
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094498863600893954/0/323430353a393938303a3a2f33322d3332203d3e2030.roa
File: 323430353a393938303a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier: GA+g1A5a2HBFT7Hhy5u0IBn7+mkbJWeKKCXdtRL2bVU=
Subject key identifier: 22:6E:30:4B:AA:70:15:1B:29:03:37:AA:13:55:CE:07:83:5C:76:E9
Certificate issuer: /CN=601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E
Certificate serial: 4CB1D2A78FE5E7389295C07FFED3E79C26D2F285
Authority key identifier: 60:1A:9A:8A:3B:50:5A:5E:E2:28:32:43:F7:AB:E7:A6:F5:4E:DC:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/323430353a393938303a3a2f33322d3332203d3e2030.roa
Signing time: Wed 22 Apr 2026 07:04:14 +0000
ROA not before: Wed 22 Apr 2026 06:59:14 +0000
ROA not after: Wed 21 Apr 2027 07:04:14 +0000
asID: 0
IP address blocks: 2405:9980::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl
rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:13:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:b1:d2:a7:8f:e5:e7:38:92:95:c0:7f:fe:d3:e7:9c:26:d2:f2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E
Validity
Not Before: Apr 22 06:59:14 2026 GMT
Not After : Apr 21 07:04:14 2027 GMT
Subject: CN=226E304BAA70151B290337AA1355CE07835C76E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:b6:4f:d3:b0:a4:11:3b:65:c2:a7:f1:f0:
1f:23:1f:0c:94:21:29:aa:cc:5e:9b:f9:e4:e5:35:
bf:18:6a:c5:86:d0:a9:33:e7:7a:04:8d:18:c4:0a:
e7:69:7c:41:ae:30:a4:f8:1f:66:90:c2:bb:b6:42:
35:9f:a3:b3:7e:48:42:38:ff:1f:3b:57:f7:0d:d9:
3e:b8:3e:4a:ec:3f:f1:8b:e0:27:5f:f0:0f:2e:73:
c2:de:32:85:2c:ee:d5:1c:ce:f1:0b:d0:d1:8b:3b:
47:ce:87:de:70:6b:c4:4c:f8:bd:3a:c3:f8:c5:33:
3f:df:a7:4c:00:81:0c:b9:12:77:45:fd:3f:37:fb:
1a:3e:b7:f8:66:90:31:cb:25:bd:bf:39:76:ac:87:
6b:7b:e1:db:de:ce:44:33:7a:7e:4a:2b:23:47:07:
a5:c1:d2:dd:9b:37:0f:7b:68:f0:46:01:57:b0:a3:
a1:bb:4f:e6:32:83:6d:77:3d:20:b0:c9:06:c3:b2:
d3:70:d6:4f:7d:4a:da:4a:0c:cd:b9:8a:b0:8e:cf:
27:72:03:62:29:0d:b3:f8:d1:5f:58:6a:c5:fd:79:
b2:0f:1b:f3:6d:df:d0:32:1e:98:c0:d8:cb:b4:95:
6b:d6:48:08:4c:c9:30:e9:f6:00:c3:3e:76:f9:29:
9f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6E:30:4B:AA:70:15:1B:29:03:37:AA:13:55:CE:07:83:5C:76:E9
X509v3 Authority Key Identifier:
keyid:60:1A:9A:8A:3B:50:5A:5E:E2:28:32:43:F7:AB:E7:A6:F5:4E:DC:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/323430353a393938303a3a2f33322d3332203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:9980::/32
Signature Algorithm: sha256WithRSAEncryption
