
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097055396041850881/0/323430313a623638303a3a2f33322d3332203d3e203539303239.roa
File: 323430313a623638303a3a2f33322d3332203d3e203539303239.roa (raw, json)
Hash identifier: 0xsWJiBAYh85bQMpPPT/JzdFjGAKm7ZV6N912fkq2EQ=
Subject key identifier: 76:41:AB:B3:32:6E:9D:7E:C6:1F:F3:AD:6D:08:17:B6:6E:4D:A3:97
Certificate issuer: /CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551
Certificate serial: 434C072B1A4DD4696DD574713D8D7245477C0749
Authority key identifier: 78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/323430313a623638303a3a2f33322d3332203d3e203539303239.roa
Signing time: Thu 16 Apr 2026 07:14:29 +0000
ROA not before: Thu 16 Apr 2026 07:09:29 +0000
ROA not after: Thu 15 Apr 2027 07:14:29 +0000
asID: 59029
IP address blocks: 2401:b680::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl
rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:4c:07:2b:1a:4d:d4:69:6d:d5:74:71:3d:8d:72:45:47:7c:07:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551
Validity
Not Before: Apr 16 07:09:29 2026 GMT
Not After : Apr 15 07:14:29 2027 GMT
Subject: CN=7641ABB3326E9D7EC61FF3AD6D0817B66E4DA397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:82:f5:66:39:a6:82:6b:28:2b:46:7e:cf:e9:
65:d1:31:aa:b7:85:77:02:fc:6e:38:b7:a1:a9:7d:
76:d0:0a:f2:b5:28:f4:5c:39:f8:53:94:c7:b7:da:
37:fc:55:f7:3b:d4:d1:d9:07:d6:79:1e:a6:14:60:
44:b1:22:3d:99:4c:8c:9e:97:90:12:15:bf:d0:58:
cf:a5:5a:29:3d:29:60:1f:c3:2f:c7:93:db:39:64:
5a:20:25:da:5f:18:ca:c5:20:3f:90:04:70:51:1e:
98:f8:a6:14:73:d5:08:26:51:77:4f:fb:e6:fd:1a:
65:74:d8:05:bb:71:4b:be:d0:35:50:a4:56:76:91:
6b:85:08:ff:7f:88:c0:e2:99:5e:d6:f1:f2:53:27:
91:ed:cd:3f:8a:90:da:84:e5:34:76:41:e1:a5:26:
7e:76:8b:9c:fe:64:57:9c:7a:d5:a8:72:7b:06:7b:
e5:fe:cc:47:c7:d8:1a:7b:1f:cc:a8:a3:e9:47:01:
7b:fc:5f:40:7c:7b:07:51:46:a1:40:0e:87:bd:b3:
8f:c7:14:95:20:95:c1:72:cc:27:c9:a0:89:de:f1:
9d:54:b9:7d:a3:db:55:d2:17:e8:24:e5:d3:40:ca:
ee:4d:06:e3:50:ab:55:00:7c:77:19:64:e7:0c:0e:
bb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:41:AB:B3:32:6E:9D:7E:C6:1F:F3:AD:6D:08:17:B6:6E:4D:A3:97
X509v3 Authority Key Identifier:
keyid:78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/323430313a623638303a3a2f33322d3332203d3e203539303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:b680::/32
Signature Algorithm: sha256WithRSAEncryption
c1:83:5a:85:84:90:2d:72:83:53:5b:25:fa:36:9f:76:2c:df:
4c:9c:19:63:18:c9:51:5e:37:af:f9:d9:ef:f5:de:a3:cf:c6:
ed:c8:c2:5d:9a:5a:f8:f7:dd:db:0e:04:57:3f:0a:10:a8:ca:
ef:9b:ec:00:6d:36:1d:86:76:d9:b0:d3:aa:9f:81:9f:f5:e5:
85:e8:a1:c9:8a:cc:80:6a:37:c1:d3:25:c6:ff:21:79:bf:c2:
3d:4e:5a:73:8b:ca:c5:83:42:d9:e1:d4:57:57:6a:1e:c0:72:
b4:2d:dc:1b:02:52:2e:be:36:4a:49:5e:9c:13:84:25:f7:d8:
54:3a:0d:ce:2b:12:f5:09:57:61:f5:45:13:e4:ca:07:09:9b:
38:f8:be:9e:b2:84:8d:7c:72:b2:47:87:b4:88:b6:17:a3:1c:
18:17:54:7e:e3:44:2d:24:f6:49:19:5c:cf:72:f4:25:05:cd:
6b:59:7a:2f:64:26:ef:0f:f3:12:e4:5c:17:54:30:94:73:e2:
cf:24:b6:9f:bf:31:17:4e:77:ec:31:c3:8f:43:ed:26:18:6a:
1f:44:18:4a:22:b1:11:21:61:28:0e:fc:d5:ba:27:b9:0c:e0:
41:86:34:d7:2d:6a:e3:8c:fd:64:66:69:97:42:60:b2:3c:66:
a2:bf:39:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:15:17 2026 by rpki-client