
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/323430333a383038303a3a2f33322d3438203d3e2034383437.roa
File: 323430333a383038303a3a2f33322d3438203d3e2034383437.roa (raw, json)
Hash identifier: lHV0yPNPAZkgbactrq9QFIoJQ7QVQCnXlQeUMkAzhNg=
Subject key identifier: 7E:95:7F:31:40:4A:C9:5D:3F:CB:B6:0F:CC:7D:B1:B3:07:56:89:C4
Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial: 4470E3DFDB3BA72837B0FBA39F64F1E32AC9E943
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/323430333a383038303a3a2f33322d3438203d3e2034383437.roa
Signing time: Tue 12 May 2026 06:51:41 +0000
ROA not before: Tue 12 May 2026 06:46:41 +0000
ROA not after: Tue 11 May 2027 06:51:41 +0000
asID: 4847
IP address blocks: 2403:8080::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:17:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:70:e3:df:db:3b:a7:28:37:b0:fb:a3:9f:64:f1:e3:2a:c9:e9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Validity
Not Before: May 12 06:46:41 2026 GMT
Not After : May 11 06:51:41 2027 GMT
Subject: CN=7E957F31404AC95D3FCBB60FCC7DB1B3075689C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:78:31:b5:5b:7f:e2:cf:70:fe:7a:50:fc:dc:
39:52:08:5b:4f:68:b5:4d:3f:90:92:60:3e:cb:3c:
2e:af:ed:0e:1e:73:ef:bd:4f:ef:10:de:64:05:fb:
e8:fd:83:ff:86:ed:0f:0f:8e:2d:40:19:ef:1b:4f:
bc:07:5a:11:c7:3b:d6:86:61:0f:f8:77:fb:a0:c5:
78:04:5d:2c:dd:81:98:15:d7:aa:e1:81:66:6c:82:
8f:01:8c:1c:fd:f1:82:ed:2e:27:65:53:f9:9f:af:
88:ee:6c:00:2e:f5:5f:96:b8:79:d5:a0:02:bd:f0:
2b:a7:ed:b1:87:2d:92:af:16:36:e9:15:c4:f0:95:
26:f8:fc:22:80:21:dd:fd:0c:d4:ed:b2:65:ad:66:
dc:da:f9:24:72:06:79:78:d9:cc:a1:b5:2f:77:3b:
ad:1f:89:1e:11:46:fa:57:7c:30:9a:64:da:81:8c:
46:d8:be:bf:85:9f:7b:c2:aa:90:da:d9:bc:4e:1e:
44:b6:0f:f6:bd:77:6e:80:8a:44:88:f7:cf:10:ea:
3f:13:05:d3:8e:f8:8b:68:d9:7a:ef:cc:34:22:52:
16:d5:4e:63:94:7f:43:a4:65:9d:00:84:9a:a6:09:
1e:3e:1c:79:5f:71:71:10:36:ff:bf:39:e2:85:ff:
22:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:95:7F:31:40:4A:C9:5D:3F:CB:B6:0F:CC:7D:B1:B3:07:56:89:C4
X509v3 Authority Key Identifier:
keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/323430333a383038303a3a2f33322d3438203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:8080::/32
Signature Algorithm: sha256WithRSAEncryption
95:3b:6a:2e:73:7d:5c:fe:1d:d3:ab:d5:92:73:4d:b9:23:17:
58:2c:01:c9:b5:25:c7:f4:fd:0c:48:bb:ba:07:3e:1f:47:a0:
c4:a9:96:b6:eb:59:cb:71:79:b6:1b:3b:86:73:94:cd:31:54:
25:43:ac:0c:d2:12:b0:92:47:b9:06:a6:b4:6c:12:07:a5:52:
82:48:8e:03:f3:1f:62:79:cd:97:5d:7f:cf:8f:3b:66:e6:56:
60:c7:07:d5:a9:92:9f:54:83:7c:4c:5f:e6:e5:2d:d7:55:24:
6a:32:8f:e6:53:91:81:40:88:15:1a:9c:f0:a3:93:5c:50:44:
43:51:6b:bc:67:f7:fd:85:fb:08:95:0e:e1:40:9e:73:38:fe:
e4:42:70:b3:f3:9c:d6:d8:97:f9:d2:4d:f1:20:34:41:dd:72:
5d:8e:19:27:f1:c5:5f:b1:d7:55:15:e2:5b:f4:c0:44:5f:2a:
6e:9d:d1:ed:b7:83:8d:08:c8:e0:17:62:d8:5e:70:2a:10:d4:
9e:99:49:be:87:6d:f3:45:08:7f:57:28:96:74:bc:15:c2:17:
ec:50:b2:24:51:06:18:28:52:f4:ee:6f:80:df:16:c8:d2:e8:
4f:f1:0a:3e:a2:d2:6c:2e:65:a9:16:d9:19:14:ee:68:b7:f3:
13:0a:0a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:41:12 2026 by rpki-client