
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095912410859962371/0/323430313a613134303a313a3a2f34382d3634203d3e2034383131.roa
File: 323430313a613134303a313a3a2f34382d3634203d3e2034383131.roa (raw, json)
Hash identifier: irAvgeHsVmEjv/3B/s6oN0XSKZxl2hHWUr1wpeSQq2Q=
Subject key identifier: 22:7C:EC:5F:50:76:AD:E8:B1:58:E1:E3:3D:6C:6A:2C:40:91:B4:B7
Certificate issuer: /CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B
Certificate serial: 2D784CF6824F13FCBB921E4B3003EF9BAC358E1F
Authority key identifier: 0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/323430313a613134303a313a3a2f34382d3634203d3e2034383131.roa
Signing time: Mon 11 May 2026 07:05:29 +0000
ROA not before: Mon 11 May 2026 07:00:29 +0000
ROA not after: Mon 10 May 2027 07:05:29 +0000
asID: 4811
IP address blocks: 2401:a140:1::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl
rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:78:4c:f6:82:4f:13:fc:bb:92:1e:4b:30:03:ef:9b:ac:35:8e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B
Validity
Not Before: May 11 07:00:29 2026 GMT
Not After : May 10 07:05:29 2027 GMT
Subject: CN=227CEC5F5076ADE8B158E1E33D6C6A2C4091B4B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:82:53:a2:8c:4a:67:da:ed:be:94:01:46:59:
8e:cb:d0:de:97:c3:50:0a:37:95:1e:65:29:19:bf:
99:84:59:ba:91:a6:f0:9a:2b:59:06:44:54:bc:7e:
e9:45:d8:2a:2b:df:1a:8f:ea:6e:f2:6b:5a:b0:3a:
81:94:d5:71:4c:ae:ce:50:9c:55:da:7c:16:31:fc:
3d:81:24:66:01:0c:af:ed:a2:3b:a6:f1:e7:f3:ea:
8d:bd:f9:90:8c:84:7b:fa:7f:45:7f:e2:c2:e5:71:
b2:db:a6:55:18:f1:4e:8b:ad:83:8b:c2:7e:03:c0:
2f:75:55:75:b2:43:1d:92:bb:81:e4:e0:04:20:22:
b2:25:b1:8b:af:68:c7:b2:21:20:14:26:e7:c8:94:
bd:0c:f8:cf:e9:d4:b3:65:ef:41:8d:c4:3d:59:8d:
ac:f7:ee:8f:fa:b7:b3:36:8c:22:d7:d0:e1:43:36:
fb:d8:b2:ea:48:52:d7:9c:f2:56:7a:e1:fb:56:75:
af:4f:47:f9:94:11:d2:ba:f5:b4:e6:e6:cb:e7:18:
f3:57:30:44:2c:90:06:67:fd:c9:1d:c3:e6:23:a7:
ea:2c:62:b5:10:b1:04:07:76:d1:ee:91:76:84:0a:
9e:4c:58:b3:e5:5e:8c:79:a5:fc:ef:ec:a9:47:cc:
bb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7C:EC:5F:50:76:AD:E8:B1:58:E1:E3:3D:6C:6A:2C:40:91:B4:B7
X509v3 Authority Key Identifier:
keyid:0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/323430313a613134303a313a3a2f34382d3634203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:a140:1::/48
Signature Algorithm: sha256WithRSAEncryption
90:76:a0:35:3f:4a:ce:17:0d:49:97:94:9b:8d:19:76:53:23:
75:ac:03:f0:73:4e:d0:cf:9a:cb:00:5b:05:a6:5f:65:9e:0d:
59:d4:64:2d:82:00:de:ca:12:49:6b:64:4f:21:a2:01:10:cf:
ba:ad:fa:2d:a3:76:65:d0:3a:0a:07:46:1a:eb:28:8e:ac:c5:
3f:b3:78:48:1f:de:81:14:84:02:4b:f4:0c:e0:f0:07:a1:d6:
e8:0b:8d:7d:07:9b:4b:d8:50:bb:e6:2a:45:de:8e:0f:b6:52:
59:1f:d8:33:8a:f1:08:0c:ef:ff:4e:a3:93:8b:8a:2c:57:76:
ac:ff:02:e2:15:49:53:6e:d4:5d:24:4f:dc:ce:3e:00:7a:97:
af:c6:b3:5b:f9:d5:f9:7a:5f:24:f4:fc:1d:17:44:99:53:e5:
67:3f:e5:e1:68:55:22:eb:fb:27:0c:d0:67:70:5e:66:94:4e:
e9:c1:1b:6f:a3:2a:6b:54:a9:0d:35:38:aa:29:2c:a6:d0:f6:
fa:49:35:5a:98:b1:04:4d:53:5d:9d:36:58:79:4f:5d:2f:ba:
e4:5f:5e:46:8a:a8:a2:a0:94:32:b4:be:2d:02:75:34:42:f8:
43:09:63:ca:6b:90:28:89:06:bd:01:e4:b6:06:e2:f2:50:6a:
de:a4:bd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:36:57 2026 by rpki-client