
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a3a2f33322d3332203d3e2030.roa
File: 323430323a396238303a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier: z/3rWKNmQ5NKi0/rhSq+BirHLb2Jn/cWUm/pJjlR/Ak=
Subject key identifier: 94:3D:4D:EE:A0:F1:80:DD:BF:DD:97:45:48:07:C2:CD:12:C7:D3:EF
Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Certificate serial: 6A8E7C9ED66EF3B0C966B054EF6CDD3AAF37B446
Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a3a2f33322d3332203d3e2030.roa
Signing time: Wed 15 Apr 2026 09:33:03 +0000
ROA not before: Wed 15 Apr 2026 09:28:03 +0000
ROA not after: Wed 14 Apr 2027 09:33:03 +0000
asID: 0
IP address blocks: 2402:9b80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 06:20:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:8e:7c:9e:d6:6e:f3:b0:c9:66:b0:54:ef:6c:dd:3a:af:37:b4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Validity
Not Before: Apr 15 09:28:03 2026 GMT
Not After : Apr 14 09:33:03 2027 GMT
Subject: CN=943D4DEEA0F180DDBFDD97454807C2CD12C7D3EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ca:b0:78:a8:c3:76:c6:f1:af:68:75:68:05:
1f:04:39:3b:b1:fa:02:40:ad:e0:0c:ab:d9:17:8c:
70:85:7b:32:2e:5f:4d:a4:64:5e:a6:3a:1e:c9:ae:
b8:d0:9c:b7:d5:b1:e5:e3:e1:0c:94:84:1b:2b:72:
03:85:61:38:3f:1b:43:28:1d:dc:1f:65:50:0d:94:
d8:be:59:77:3b:e7:8d:e5:57:4d:ae:59:ad:68:80:
30:0b:0f:01:93:62:f0:74:96:12:31:39:e8:16:84:
d6:1c:2d:00:9a:06:25:5c:16:26:42:3e:08:35:89:
52:64:2b:f3:f2:e1:ee:ab:d7:35:d9:c1:4b:ef:69:
90:d0:b9:b8:4e:68:00:3c:79:ee:9a:b1:23:d3:10:
9b:64:19:3d:e8:8f:9a:ec:33:94:e9:08:d8:06:44:
64:83:34:4c:a6:6b:0b:60:63:0b:b3:37:e8:de:bd:
fd:64:75:cd:09:6f:a3:4b:3f:f2:fe:04:ce:de:45:
77:0f:0c:8e:5a:ce:d7:ca:f9:e8:d1:60:58:e7:bf:
98:3f:46:85:5b:f7:4f:fd:e5:f3:a7:ab:38:59:8f:
44:67:07:a2:ad:c6:cd:cb:40:e0:36:b0:b7:64:3d:
87:e9:ef:37:1a:ab:c6:2e:92:04:48:ba:23:e3:7f:
f7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3D:4D:EE:A0:F1:80:DD:BF:DD:97:45:48:07:C2:CD:12:C7:D3:EF
X509v3 Authority Key Identifier:
keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a3a2f33322d3332203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:9b80::/32
Signature Algorithm: sha256WithRSAEncryption
97:2d:02:a1:16:10:e6:13:95:6e:6d:2f:2a:bb:b7:62:61:7f:
6a:ef:68:38:a0:a7:b1:d2:29:41:f7:a4:4b:41:34:32:94:c8:
9c:1a:24:ed:ca:c8:a2:14:83:f6:96:82:ac:30:3c:40:35:98:
18:6a:63:fe:b3:14:de:88:a1:66:1e:67:cf:b5:2a:2a:34:05:
d5:6b:77:d1:cf:a7:41:79:07:7c:a7:1b:6f:ea:0b:c1:27:58:
33:8a:f6:51:e2:24:5e:07:2c:9e:d2:22:f0:67:ee:b3:07:10:
ce:51:4a:40:86:15:35:ff:45:88:43:77:99:05:0e:52:76:a5:
3b:38:3b:9f:4a:30:80:5d:14:4c:53:56:8d:d8:24:50:07:d9:
c8:5e:0a:9b:83:de:b3:8b:80:17:b7:5d:73:0a:6b:5b:ed:5c:
48:dd:d5:7d:21:19:bd:9d:a1:b0:ca:fe:8a:1f:83:9a:f8:f7:
3f:79:53:12:de:3c:cf:92:a1:39:5d:05:d9:eb:68:ca:93:c8:
c8:ef:02:87:42:96:d0:be:8f:90:13:88:3b:58:f7:46:bf:3e:
3e:67:49:a8:cd:5d:b5:61:72:6a:7c:a8:b7:98:3e:be:a7:b7:
eb:07:46:1c:72:b7:5f:18:bf:69:42:86:8e:5a:70:16:01:17:
d1:db:13:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:36:03 2026 by rpki-client