
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1116910113051901977/2/323430323a663134303a666631323a3a2f34382d3438203d3e20313336393538.roa
File: 323430323a663134303a666631323a3a2f34382d3438203d3e20313336393538.roa (raw, json)
Hash identifier: bCL03YG87TLLs/GAH5OMoR4G1zVvmobwxjT7k1rWeZo=
Subject key identifier: 18:9E:6B:73:02:68:7C:89:48:46:93:C7:20:A7:F1:0D:0B:25:6F:7B
Certificate issuer: /CN=823A9D24802AB10026095D92952BEC936120C9F0
Certificate serial: 5365F97A01D48CA6046E1139729442A7B41E9DF3
Authority key identifier: 82:3A:9D:24:80:2A:B1:00:26:09:5D:92:95:2B:EC:93:61:20:C9:F0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/323430323a663134303a666631323a3a2f34382d3438203d3e20313336393538.roa
Signing time: Wed 10 Jun 2026 02:07:55 +0000
ROA not before: Wed 10 Jun 2026 02:02:55 +0000
ROA not after: Wed 09 Jun 2027 02:07:55 +0000
asID: 136958
IP address blocks: 2402:f140:ff12::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.crl
rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:65:f9:7a:01:d4:8c:a6:04:6e:11:39:72:94:42:a7:b4:1e:9d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=823A9D24802AB10026095D92952BEC936120C9F0
Validity
Not Before: Jun 10 02:02:55 2026 GMT
Not After : Jun 9 02:07:55 2027 GMT
Subject: CN=189E6B7302687C89484693C720A7F10D0B256F7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:03:2e:ec:03:ac:82:d0:15:c6:a9:f0:f4:56:
8b:cb:3f:35:b7:8b:2e:57:ee:b3:7c:0b:6e:d4:f4:
8e:c2:09:ab:ae:38:04:62:70:b3:8d:3a:1f:75:46:
70:5b:2c:45:4e:c3:31:0c:c7:82:35:2e:ef:f1:e3:
77:78:da:45:53:b4:b9:e0:7f:ff:a7:63:19:a2:0a:
8e:a6:94:6e:53:f6:77:23:a6:aa:dc:35:2b:84:99:
07:41:8d:39:67:f4:36:56:ef:69:40:47:1a:22:32:
e9:8c:87:72:e2:47:37:1a:3a:0b:0f:d6:90:f5:6c:
a0:30:6c:2f:db:9e:6e:cb:75:ab:63:e0:2b:9f:4a:
d6:34:2f:2b:0a:c9:80:75:8a:61:30:e1:30:42:61:
0f:1e:bf:02:3b:fe:f4:94:e4:ec:89:6a:55:e4:60:
fa:91:a3:e8:14:46:5d:e3:59:7a:fe:72:12:9d:40:
81:09:d6:17:2a:18:b2:93:53:75:69:01:25:88:72:
43:3e:72:b7:ee:53:a6:c6:f1:07:9f:c3:a8:69:6a:
5a:8c:1c:22:d7:89:8d:f1:8c:24:06:57:5c:f3:b7:
17:92:25:26:40:a1:44:c3:39:24:19:35:fb:2f:4d:
a5:95:4a:f7:fc:bf:1c:71:8a:f1:36:42:df:e1:13:
0a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9E:6B:73:02:68:7C:89:48:46:93:C7:20:A7:F1:0D:0B:25:6F:7B
X509v3 Authority Key Identifier:
keyid:82:3A:9D:24:80:2A:B1:00:26:09:5D:92:95:2B:EC:93:61:20:C9:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/323430323a663134303a666631323a3a2f34382d3438203d3e20313336393538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:f140:ff12::/48
Signature Algorithm: sha256WithRSAEncryption
68:a1:15:1d:e0:98:ce:9f:16:ce:62:09:df:48:7d:12:62:7e:
f5:85:a3:a5:df:b7:5e:1f:98:fa:25:fe:1f:e3:20:3d:a3:63:
c3:1f:45:78:6c:0b:60:34:c7:28:c4:76:f8:3e:37:0b:48:35:
fd:07:d2:82:90:2b:d4:6d:69:fe:1a:79:7a:05:9e:a0:83:6c:
77:f9:ac:f9:a8:d6:d1:44:d8:0e:3d:f0:dc:01:3a:5b:c2:cd:
18:a5:4f:1d:fe:c7:5c:5a:c7:95:fd:61:e3:80:48:62:65:c2:
df:53:ea:f9:28:83:93:f6:0c:08:0e:36:dc:3b:50:e6:d4:62:
c7:6b:12:78:e7:d5:da:7f:63:49:20:bd:2c:be:c1:2c:41:51:
83:b1:1b:d1:fa:d5:a7:62:cf:ef:d2:a6:b4:8d:65:80:41:32:
a0:81:39:ea:06:53:6b:73:2f:a4:ed:d3:aa:c0:0f:af:c6:b1:
99:61:c3:1a:9f:10:c4:be:46:b9:3e:d2:2d:8e:33:c3:3b:05:
0b:f8:1f:a9:f9:2b:c9:01:0c:d5:34:04:a4:52:67:f2:0d:77:
6b:7e:e3:bb:a5:93:fd:4e:cb:a9:8b:09:92:c7:be:9f:bd:fd:
d4:86:2d:0f:4a:e7:00:c1:16:b8:18:c3:98:ef:a8:41:1b:a7:
f6:e2:fb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:34:26 2026 by rpki-client