
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1089062140922298370/0/323430303a666334303a3a2f33322d3332203d3e203633353930.roa
File: 323430303a666334303a3a2f33322d3332203d3e203633353930.roa (raw, json)
Hash identifier: jz9IIUHMSZmfbKZ4Pdu2g4oNgkcHgtBmI0ci4+psKGM=
Subject key identifier: 9B:4A:5D:3A:4E:0C:38:12:BE:62:84:19:06:51:80:3F:E2:D0:71:8D
Certificate issuer: /CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202
Certificate serial: 349E0A6B309706130B71A7586846D534489F456E
Authority key identifier: 22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/323430303a666334303a3a2f33322d3332203d3e203633353930.roa
Signing time: Thu 23 Apr 2026 07:33:07 +0000
ROA not before: Thu 23 Apr 2026 07:28:07 +0000
ROA not after: Thu 22 Apr 2027 07:33:07 +0000
asID: 63590
IP address blocks: 2400:fc40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl
rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:9e:0a:6b:30:97:06:13:0b:71:a7:58:68:46:d5:34:48:9f:45:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202
Validity
Not Before: Apr 23 07:28:07 2026 GMT
Not After : Apr 22 07:33:07 2027 GMT
Subject: CN=9B4A5D3A4E0C3812BE6284190651803FE2D0718D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:50:70:cf:33:ef:7f:d3:57:4a:52:9b:52:b4:
9c:7c:96:3a:2d:43:a0:0d:90:7c:b4:c4:52:bc:21:
d2:58:c0:73:23:21:2e:f0:b2:3b:40:17:79:0d:48:
60:ab:e9:ff:ce:81:44:d8:b9:2c:5a:4f:41:f6:7f:
1b:b9:22:d8:79:18:06:e1:61:bc:ff:d5:cd:eb:e8:
39:a3:a1:c8:e4:1e:1c:fb:c8:57:53:32:cf:af:e7:
b4:5e:54:23:a9:fa:80:94:86:a8:10:c0:77:be:6b:
c7:2b:5a:da:eb:5f:31:9b:31:b2:12:5e:eb:aa:01:
ee:1d:52:61:3c:9f:ef:41:01:31:8a:74:07:5e:b6:
af:40:f1:4d:cb:c1:71:3d:7d:69:2d:82:9e:03:3d:
c3:c4:cd:78:72:82:ba:c2:b3:19:01:71:14:d0:2f:
65:4b:f4:cb:f6:06:01:47:23:9e:b3:23:6c:5f:1f:
e8:3d:0a:f5:11:bc:9a:de:6b:83:70:3e:50:b9:91:
fa:2f:94:42:d3:bd:cf:b8:e7:46:c7:a3:2c:ae:e2:
d0:c7:58:64:4d:de:12:9c:7c:5d:e8:3d:1b:fd:d3:
e9:63:5c:92:23:8f:ab:be:61:8d:c2:57:d8:d2:b3:
a7:a2:20:9c:50:aa:1a:2e:a7:0e:3c:39:bd:a9:36:
fa:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4A:5D:3A:4E:0C:38:12:BE:62:84:19:06:51:80:3F:E2:D0:71:8D
X509v3 Authority Key Identifier:
keyid:22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/323430303a666334303a3a2f33322d3332203d3e203633353930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:fc40::/32
Signature Algorithm: sha256WithRSAEncryption
13:5e:7b:32:9a:a8:0e:c1:a1:d9:7c:ee:d1:75:7a:97:32:4c:
c0:df:a2:b7:2b:84:39:d9:2c:e9:1d:21:6b:2e:1d:43:9c:1c:
d9:ed:34:db:06:c9:44:6b:bf:a6:55:74:e5:5d:14:04:46:e0:
27:9c:28:0f:80:be:84:2e:df:24:6b:e3:fe:57:a4:f4:a7:b9:
1d:3a:d4:e9:33:f0:ef:4a:5a:9a:e5:f7:12:1e:f9:d1:bf:dc:
4a:41:1d:82:46:51:5f:e5:b7:ae:83:33:ca:a3:c7:28:88:07:
e0:f6:af:6c:59:b4:25:de:50:ef:d7:94:d4:d3:48:2b:f6:1d:
f7:2c:ba:97:c0:43:89:83:a1:87:a3:39:97:47:48:7d:1e:a5:
19:d4:57:80:a6:1c:04:a4:6b:de:92:0a:dc:36:ed:8d:ef:f8:
7d:2e:0f:18:c5:f7:ce:f0:25:25:b5:af:62:5e:b7:00:25:89:
f2:dd:5d:68:a9:7e:47:e0:d1:c2:fa:5f:40:bc:d0:ff:59:d4:
16:f5:16:d7:1f:f5:24:0a:25:50:cf:16:a1:17:54:a5:26:9b:
24:0d:d4:cd:ed:fe:03:78:2a:c1:22:df:df:8e:af:5e:f0:8e:
ac:3c:8a:67:2a:06:fb:da:e4:f0:12:ac:df:75:33:15:21:c3:
a6:a5:82:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:20:27 2026 by rpki-client