89:2e:bf:b8:b2:1f:24:09:34:17:1c:
c6:07:e3:13:a0:f8:e1:4a:d0:4b:c5:4a:5e:33:44:19:70:21:
a0:35:a5:85:4b:2a:31:52:4c:1d:c6:f2:73:fa:49:74:95:9e:
42:b2:29:56:31:d3:8b:e9:7c:d6:25:80:bb:a3:bf:e8:b7:2a:
04:f6:1f:99:af:c7:a4:28:73:55:07:e6:d9:63:81:34:8c:4f:
fe:d5:07:25:b1:87:9b:33:f7:c9:06:5b:60:63:94:4d:6e:25:
d2:44:43:ea:c1:82:57:a6:0f:02:3e:79:cc:44:2e:ad:b1:dd:
aa:3e:98:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:36:04 2026 by rpki-client