
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096250886386089987/0/323430313a356338303a3a2f33322d3332203d3e2030.roa
File: 323430313a356338303a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier: 1LDXyBKSFl2CziO/AAgiipLUXTwKWhQ9V+Y4/cF1F1s=
Subject key identifier: 95:93:50:B9:52:CE:B0:6F:5A:22:43:E4:41:F6:9F:87:A0:06:E4:91
Certificate issuer: /CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727
Certificate serial: 4E395FD83EA77D59197123876C15F5EEB71DEBAA
Authority key identifier: AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/323430313a356338303a3a2f33322d3332203d3e2030.roa
Signing time: Tue 12 May 2026 01:57:23 +0000
ROA not before: Tue 12 May 2026 01:52:23 +0000
ROA not after: Tue 11 May 2027 01:57:23 +0000
asID: 0
IP address blocks: 2401:5c80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl
rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:51:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:39:5f:d8:3e:a7:7d:59:19:71:23:87:6c:15:f5:ee:b7:1d:eb:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727
Validity
Not Before: May 12 01:52:23 2026 GMT
Not After : May 11 01:57:23 2027 GMT
Subject: CN=959350B952CEB06F5A2243E441F69F87A006E491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:74:21:56:71:5e:c0:aa:0b:78:81:1a:90:5b:
5a:60:c7:6e:f6:37:b3:4a:07:f3:b1:9f:0d:ca:fb:
2d:ca:a1:2c:b8:2e:2a:fb:b3:00:a2:e4:e7:55:ad:
58:d2:8c:bd:bd:3b:e4:93:b7:2b:7b:76:b7:df:41:
38:fa:4d:ab:19:e4:af:21:b2:4a:e6:a7:89:af:88:
c2:59:00:dd:45:0e:d6:62:ee:e6:66:ee:86:37:24:
04:41:73:76:b7:51:4c:4a:cb:54:7b:f6:58:28:91:
00:92:59:4f:f0:13:57:61:15:79:e4:d6:a0:6a:a1:
4e:9f:3d:45:bc:10:cf:24:74:c0:5c:06:57:0c:5f:
dc:a8:cf:f2:33:04:26:85:ea:cc:cd:47:ec:31:cd:
bb:28:87:de:4f:35:31:6d:e9:48:8d:04:c8:ed:23:
7e:6c:76:83:8d:a3:0d:6c:19:1f:61:d8:a9:54:ab:
bf:ae:f2:29:39:ef:ed:b5:40:6a:8f:52:a6:ad:32:
cd:81:59:29:d2:b0:d5:bf:51:c1:f5:3d:5a:c8:52:
65:8e:e4:84:2f:21:24:5f:4c:31:75:3f:a2:bf:05:
fb:c5:52:34:24:23:bd:29:2e:5c:04:f2:c8:6c:20:
e1:52:55:ea:e6:1b:17:d1:7e:af:fa:50:af:01:47:
10:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:93:50:B9:52:CE:B0:6F:5A:22:43:E4:41:F6:9F:87:A0:06:E4:91
X509v3 Authority Key Identifier:
keyid:AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/323430313a356338303a3a2f33322d3332203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:5c80::/32
Signature Algorithm: sha256WithRSAEncryption
b5:d8:7c:bb:a3:ac:6f:bf:9f:0b:2f:f4:c8:36:f4:20:2c:31:
57:8a:e3:9b:3d:79:c9:50:66:a2:0d:f6:53:6f:7c:4e:35:93:
66:77:86:52:6f:0b:f4:e0:eb:fa:a3:0c:2f:b1:20:ee:71:21:
f7:fd:5d:04:56:65:81:42:fb:46:f4:4a:87:0f:4b:89:58:9e:
97:35:bb:d6:d3:37:3f:d7:0b:26:8e:48:dc:44:76:fd:01:e5:
2e:91:6e:50:e4:12:83:55:00:5e:ef:37:5b:ec:5e:fe:a4:29:
06:62:3e:aa:3b:76:85:69:c9:65:2d:18:c4:70:95:d0:c8:4c:
8c:8a:b6:ee:12:3b:2b:e7:73:2f:f8:7e:c3:d7:9c:93:82:39:
31:c5:43:35:2d:2e:ee:55:91:52:bc:6b:3e:7f:f1:fa:4f:f5:
f4:cf:e1:48:6d:5a:58:1a:6e:07:a9:72:f7:f8:4a:fc:48:28:
01:d4:54:e1:5c:98:bf:5e:2f:6c:89:d5:1b:6e:9e:98:50:fa:
9c:88:bf:bd:63:f0:36:de:70:5c:4c:06:1c:cc:af:05:78:73:
9e:39:60:b3:3b:cf:a3:37:f2:05:a9:4e:bd:da:8f:d6:80:ee:
d4:17:60:80:af:19:53:93:61:05:05:b2:d8:27:34:f2:b3:ca:
b3:1a:d3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:12:00 2026 by rpki-client