
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096689320682651650/0/323430343a613030303a3a2f33322d3332203d3e203234313337.roa
File: 323430343a613030303a3a2f33322d3332203d3e203234313337.roa (raw, json)
Hash identifier: f7uZJ4DKuiWV/lnBGFZIRjbdf/EY3CWMNuQe7TulwPI=
Subject key identifier: 94:C3:EC:9A:EB:EE:F2:A6:B9:F1:08:1E:04:7D:2F:89:64:8F:C5:C9
Certificate issuer: /CN=833355AAAB477A3A1D2F649973B483982F9BA6CE
Certificate serial: 7BBB1E5F7E0DC011F41D90F7199BA57FBB2356AC
Authority key identifier: 83:33:55:AA:AB:47:7A:3A:1D:2F:64:99:73:B4:83:98:2F:9B:A6:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/323430343a613030303a3a2f33322d3332203d3e203234313337.roa
Signing time: Wed 15 Apr 2026 07:09:15 +0000
ROA not before: Wed 15 Apr 2026 07:04:15 +0000
ROA not after: Wed 14 Apr 2027 07:09:15 +0000
asID: 24137
IP address blocks: 2404:a000::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:09:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:bb:1e:5f:7e:0d:c0:11:f4:1d:90:f7:19:9b:a5:7f:bb:23:56:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833355AAAB477A3A1D2F649973B483982F9BA6CE
Validity
Not Before: Apr 15 07:04:15 2026 GMT
Not After : Apr 14 07:09:15 2027 GMT
Subject: CN=94C3EC9AEBEEF2A6B9F1081E047D2F89648FC5C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7b:69:53:84:a6:b9:7c:1c:9c:4a:92:42:e2:
16:47:ef:54:26:75:f6:83:2b:13:fa:a0:a8:87:27:
19:83:17:28:ca:a3:84:54:45:f2:6e:e8:fc:75:f2:
9a:9f:62:54:dd:74:39:32:3c:c5:86:46:89:be:19:
9d:41:98:d9:a5:e0:85:10:f3:fc:e3:61:6d:61:9f:
f9:6c:91:8a:67:e8:3e:4b:01:dd:d8:92:04:a4:3a:
39:67:40:d8:24:1f:06:0b:1a:e4:cd:cf:b3:17:0a:
09:19:72:94:bf:bd:9f:88:fe:c9:33:f8:8c:ba:40:
8a:26:f2:06:93:f7:b6:bc:4b:4c:d7:d4:75:33:33:
ad:d2:70:f8:ef:7e:0d:de:12:8a:2c:a4:3e:23:cc:
75:25:d6:2d:f2:ed:42:58:65:c9:57:9d:5c:26:7a:
f1:02:14:5e:17:4b:d5:12:79:e8:dd:75:a3:ff:bb:
a5:5a:78:33:19:4b:2c:b1:48:59:a9:71:81:71:83:
4e:19:31:ac:8d:f9:2b:3e:05:4d:6a:a3:4c:c0:ee:
f1:cf:8a:67:24:37:45:55:90:ce:10:0e:79:2c:19:
77:84:fb:0d:f4:3e:f3:0b:08:a3:d0:cb:5e:a1:d3:
55:b7:ba:94:54:2a:f8:38:01:19:c4:c7:63:3c:32:
c6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C3:EC:9A:EB:EE:F2:A6:B9:F1:08:1E:04:7D:2F:89:64:8F:C5:C9
X509v3 Authority Key Identifier:
keyid:83:33:55:AA:AB:47:7A:3A:1D:2F:64:99:73:B4:83:98:2F:9B:A6:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/323430343a613030303a3a2f33322d3332203d3e203234313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:a000::/32
Signature Algorithm: sha256WithRSAEncryption
0a:65:c8:62:ab:e8:5a:02:a3:4f:8e:c5:e6:03:a1:ba:cd:eb:
0a:90:25:9a:eb:a9:4e:a5:3c:9c:08:4a:28:29:e8:bd:2a:20:
5d:d3:16:38:2b:74:9f:bd:d4:2c:c6:c1:3c:cd:2d:38:1b:6a:
86:30:a2:c5:4b:24:01:44:2d:09:37:b6:2b:3d:7a:88:5c:96:
f3:54:cc:2d:f1:ba:13:ed:8f:cf:ba:27:f1:ea:6d:00:16:86:
8f:60:5f:e1:cd:de:6b:24:2e:33:b0:ac:94:2f:41:04:12:0c:
af:0d:46:18:d3:f4:90:df:38:97:57:b6:4e:68:65:db:fb:34:
ca:e5:c3:78:07:7a:27:5c:b5:97:84:92:80:23:d8:c6:cb:a5:
e7:07:1c:2b:99:25:cc:9d:3a:d6:44:49:7f:94:26:e1:7f:ac:
77:6e:ee:73:95:b1:9a:36:4e:f7:e6:19:bc:fa:dc:c9:cd:ce:
fc:75:ce:d1:3b:e7:87:07:96:73:91:50:05:d6:b4:00:65:15:
e6:ae:71:35:d7:c9:8a:85:f6:02:71:52:e9:15:f4:cf:e9:15:
0e:ca:81:bd:ac:44:49:6d:7c:23:01:3e:65:77:c0:a7:a2:a4:
07:25:aa:2d:56:5d:4b:f6:5d:a9:cd:40:de:65:bb:07:e9:0b:
84:7c:4a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:42:58 2026 by rpki-client