
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a613a3a2f34382d3438203d3e203536303431.roa
File: 323430323a396238303a613a3a2f34382d3438203d3e203536303431.roa (raw, json)
Hash identifier: NsRQbls4s9nLv5qLs2Z7xndSl6D0EKI+3ouXIxtT964=
Subject key identifier: AE:C9:6A:CB:43:52:CA:21:8D:D9:74:A7:EE:CC:B1:67:F4:A4:8F:68
Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Certificate serial: 7F3CE96F279A9195318003FD4344E0EA84702F9E
Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a613a3a2f34382d3438203d3e203536303431.roa
Signing time: Wed 15 Apr 2026 09:35:30 +0000
ROA not before: Wed 15 Apr 2026 09:30:30 +0000
ROA not after: Wed 14 Apr 2027 09:35:30 +0000
asID: 56041
IP address blocks: 2402:9b80:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:3c:e9:6f:27:9a:91:95:31:80:03:fd:43:44:e0:ea:84:70:2f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Validity
Not Before: Apr 15 09:30:30 2026 GMT
Not After : Apr 14 09:35:30 2027 GMT
Subject: CN=AEC96ACB4352CA218DD974A7EECCB167F4A48F68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:37:70:38:52:34:c0:4d:6d:e4:64:37:a1:12:
47:54:30:c4:2b:ec:f1:cf:63:97:bf:54:ab:a6:58:
98:32:9e:35:fa:ea:71:6d:aa:52:ce:bc:d0:c1:27:
cc:91:44:e2:1b:df:1e:44:8a:3e:f7:3f:26:47:fd:
49:fc:f1:5a:91:72:03:db:63:07:2e:7e:87:e4:27:
bd:41:81:32:5f:03:c6:dc:85:b5:7f:f4:b0:15:b6:
01:93:ba:1e:62:34:26:4e:3e:88:23:6f:ce:c4:98:
d6:59:a9:b0:4a:00:c7:73:68:ea:83:4c:1a:26:db:
07:31:62:7f:83:87:9d:d5:79:3c:2c:2a:26:f4:7c:
54:62:88:b4:41:d0:bb:dd:5f:15:04:49:a8:db:0a:
4e:1f:e4:1f:7a:8f:7a:a4:6e:00:e7:3d:69:3e:60:
09:4b:4e:f3:3b:90:f1:d3:c6:d4:71:46:d6:fa:42:
bb:a8:28:32:67:66:59:7a:c7:78:00:f7:26:6c:db:
d6:64:66:20:5d:31:b7:2b:3e:1b:4e:7b:b9:6f:d1:
59:ea:c1:aa:f9:8c:97:fd:3f:5b:15:e6:1e:1e:fb:
96:5b:4e:9f:22:54:94:84:fa:3b:cb:69:00:61:d7:
65:12:da:c3:d1:be:c4:b0:bb:95:6d:47:a7:bb:f1:
41:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C9:6A:CB:43:52:CA:21:8D:D9:74:A7:EE:CC:B1:67:F4:A4:8F:68
X509v3 Authority Key Identifier:
keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a613a3a2f34382d3438203d3e203536303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:9b80:a::/48
Signature Algorithm: sha256WithRSAEncryption
b8:e9:5e:cd:4c:d2:18:0c:80:ac:1f:36:03:48:df:4f:f9:3f:
d5:9e:db:95:22:d5:fc:2a:9b:03:39:af:57:c1:7e:35:70:82:
29:71:02:fc:9d:37:14:b9:f6:37:49:a1:ee:5c:95:c6:75:c5:
f0:c4:5d:79:cf:b1:e8:e9:bf:bc:5c:c9:ef:a1:eb:fd:80:dd:
6b:dd:5e:6f:2b:05:9d:ae:86:78:c5:42:29:f1:53:a0:d9:2e:
58:d3:d1:30:da:15:b0:8c:0b:d5:ec:75:a1:2a:52:2d:d8:c3:
65:39:ff:cb:0d:26:5f:69:5b:11:32:31:67:79:d3:18:21:a7:
8b:b2:d2:40:f4:17:05:c7:ec:38:63:0d:8a:8d:4e:20:d5:8f:
21:54:28:de:31:b8:74:9a:48:9b:ae:b5:1c:35:f0:e8:f0:c2:
ed:07:12:d8:34:39:22:26:ee:36:c5:ca:0c:94:ba:f7:19:3c:
38:11:ac:d0:21:cf:a6:da:05:1d:eb:5e:ab:e9:16:61:c7:57:
4a:7c:6d:7f:0b:26:80:93:32:63:bb:84:23:53:18:60:8d:eb:
a5:16:be:7e:7a:30:c6:38:84:0a:56:ce:c0:74:5d:11:62:e8:
48:e6:25:6b:b7:93:f1:ec:cf:27:58:1a:5b:8a:d7:46:93:cc:
a6:c5:f2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:01:44 2026 by rpki-client