
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104639429030445063/0/323430393a363130303a3a2f34342d3434203d3e20313339303939.roa
File: 323430393a363130303a3a2f34342d3434203d3e20313339303939.roa (raw, json)
Hash identifier: IJVwZvhrjlbbs9/stTqy9sPMHmBqzhhxOBT2U812mtY=
Subject key identifier: 39:BA:AC:7A:F0:BE:DB:7E:89:A8:FE:44:79:10:BA:E9:BE:F3:9D:60
Certificate issuer: /CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5
Certificate serial: 6D81EDA4D6E70EABEC21934D79A12EC06B727855
Authority key identifier: 9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/323430393a363130303a3a2f34342d3434203d3e20313339303939.roa
Signing time: Fri 05 Jun 2026 08:08:20 +0000
ROA not before: Fri 05 Jun 2026 08:03:20 +0000
ROA not after: Fri 04 Jun 2027 08:08:20 +0000
asID: 139099
IP address blocks: 2409:6100::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl
rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:81:ed:a4:d6:e7:0e:ab:ec:21:93:4d:79:a1:2e:c0:6b:72:78:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5
Validity
Not Before: Jun 5 08:03:20 2026 GMT
Not After : Jun 4 08:08:20 2027 GMT
Subject: CN=39BAAC7AF0BEDB7E89A8FE447910BAE9BEF39D60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bb:54:55:39:88:48:e5:b4:68:80:9b:1f:1d:
ad:a2:90:78:f9:72:39:22:27:b2:f5:c0:65:09:8d:
f9:c1:dd:4d:f0:7c:57:fb:4b:64:e5:c6:d9:c8:d4:
a8:e9:eb:c2:70:7c:7a:d3:d6:53:83:23:d5:a0:7f:
a4:6e:62:37:34:c2:33:f4:3b:26:80:2e:4b:6e:8b:
e8:cd:c8:77:58:fe:a8:bc:e4:4e:08:53:90:4c:0f:
ac:91:ca:a2:28:25:11:49:5f:f2:74:a1:8b:6b:09:
2d:1b:a3:90:95:51:18:38:14:71:cc:02:7d:94:96:
d0:75:87:44:64:7a:8b:34:0a:30:e4:ec:f6:47:0b:
77:10:1c:7f:78:a7:fb:dd:ad:6b:5a:39:b6:15:81:
ce:dc:4b:f3:68:f0:e2:3a:43:5f:54:c6:9d:fc:a3:
40:49:95:d1:7c:d3:1d:16:98:4f:a1:0c:3b:16:bc:
aa:7a:e8:49:b0:41:c0:c8:07:71:58:1e:60:ba:69:
6d:b0:98:22:4e:3f:b3:0e:08:be:45:78:b0:d2:da:
c5:d6:b7:96:15:ae:46:2c:58:8a:89:a5:5f:24:ed:
39:ea:ca:e7:a0:a5:89:81:30:41:de:3d:ea:41:43:
f2:1d:e3:d2:45:26:13:2a:ba:4e:f0:88:4a:1f:05:
c4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BA:AC:7A:F0:BE:DB:7E:89:A8:FE:44:79:10:BA:E9:BE:F3:9D:60
X509v3 Authority Key Identifier:
keyid:9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/323430393a363130303a3a2f34342d3434203d3e20313339303939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2409:6100::/44
Signature Algorithm: sha256WithRSAEncryption
5b:02:8b:b6:ae:39:7b:2b:cb:6f:1e:81:9c:51:ef:c0:66:c2:
0e:ed:99:fe:b7:b9:19:d0:25:2b:76:06:26:11:e6:e2:03:19:
a0:90:a8:a7:9c:ec:81:69:19:bc:f0:61:bd:cf:56:dc:fb:a1:
c2:b2:dc:5c:bf:d0:b1:e8:7d:ee:6c:55:aa:43:47:e3:b4:9f:
7b:88:c5:a0:3c:2a:50:15:de:af:cd:86:9f:28:80:1c:95:f8:
00:ee:5e:f3:86:49:8c:60:3c:90:3f:41:b2:74:e8:1a:fb:71:
e3:ef:ef:c7:58:85:5c:57:6f:c9:d9:21:ae:67:75:f5:65:4e:
10:9f:9a:f0:46:d7:35:6c:a6:e3:ff:4c:28:ac:b4:b0:78:12:
42:1d:81:05:0f:d1:e7:eb:40:50:4f:78:8c:46:54:09:63:82:
b0:3e:e0:3d:ee:e5:e9:55:41:b3:f5:44:2e:4b:49:5b:30:5a:
59:5e:f8:8b:11:70:9a:4f:c2:94:c1:40:99:79:db:5b:f5:12:
78:7c:57:30:3c:67:b4:32:2b:bd:40:4c:f7:1a:7e:24:1c:b2:
99:9a:51:2b:df:d5:dd:11:67:9d:e6:4b:7f:8f:d5:e2:ea:29:
b4:63:33:12:68:db:d6:f0:e5:f0:a4:1d:f3:6a:b0:48:fe:05:
39:71:9a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:33:39 2026 by rpki-client