4a:4d:9c:8c:db:c9:4c:b7:cc:74:74:3d:39:f0:e9:57:96:ab:
21:d6:18:b4:f7:34:a6:3d:a5:0b:f8:11:5d:68:c4:db:61:6f:
4a:07:76:cc:f2:1e:32:8a:f0:a2:55:aa:d9:41:95:8a:59:c6:
12:c7:b2:a8:73:23:cb:ba:66:69:f0:5f:ab:19:89:12:77:49:
6b:15:5e:be:9b:c0:f3:4d:0a:6c:40:75:44:9e:60:3a:f6:e4:
4a:bd:59:d9:22:47:d3:34:45:37:47:32:8e:c4:f0:81:d0:03:
34:ed:07:60:d4:c4:94:ae:29:3a:ec:fe:dd:c1:58:7f:6b:96:
06:9f:1f:ad:a0:c6:aa:8c:6d:08:b7:49:10:3f:8c:5b:23:c5:
28:8d:26:ca:98:4c:10:9f:26:e5:b6:bd:89:ae:d6:ea:ae:bc:
72:50:42:48:b3:96:b5:92:a2:d5:36:f1:72:d5:fd:b3:12:31:
e0:48:90:26:04:e9:10:12:46:d2:f5:cd:84:c3:d8:70:d6:db:
5e:eb:1a:c1:74:92:07:84:56:15:20:e8:d2:40:33:84:74:23:
ba:3d:37:86:ad:cd:ea:f4:67:90:3d:45:a3:8c:1d:3d:10:1c:
41:5a:63:14:78:42:65:67:60:7d:61:b8:66:ce:a3:d1:0f:c7:
25:2d:ec:d5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUTLHSp4/l5ziSlcB//tPnnCbS8oUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAxQTlBOEEzQjUwNUE1RUUyMjgzMjQzRjdBQkU3QTZG
NTRFREM0RTAeFw0yNjA0MjIwNjU5MTRaFw0yNzA0MjEwNzA0MTRaMDMxMTAvBgNV
BAMTKDIyNkUzMDRCQUE3MDE1MUIyOTAzMzdBQTEzNTVDRTA3ODM1Qzc2RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7L7ZP07CkETtlwqfx8B8jHwyU
ISmqzF6b+eTlNb8YasWG0Kkz53oEjRjECudpfEGuMKT4H2aQwru2QjWfo7N+SEI4
/x87V/cN2T64PkrsP/GL4Cdf8A8uc8LeMoUs7tUczvEL0NGLO0fOh95wa8RM+L06
w/jFMz/fp0wAgQy5EndF/T83+xo+t/hmkDHLJb2/OXash2t74dvezkQzen5KKyNH
B6XB0t2bNw97aPBGAVewo6G7T+Yyg213PSCwyQbDstNw1k99StpKDM25irCOzydy
A2IpDbP40V9YasX9ebIPG/Nt39AyHpjA2Mu0lWvWSAhMyTDp9gDDPnb5KZ8DAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUIm4wS6pwFRspAzeqE1XOB4NcdukwHwYDVR0j
BBgwFoAUYBqaijtQWl7iKDJD96vnpvVO3E4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDQ5ODg2MzYwMDg5Mzk1NC8wLzYwMUE5QThBM0I1MDVBNUVFMjI4MzI0M0Y3QUJF
N0E2RjU0RURDNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNjAxQTlBOEEzQjUwNUE1RUUyMjgzMjQzRjdBQkU3QTZGNTRFREM0RS5jZXIw
gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk0NDk4ODYzNjAwODkzOTU0LzAvMzIzNDMwMzUzYTM5
MzkzODMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBZmA
MA0GCSqGSIb3DQEBCwUAA4IBAQBKTZyM28lMt8x0dD058OlXlqsh1hi09zSmPaUL
+BFdaMTbYW9KB3bM8h4yivCiVarZQZWKWcYSx7KocyPLumZp8F+rGYkSd0lrFV6+
m8DzTQpsQHVEnmA69uRKvVnZIkfTNEU3RzKOxPCB0AM07Qdg1MSUrik67P7dwVh/
a5YGnx+toMaqjG0It0kQP4xbI8UojSbKmEwQnybltr2JrtbqrrxyUEJIs5a1kqLV
NvFy1f2zEjHgSJAmBOkQEkbS9c2Ew9hw1tte6xrBdJIHhFYVIOjSQDOEdCO6PTeG
rc3q9GeQPUWjjB09EBxBWmMUeEJlZ2B9YbhmzqPRD8clLezV
-----END CERTIFICATE-----
Generated at Wed May 13 14:33:42 2026 by rpki-client