
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097048493643530242/0/323430363a353263303a3a2f33322d3332203d3e20313339313431.roa
File: 323430363a353263303a3a2f33322d3332203d3e20313339313431.roa (raw, json)
Hash identifier: 0VCs7Br2LEypju+8+bG9yDec+3HSZ8IfNVbmHboPoB4=
Subject key identifier: 1C:19:72:A8:EE:65:FD:C4:A7:7A:A2:83:F3:BC:C0:92:A6:5A:89:38
Certificate issuer: /CN=19C56F6C979C215AF864F9E18F7A8F62631A1268
Certificate serial: 510240F856430E669C3DA7B820A990E34717006B
Authority key identifier: 19:C5:6F:6C:97:9C:21:5A:F8:64:F9:E1:8F:7A:8F:62:63:1A:12:68
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/19C56F6C979C215AF864F9E18F7A8F62631A1268.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097048493643530242/0/323430363a353263303a3a2f33322d3332203d3e20313339313431.roa
Signing time: Mon 11 May 2026 05:46:54 +0000
ROA not before: Mon 11 May 2026 05:41:54 +0000
ROA not after: Mon 10 May 2027 05:46:54 +0000
asID: 139141
IP address blocks: 2406:52c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097048493643530242/0/19C56F6C979C215AF864F9E18F7A8F62631A1268.crl
rsync://rpki-rps.cnnic.cn/repo/A1097048493643530242/0/19C56F6C979C215AF864F9E18F7A8F62631A1268.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/19C56F6C979C215AF864F9E18F7A8F62631A1268.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:02:40:f8:56:43:0e:66:9c:3d:a7:b8:20:a9:90:e3:47:17:00:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19C56F6C979C215AF864F9E18F7A8F62631A1268
Validity
Not Before: May 11 05:41:54 2026 GMT
Not After : May 10 05:46:54 2027 GMT
Subject: CN=1C1972A8EE65FDC4A77AA283F3BCC092A65A8938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c1:c6:59:69:e3:7b:d6:cf:39:80:2e:cc:81:
9e:06:de:84:03:17:a0:97:25:8b:8c:27:84:bd:ce:
39:73:dc:46:4a:b6:7c:fd:8a:be:24:bc:c3:1c:65:
2e:c9:68:17:6e:29:2a:87:1a:97:86:c5:82:37:e5:
3b:c0:c7:1a:72:a9:d3:87:82:80:62:de:40:9e:76:
ae:f0:da:e3:5e:be:46:a8:df:84:df:d7:e5:32:2d:
e6:71:17:eb:f5:d8:0d:26:0d:c8:77:b0:64:e1:84:
8d:d6:5f:df:a7:ed:37:32:25:f1:45:29:8b:70:e5:
46:56:03:97:6f:80:ca:60:c3:06:dd:a1:54:82:e7:
b8:64:82:95:c9:41:1e:41:24:29:73:90:fa:57:fa:
10:39:36:a3:8e:64:99:79:2e:1a:44:8d:1a:c3:19:
11:18:b1:5a:9b:ab:2e:b1:d5:71:76:85:cc:92:26:
0d:ef:a0:14:65:cb:23:bb:ec:18:f1:18:6f:32:21:
eb:5f:de:d7:52:e4:ea:1d:4f:6d:87:0d:6f:31:ef:
32:b5:e2:98:fe:c6:73:31:a2:55:4e:fa:fe:64:d9:
57:30:9e:f0:89:e4:53:ed:be:bf:71:95:97:ee:d0:
98:09:fc:75:65:c0:d7:71:73:96:79:f9:c7:7e:c7:
45:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:19:72:A8:EE:65:FD:C4:A7:7A:A2:83:F3:BC:C0:92:A6:5A:89:38
X509v3 Authority Key Identifier:
keyid:19:C5:6F:6C:97:9C:21:5A:F8:64:F9:E1:8F:7A:8F:62:63:1A:12:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097048493643530242/0/19C56F6C979C215AF864F9E18F7A8F62631A1268.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/19C56F6C979C215AF864F9E18F7A8F62631A1268.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097048493643530242/0/323430363a353263303a3a2f33322d3332203d3e20313339313431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:52c0::/32
Signature Algorithm: sha256WithRSAEncryption
22:97:4f:e4:b9:dd:96:2e:1b:01:e1:18:37:f5:ba:bf:12:8e:
ae:68:ae:4f:49:b0:00:8c:07:7f:9c:9f:b6:37:bd:b5:45:1a:
76:aa:29:69:0f:56:cf:5c:74:bf:1c:74:65:25:24:26:cd:07:
fb:5f:42:4a:d0:3a:98:dd:e9:5f:72:05:32:e1:12:cf:e0:cc:
f6:0a:de:25:db:ab:7b:4c:08:c0:7c:6b:8b:2f:ea:58:15:32:
5a:5e:13:93:98:b1:01:a7:60:b9:73:20:6e:af:63:97:d6:15:
fe:8e:23:3f:87:4a:5a:8e:e9:8b:d1:6a:1a:68:19:8a:38:4c:
8c:c1:a6:cb:61:52:15:80:89:82:66:81:ee:4b:9c:62:e9:75:
e3:6a:95:b2:50:7b:9b:70:cc:ec:81:15:90:de:f1:00:2e:12:
2c:16:9b:fa:87:ba:61:99:36:26:2b:b6:19:68:2c:65:57:5c:
cf:43:82:25:b1:e5:c6:bb:8a:1e:55:69:b7:c3:dd:b4:18:d4:
d4:0d:7d:28:12:fc:e4:b5:59:01:45:9e:a4:1d:79:b8:ef:51:
b3:fc:fa:8d:a0:20:bd:dd:38:e7:2e:50:96:75:28:b0:7f:f5:
8c:4d:b4:43:33:eb:6e:ca:99:af:a8:3d:fb:fc:5f:5c:b7:e2:
c7:c7:09:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 21:32:18 2026 by rpki-client