
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a363a3a2f34382d3438203d3e203536303431.roa
File: 323430323a396238303a363a3a2f34382d3438203d3e203536303431.roa (raw, json)
Hash identifier: JZLi7n10FjYUphodcQE5HPIxfI74+rBWB3uJ5IH/QUk=
Subject key identifier: B7:20:51:D3:BF:DB:CF:D6:85:B7:86:F7:39:4A:A1:42:C1:23:45:A9
Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Certificate serial: 32017BA7316703D648ED20A72CD170ACA5974045
Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a363a3a2f34382d3438203d3e203536303431.roa
Signing time: Wed 15 Apr 2026 09:35:31 +0000
ROA not before: Wed 15 Apr 2026 09:30:31 +0000
ROA not after: Wed 14 Apr 2027 09:35:31 +0000
asID: 56041
IP address blocks: 2402:9b80:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:01:7b:a7:31:67:03:d6:48:ed:20:a7:2c:d1:70:ac:a5:97:40:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Validity
Not Before: Apr 15 09:30:31 2026 GMT
Not After : Apr 14 09:35:31 2027 GMT
Subject: CN=B72051D3BFDBCFD685B786F7394AA142C12345A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6f:9b:69:88:38:a8:ab:8a:2a:47:2b:24:85:
8e:c2:81:45:c5:1c:32:12:c0:fd:f5:22:a2:5e:9c:
c6:14:cd:53:5a:49:3f:c4:25:66:ab:88:01:c9:ef:
3c:72:da:4b:4c:9e:f5:84:d9:f0:90:7a:0b:ac:f9:
17:6e:09:79:46:1e:15:f0:f2:85:c0:d9:4f:63:37:
59:23:fc:3b:ee:89:b8:31:6b:ec:05:96:8d:1d:c0:
78:9e:d6:e0:22:87:ca:02:69:8c:67:57:01:47:74:
19:44:14:6a:4e:20:18:5c:74:c0:20:c3:c9:23:8f:
01:23:5a:34:f9:5e:07:b3:6b:af:aa:94:90:a9:85:
08:b1:ab:9c:bd:93:0a:8f:a3:5a:0d:15:e1:67:37:
e1:ec:e7:dc:04:dd:0d:c6:3c:dc:f5:0b:24:db:b1:
63:9f:e2:65:44:c4:82:ec:13:c7:4a:8a:c2:ab:12:
70:e6:8a:54:81:39:dd:ea:1f:cf:29:24:75:9a:04:
a0:23:0a:64:96:7a:0d:c0:56:29:06:a2:1c:5d:a7:
ea:2d:f7:e3:f0:04:4c:d2:c4:d9:4f:be:16:f5:37:
2e:f8:d2:e7:9d:c3:20:36:39:f2:c1:be:0b:46:39:
9a:af:96:38:9a:56:1d:de:b8:1d:aa:2e:e4:e7:24:
9a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:20:51:D3:BF:DB:CF:D6:85:B7:86:F7:39:4A:A1:42:C1:23:45:A9
X509v3 Authority Key Identifier:
keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a363a3a2f34382d3438203d3e203536303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:9b80:6::/48
Signature Algorithm: sha256WithRSAEncryption
1e:0e:38:01:15:1f:ee:40:a0:51:b1:58:fe:fa:2a:9b:4a:6a:
3f:cb:e2:6b:20:46:2a:b8:1f:bc:87:66:c3:b8:c0:23:f4:93:
35:f1:11:a4:54:84:53:5f:73:82:56:32:b6:5e:e0:38:d1:07:
cf:b1:ae:35:91:1f:88:02:f3:40:a4:c4:17:fc:9d:09:85:de:
7a:3e:aa:d1:6d:c5:44:7b:af:5c:1b:6e:21:c9:e5:73:1f:9b:
70:c7:b3:7c:2f:0e:63:40:91:05:b2:dc:d1:8d:bb:cb:a5:e2:
bb:65:f5:87:77:84:a7:b4:0d:51:f6:a3:94:9a:a6:80:56:a7:
de:f5:ca:fa:47:65:e8:36:0c:6b:70:e0:3e:be:03:22:70:88:
a6:23:2c:14:ed:c3:8f:4d:cf:6f:44:43:e4:d4:a5:c2:6f:b7:
91:b7:09:75:52:85:72:9c:ad:12:4b:53:0f:fe:ef:9b:b3:24:
95:1b:a2:d1:42:d7:55:9a:06:c6:60:90:da:f0:6c:20:00:e5:
7d:cb:a0:c0:1e:16:84:9a:01:02:53:df:d0:9a:49:5f:82:8d:
94:b3:c1:eb:b8:03:d3:9e:6c:d7:7d:72:79:e6:c0:2c:71:42:
c8:60:ae:e9:9c:09:0a:9a:62:29:d4:c7:d5:85:67:75:21:4a:
01:50:55:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:33:05 2026 by rpki-client