
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/323430343a373138303a633030313a3a2f34382d3438203d3e203233383438.roa
File: 323430343a373138303a633030313a3a2f34382d3438203d3e203233383438.roa (raw, json)
Hash identifier: eIPFumbOHNHjlffbRwVnl2XADFB6CLRRr3tPqHAmmeA=
Subject key identifier: 97:A7:12:8E:55:A1:64:9B:30:58:E1:B0:4E:EF:DA:B4:36:BC:A6:2A
Certificate issuer: /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial: 09C99EE9F3097797128798990A571521A70F6D31
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/323430343a373138303a633030313a3a2f34382d3438203d3e203233383438.roa
Signing time: Thu 16 Apr 2026 09:17:58 +0000
ROA not before: Thu 16 Apr 2026 09:12:58 +0000
ROA not after: Thu 15 Apr 2027 09:17:58 +0000
asID: 23848
IP address blocks: 2404:7180:c001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:c9:9e:e9:f3:09:77:97:12:87:98:99:0a:57:15:21:a7:0f:6d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
Validity
Not Before: Apr 16 09:12:58 2026 GMT
Not After : Apr 15 09:17:58 2027 GMT
Subject: CN=97A7128E55A1649B3058E1B04EEFDAB436BCA62A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:b0:d4:f8:3e:f5:7d:1b:26:fc:6f:72:9e:
13:63:45:29:ca:8d:01:7d:a8:ee:1a:20:99:b1:3a:
fe:7c:4c:a8:d9:58:d3:03:fd:f1:cc:dd:6b:75:45:
ff:61:47:fe:98:42:cf:3b:7b:a0:e0:42:46:ab:90:
9e:45:ba:96:95:64:f0:ae:ee:2f:17:35:f6:22:23:
f4:1b:4f:f5:2b:c9:64:71:82:23:07:fd:a8:c9:85:
9a:74:94:51:0b:a0:38:9c:17:9c:6d:1c:c8:6c:00:
97:f8:40:78:90:30:4e:e0:31:73:f7:6e:c7:98:9c:
49:e1:39:d8:af:12:e7:b5:a0:75:6f:f7:d4:96:cd:
92:6a:be:a8:80:c6:ae:96:f5:98:30:b4:12:a4:a3:
eb:21:24:2c:19:5e:8a:7b:3b:00:90:d4:2c:51:d4:
dd:8c:f8:c1:a0:01:89:80:cb:ad:02:08:1c:d1:6e:
e8:b5:27:97:de:79:a3:88:e4:76:c7:46:31:bc:89:
67:63:f8:6a:6f:9d:d1:f1:08:f3:13:aa:2f:d5:e5:
a5:a7:0a:db:a4:b4:09:e8:b4:5c:14:a7:3f:f3:36:
a5:2d:fa:b9:31:d2:d3:db:6e:35:bc:92:46:72:35:
30:a4:51:6a:fd:96:d2:0f:61:be:66:88:38:fd:b5:
de:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A7:12:8E:55:A1:64:9B:30:58:E1:B0:4E:EF:DA:B4:36:BC:A6:2A
X509v3 Authority Key Identifier:
keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/323430343a373138303a633030313a3a2f34382d3438203d3e203233383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:7180:c001::/48
Signature Algorithm: sha256WithRSAEncryption
54:c3:77:c4:6c:a3:e7:a5:2c:f0:0f:e7:54:4d:67:61:0c:b7:
af:64:ea:24:7a:fc:f5:59:70:de:86:e9:45:db:2f:63:62:91:
c7:81:76:ce:78:3a:c3:46:2c:29:2e:d4:45:31:12:f0:24:b0:
79:02:0a:88:ab:01:0b:7c:ba:fa:f5:53:8e:0b:78:fd:63:e7:
99:2e:16:08:17:67:cc:f3:bc:59:61:1e:b1:be:3f:e0:6a:8f:
10:87:97:03:e5:ea:70:64:5b:41:46:98:cd:8e:6c:a0:d8:7b:
e6:86:b9:a9:ff:bb:b4:05:18:36:6c:70:23:de:72:7d:e8:d3:
31:02:71:bf:9e:5c:48:ec:e7:b9:6c:bf:bc:98:d1:58:7f:5a:
59:28:2d:28:a5:a4:d6:a7:a1:9d:36:bc:f4:6c:dc:7e:d0:9d:
2c:98:7f:5d:be:a2:b2:09:6f:a1:25:a4:5e:91:a0:d3:10:fa:
3b:df:eb:8b:4a:17:7d:cd:1e:67:6a:4b:1e:54:b1:e2:32:2c:
55:97:4e:f6:2f:0f:63:12:ed:25:1e:e8:07:ac:b0:74:a0:f9:
25:36:b0:02:7c:70:d6:7e:67:83:64:7f:ef:cd:57:6b:05:3e:
9f:bc:a9:bf:cd:06:80:42:87:2e:71:3c:04:d9:7d:22:d0:69:
3e:db:d7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:28:19 2026 by rpki-client