
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098515682171027457/0/323430303a653638303a3a2f33322d3332203d3e203539303834.roa
File: 323430303a653638303a3a2f33322d3332203d3e203539303834.roa (raw, json)
Hash identifier: hCjCss8Qrog8PzpIaKD0V1/B/1nEVtaXZSPDBcpebOw=
Subject key identifier: 77:70:4C:2F:65:67:75:A3:F2:E4:76:CD:8A:5C:89:ED:C3:D5:BB:AB
Certificate issuer: /CN=4EC27FCC44D433FABCCB17301446A57C3578CD57
Certificate serial: 71F7AD12D7DD84BE4042203B6DAA5C61E3E6BF90
Authority key identifier: 4E:C2:7F:CC:44:D4:33:FA:BC:CB:17:30:14:46:A5:7C:35:78:CD:57
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/323430303a653638303a3a2f33322d3332203d3e203539303834.roa
Signing time: Mon 20 Apr 2026 08:01:09 +0000
ROA not before: Mon 20 Apr 2026 07:56:09 +0000
ROA not after: Mon 19 Apr 2027 08:01:09 +0000
asID: 59084
IP address blocks: 2400:e680::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.crl
rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:f7:ad:12:d7:dd:84:be:40:42:20:3b:6d:aa:5c:61:e3:e6:bf:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4EC27FCC44D433FABCCB17301446A57C3578CD57
Validity
Not Before: Apr 20 07:56:09 2026 GMT
Not After : Apr 19 08:01:09 2027 GMT
Subject: CN=77704C2F656775A3F2E476CD8A5C89EDC3D5BBAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:98:02:c9:0e:bf:8f:b8:60:2b:f2:3a:68:04:
b9:95:32:28:0c:78:30:88:7b:e3:d1:c8:f8:0e:c4:
01:92:f5:be:4d:dd:5d:2f:fc:13:53:fb:da:d5:f3:
0f:23:fe:fc:2f:15:d8:b1:93:cb:d6:0c:20:88:e7:
8f:1d:ef:1a:91:0c:12:48:e5:1e:3a:e0:fb:81:11:
9a:b4:87:e6:22:a0:35:55:e0:6a:64:c7:5e:1b:ec:
14:67:c1:e3:f9:17:51:82:e6:62:ae:5a:37:44:f6:
4f:49:06:90:60:bb:f6:c9:de:74:23:14:91:eb:dc:
51:ba:c8:96:56:6f:aa:e3:e0:6d:2f:ef:d1:87:81:
a5:b6:67:e2:4e:94:76:37:05:1d:6a:80:c9:ca:6b:
20:d3:e6:d4:c2:97:0b:49:ac:71:f1:45:67:99:03:
6d:dd:ee:cb:c6:4b:43:93:d9:9e:ef:d6:2a:5c:45:
1d:97:5c:04:79:3b:43:67:8f:23:d7:ef:cb:6d:0e:
4c:c4:84:51:11:26:09:8a:b4:b8:04:e4:01:57:c4:
71:99:4e:69:70:7c:ab:d0:35:93:1a:eb:37:1d:99:
e7:39:e5:c6:ff:0f:76:76:cb:db:f1:9b:af:a3:28:
02:2d:cb:67:6e:66:45:5d:82:90:c5:50:f8:6e:a6:
84:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:70:4C:2F:65:67:75:A3:F2:E4:76:CD:8A:5C:89:ED:C3:D5:BB:AB
X509v3 Authority Key Identifier:
keyid:4E:C2:7F:CC:44:D4:33:FA:BC:CB:17:30:14:46:A5:7C:35:78:CD:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/323430303a653638303a3a2f33322d3332203d3e203539303834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:e680::/32
Signature Algorithm: sha256WithRSAEncryption
c4:84:84:cd:70:61:4b:2a:c5:21:b1:9a:2f:3d:62:b4:86:10:
e5:a1:44:df:fc:f4:0f:60:1d:34:2e:a5:6b:73:1b:5d:e8:41:
3f:c5:ae:4a:56:c0:67:af:6e:6e:50:4e:93:07:5e:d1:a2:ff:
c5:41:a8:d2:75:6f:b4:99:c6:41:7e:50:57:c8:46:0b:a4:4b:
e6:aa:78:15:2f:5d:3b:a5:78:55:cb:3c:55:80:58:58:21:6d:
b0:ae:5b:6c:89:3d:67:ef:20:6d:28:b5:99:b1:38:f8:b4:06:
36:13:33:63:c9:67:74:94:a2:60:26:05:0d:cf:14:fe:31:87:
0b:dc:dd:7a:16:e1:0c:bd:77:76:d5:6e:21:3a:fe:d5:ec:a6:
36:a6:19:cb:50:3e:fe:35:85:84:ef:b3:24:fa:bf:60:48:38:
5c:06:68:3d:0a:ed:c7:70:a6:98:5c:0f:b6:d3:ab:32:dc:ef:
a9:e8:e9:4d:9c:b7:ec:d2:60:27:4b:86:9d:17:e0:06:41:ef:
31:2b:b7:ab:7a:22:14:36:67:9f:32:a0:ef:a6:63:b0:86:ec:
e8:2e:ed:d5:0c:43:ca:73:63:cd:c8:88:78:41:9e:42:4a:4a:
d5:b5:a4:9b:1b:78:51:61:df:b6:07:c2:5f:09:f7:a3:32:f7:
7f:e7:6b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:32:18 2026 by rpki-client