
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1089062140922298370/0/323430313a6363303a3a2f33322d3332203d3e203633353930.roa
File: 323430313a6363303a3a2f33322d3332203d3e203633353930.roa (raw, json)
Hash identifier: 8b+PA21aKEMPiUuYpnoITzfBpqDQqtFaP8fwhAFdf+E=
Subject key identifier: 33:1B:3E:67:93:94:16:1A:A8:41:99:62:C5:E4:FA:84:90:4F:78:CD
Certificate issuer: /CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202
Certificate serial: 147DF28184A51F5CF1ED01C2745BF8A6B96180E4
Authority key identifier: 22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/323430313a6363303a3a2f33322d3332203d3e203633353930.roa
Signing time: Thu 23 Apr 2026 07:33:07 +0000
ROA not before: Thu 23 Apr 2026 07:28:07 +0000
ROA not after: Thu 22 Apr 2027 07:33:07 +0000
asID: 63590
IP address blocks: 2401:cc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl
rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:7d:f2:81:84:a5:1f:5c:f1:ed:01:c2:74:5b:f8:a6:b9:61:80:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202
Validity
Not Before: Apr 23 07:28:07 2026 GMT
Not After : Apr 22 07:33:07 2027 GMT
Subject: CN=331B3E679394161AA8419962C5E4FA84904F78CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:41:48:49:89:f5:ac:af:01:a1:27:61:0e:1f:
d7:db:8f:f2:96:3b:00:72:2c:18:8a:ea:9e:8d:2f:
c8:7b:67:0d:25:d4:4a:27:0d:d7:cd:01:ad:3d:49:
71:6d:76:33:1f:8d:04:88:5e:9f:e4:79:ee:c5:d4:
74:70:84:77:56:09:0d:ef:ce:f2:98:41:8e:85:3e:
2f:ca:0c:09:a9:a9:56:ba:fb:a9:23:1e:b2:98:a3:
c0:77:8c:fb:93:53:8d:74:8d:a5:7b:24:4f:45:2d:
59:7b:02:29:4e:18:9c:a4:5e:b1:03:41:e7:74:5a:
b9:16:82:83:77:46:af:90:e9:2d:54:85:6c:c2:23:
ec:a7:24:99:d7:b6:74:e8:36:0f:a2:c2:94:41:28:
6d:bb:67:52:2c:50:1e:7a:9f:c9:fb:83:5f:21:33:
2c:c0:d9:e9:37:fa:4e:80:ba:87:2a:1f:01:4d:29:
c3:1c:26:ad:19:1a:48:76:0b:46:d8:06:e0:91:5f:
88:b0:53:60:e9:9f:92:51:f1:95:58:a3:6f:55:71:
ac:f8:94:9c:06:d9:d7:c7:c4:ee:2b:1a:48:89:3d:
f9:13:a0:a7:22:be:e2:25:f5:19:b5:7c:73:3f:0b:
8d:dd:83:d4:0d:e6:38:77:6e:d5:0e:1b:a2:e5:ec:
6b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1B:3E:67:93:94:16:1A:A8:41:99:62:C5:E4:FA:84:90:4F:78:CD
X509v3 Authority Key Identifier:
keyid:22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/323430313a6363303a3a2f33322d3332203d3e203633353930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:cc0::/32
Signature Algorithm: sha256WithRSAEncryption
64:50:9d:6b:24:64:58:93:bc:41:46:a4:05:db:f4:79:b9:aa:
0e:63:08:e2:77:74:20:47:c2:38:c3:6e:72:5e:97:49:fc:a4:
78:ab:d4:69:12:bf:17:d3:41:62:fc:b1:a8:be:48:58:58:0e:
95:46:62:4a:76:2d:a9:1f:9d:34:a5:3b:1e:51:e9:f2:24:bc:
5a:36:cd:b0:ff:98:f0:49:cd:bd:57:a2:de:a0:38:17:8b:30:
00:f6:6a:ce:fb:6f:a2:8a:a9:16:ed:56:31:a2:7b:b8:a2:33:
81:0b:3c:2b:5a:0d:18:66:73:5c:e4:d6:49:fa:f8:58:c7:11:
5d:e6:50:bb:38:2b:50:02:4a:2e:ff:ea:63:f1:b7:37:db:47:
75:91:61:a4:92:db:74:4c:c1:88:d1:7c:1f:77:b1:62:1e:5f:
67:3d:19:ac:26:f5:a9:87:df:2d:6b:86:0c:10:0a:aa:b0:ea:
9b:2e:33:05:77:e4:8e:1e:85:7f:4d:67:a9:3b:c0:5b:b7:8d:
3f:e0:59:75:ff:a7:fd:eb:2d:06:72:e9:06:76:8d:7c:8b:7b:
64:df:9d:30:82:7e:96:11:a5:fb:6b:70:f4:8d:ac:a3:f1:f1:
e8:69:b5:cd:5e:76:54:e3:f9:48:95:86:b9:26:b8:a9:60:e4:
d8:76:05:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:20:27 2026 by rpki-client