
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/323430343a373138303a663030303a3a2f34382d3438203d3e203233383438.roa
File: 323430343a373138303a663030303a3a2f34382d3438203d3e203233383438.roa (raw, json)
Hash identifier: +e2qVAiao3VoG5SDKxlX+1z44+iLLm0GvdGJUt6iiUY=
Subject key identifier: FA:13:D6:3C:93:76:CB:18:C2:5A:A1:08:45:92:55:D0:D0:52:CB:A0
Certificate issuer: /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial: 602B092FA27BBC44EE9612CFA6BEC7923E778962
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/323430343a373138303a663030303a3a2f34382d3438203d3e203233383438.roa
Signing time: Thu 16 Apr 2026 09:17:57 +0000
ROA not before: Thu 16 Apr 2026 09:12:57 +0000
ROA not after: Thu 15 Apr 2027 09:17:57 +0000
asID: 23848
IP address blocks: 2404:7180:f000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:2b:09:2f:a2:7b:bc:44:ee:96:12:cf:a6:be:c7:92:3e:77:89:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
Validity
Not Before: Apr 16 09:12:57 2026 GMT
Not After : Apr 15 09:17:57 2027 GMT
Subject: CN=FA13D63C9376CB18C25AA108459255D0D052CBA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:51:06:de:a0:89:b9:f2:71:2d:fe:7a:a7:6c:
c7:eb:0e:ed:a0:03:4b:6e:02:b2:b8:28:98:f4:0f:
5c:b0:cb:32:41:65:8e:28:e3:a4:6e:a6:bf:98:f5:
88:5d:cd:5d:f0:02:3c:a3:b9:5d:8f:dc:e6:0d:b6:
ea:cd:38:3e:21:e9:99:6c:07:b2:12:d8:4c:8b:c2:
f0:6f:45:25:8d:c0:30:0d:80:db:56:cd:0e:13:cb:
bb:a4:c9:1e:18:30:d6:87:f7:b0:9f:08:a5:46:3b:
ac:47:1b:e9:d7:5d:fa:05:3a:31:09:5d:94:40:c3:
ac:60:c1:55:7b:8a:01:1c:cf:81:e6:e8:9e:5a:b4:
44:3b:94:41:e2:06:1b:8d:d1:a0:07:32:ec:1b:9a:
1e:03:89:b5:72:56:f8:e6:ed:01:bd:5a:58:90:2b:
f8:51:68:8a:88:cd:19:e5:3c:59:58:b4:5d:05:93:
56:74:0a:e1:03:6a:25:ec:5d:a3:28:9f:fb:52:3c:
44:98:c5:7b:a7:b1:ae:a0:55:7f:68:10:40:a1:92:
dd:d6:c1:df:de:bd:1e:e3:f8:63:a5:e2:3a:82:9b:
d6:31:ef:44:60:ba:c6:85:4f:d3:f5:a6:24:33:4d:
4a:b6:86:fd:64:56:90:04:48:44:e2:0e:2f:5b:4c:
11:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:13:D6:3C:93:76:CB:18:C2:5A:A1:08:45:92:55:D0:D0:52:CB:A0
X509v3 Authority Key Identifier:
keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/323430343a373138303a663030303a3a2f34382d3438203d3e203233383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:7180:f000::/48
Signature Algorithm: sha256WithRSAEncryption
33:be:9a:4d:64:c3:a2:43:63:b6:20:66:af:05:4c:22:70:7a:
9b:2c:93:33:b3:83:65:9e:23:87:ce:2c:1a:f3:d4:c9:8f:6a:
5c:d7:2c:b1:6c:dd:f6:51:02:c8:3b:83:d3:fd:f4:aa:31:90:
ee:f2:9a:26:4a:92:a1:e5:9a:f9:b3:00:a2:e2:87:52:fb:14:
5e:68:ff:9b:85:04:6e:39:b4:ac:c8:5a:87:08:1b:06:ff:3b:
2d:6f:3a:df:5d:77:6e:f6:06:96:78:a6:46:08:e3:ef:1e:5e:
a4:8b:e6:d3:7f:bc:62:c3:7f:4e:c4:e0:e5:36:b9:11:6d:f4:
5b:48:3e:d3:27:de:ff:d6:df:d7:63:55:1c:86:98:f1:37:9d:
c2:5e:cd:e1:d8:51:91:15:00:0f:62:2f:50:d7:9f:e7:c5:0f:
5e:7c:81:66:24:5b:f6:0d:4b:95:75:26:7b:8c:94:f6:cb:80:
d7:b7:a4:a8:de:5b:b1:bd:dc:b5:49:ce:6b:c9:50:53:22:eb:
3e:89:96:ad:a7:6b:72:fa:fe:8b:58:fd:62:ca:3a:52:79:c0:
36:c0:73:8b:b4:c7:b8:42:a0:7b:7d:81:85:91:17:87:87:dc:
e1:6d:31:39:d5:9b:b2:a3:2a:fa:00:d3:7b:85:8c:fd:c0:3f:
08:ef:ce:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:28:20 2026 by rpki-client