
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095903841322270721/0/323430323a643334303a3a2f33322d3332203d3e203338333831.roa
File: 323430323a643334303a3a2f33322d3332203d3e203338333831.roa (raw, json)
Hash identifier: KjzxHZrpBgUBPF4xWs9+mFljcu+D0MFHtLGLuVYAwtA=
Subject key identifier: 2B:D5:30:B1:1C:E3:83:38:36:5C:F5:7B:69:92:C6:39:E6:14:7B:1A
Certificate issuer: /CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
Certificate serial: 4C6643504625318D27D16CF89CCE2B80556D2982
Authority key identifier: 51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/323430323a643334303a3a2f33322d3332203d3e203338333831.roa
Signing time: Wed 22 Apr 2026 07:57:51 +0000
ROA not before: Wed 22 Apr 2026 07:52:51 +0000
ROA not after: Wed 21 Apr 2027 07:57:51 +0000
asID: 38381
IP address blocks: 2402:d340::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl
rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:66:43:50:46:25:31:8d:27:d1:6c:f8:9c:ce:2b:80:55:6d:29:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
Validity
Not Before: Apr 22 07:52:51 2026 GMT
Not After : Apr 21 07:57:51 2027 GMT
Subject: CN=2BD530B11CE38338365CF57B6992C639E6147B1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cc:57:cd:86:0c:ed:d7:0c:6f:f7:e9:f5:59:
a1:ad:57:88:bc:13:cc:a8:c3:eb:06:2c:9a:57:cb:
f4:09:18:14:21:5e:42:26:04:3b:a6:fc:52:85:84:
76:14:ed:46:f9:04:a9:9c:a1:dc:b1:53:81:f5:1f:
dd:65:b9:96:1a:b0:34:de:1f:e2:82:1b:57:8c:c8:
82:21:bf:88:36:3c:3e:a3:0c:d6:17:49:47:5a:c5:
b0:18:36:3b:f9:eb:1d:5c:8a:20:fb:5f:05:7f:57:
dd:a9:ec:31:c0:94:80:4b:f2:c6:d4:c5:cf:1b:6e:
d0:e9:0c:7a:98:74:69:c8:c8:af:f4:60:bf:b8:2a:
ea:3e:47:f1:d2:4f:d3:e7:92:b1:0c:0f:60:4e:f4:
15:1a:98:37:fc:12:40:53:90:41:4b:13:c9:25:fe:
a3:f7:e1:13:e8:87:68:45:99:2a:54:10:8a:92:9f:
04:a4:c5:93:6b:05:9f:7f:3c:ea:18:63:4a:a6:fd:
62:a5:91:de:d4:53:9e:8e:d9:50:17:d8:d0:be:f0:
84:32:c7:c2:f8:ed:90:6a:9a:a2:d2:1a:a4:30:41:
a3:ab:dc:04:02:73:6c:ee:01:d1:60:13:74:d4:03:
59:6f:f1:86:33:3d:0b:fa:db:61:65:c3:88:b0:83:
7b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D5:30:B1:1C:E3:83:38:36:5C:F5:7B:69:92:C6:39:E6:14:7B:1A
X509v3 Authority Key Identifier:
keyid:51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/323430323a643334303a3a2f33322d3332203d3e203338333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:d340::/32
Signature Algorithm: sha256WithRSAEncryption
3b:ac:d9:c4:4b:1b:aa:06:e0:19:92:29:7d:86:57:7d:15:e1:
0c:5f:bb:3f:83:e0:e3:56:88:e3:5d:aa:10:99:88:63:d1:8b:
f0:1e:b9:c7:20:6c:39:d1:01:d2:3a:3e:fa:cd:da:2c:90:ff:
6a:e9:fd:f1:2a:92:16:51:be:52:fe:47:67:1f:a5:07:46:e2:
a9:4f:ce:57:4e:1f:6c:98:89:64:00:60:df:0c:45:4a:f0:62:
c2:f6:54:e2:06:63:66:cc:11:b3:ce:4e:8f:7e:ea:55:a0:ed:
7c:a9:6a:d3:05:ab:4b:ac:30:90:5e:aa:e5:4f:e3:1f:10:8e:
cc:e6:8b:d8:6d:ad:20:a3:a6:2a:a1:4b:88:97:ef:99:09:3a:
b1:3e:6e:8e:99:69:e3:83:ad:4a:c9:6d:40:27:3c:05:78:40:
70:00:4b:d4:69:3f:fc:5b:c3:ec:f7:52:89:7d:ba:d5:54:f7:
4f:18:e0:8c:89:a4:71:ae:99:84:59:74:30:35:17:87:a7:bc:
de:b8:7f:91:74:11:37:c4:c6:a9:21:8f:24:9f:32:ec:69:d9:
66:29:0e:16:27:c9:66:7b:86:bc:b6:37:89:35:a2:07:9d:fa:
ad:7e:ff:14:2d:d6:d1:56:56:6e:cb:ab:d8:25:96:1a:c3:1f:
57:71:f7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:32:19 2026 by rpki-client