
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098834824765898754/0/323430323a313630303a3a2f33322d3332203d3e2030.roa
File: 323430323a313630303a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier: ihJ1MFpKmDRf0Pi6slt2kz3wUesE+0iWX9y1H+GS2Dg=
Subject key identifier: E5:5C:5D:EE:61:09:7B:5C:16:D3:6F:FE:3F:F9:7F:AF:49:7F:74:90
Certificate issuer: /CN=CFB23E5C25BCDF75B10365741E60EA1870019718
Certificate serial: 47B8F6BBCE98FAA264EDB4E34F66B0B5AA8D7C51
Authority key identifier: CF:B2:3E:5C:25:BC:DF:75:B1:03:65:74:1E:60:EA:18:70:01:97:18
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/323430323a313630303a3a2f33322d3332203d3e2030.roa
Signing time: Tue 21 Apr 2026 05:05:18 +0000
ROA not before: Tue 21 Apr 2026 05:00:18 +0000
ROA not after: Tue 20 Apr 2027 05:05:18 +0000
asID: 0
IP address blocks: 2402:1600::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.crl
rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:b8:f6:bb:ce:98:fa:a2:64:ed:b4:e3:4f:66:b0:b5:aa:8d:7c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFB23E5C25BCDF75B10365741E60EA1870019718
Validity
Not Before: Apr 21 05:00:18 2026 GMT
Not After : Apr 20 05:05:18 2027 GMT
Subject: CN=E55C5DEE61097B5C16D36FFE3FF97FAF497F7490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:03:79:50:72:aa:2e:97:89:39:d4:d7:66:dc:
d4:78:33:76:f8:ea:93:70:43:97:bc:ff:47:2f:15:
f5:38:ba:01:08:1a:f2:91:fd:f9:75:e4:b6:42:73:
bc:61:34:1b:a0:b5:7d:f7:60:36:0e:35:34:b8:0d:
e4:20:69:89:45:64:4e:af:33:2d:d7:d4:0f:9d:c3:
1d:38:8d:f0:19:e9:da:5e:37:52:c9:dd:37:ac:8f:
24:f5:06:33:b0:31:87:65:9f:e9:e8:e8:2a:dc:d5:
c5:33:28:c0:46:21:0a:77:95:4a:ad:30:71:0c:cf:
09:e7:88:4f:45:d8:35:81:0b:5c:97:42:4a:e6:4f:
00:cd:11:9d:db:72:a2:1a:4e:53:c8:48:00:da:1c:
d3:94:2c:2d:22:a6:e8:7b:3b:01:a3:dc:71:32:84:
1a:5c:81:1d:09:5d:cc:1e:64:40:7f:29:bc:0e:bb:
43:d4:ab:25:d3:60:bd:0d:ae:93:a2:84:1a:49:25:
9e:63:f0:3a:a3:f0:47:82:69:66:bb:50:e5:01:08:
68:61:73:47:55:66:10:a2:bd:6d:7e:3e:99:f1:09:
d0:42:bf:c0:42:db:ba:cb:52:21:0a:49:fc:17:42:
c6:fb:fc:22:9f:49:f5:ee:b1:78:0b:cc:92:88:af:
20:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5C:5D:EE:61:09:7B:5C:16:D3:6F:FE:3F:F9:7F:AF:49:7F:74:90
X509v3 Authority Key Identifier:
keyid:CF:B2:3E:5C:25:BC:DF:75:B1:03:65:74:1E:60:EA:18:70:01:97:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/323430323a313630303a3a2f33322d3332203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:1600::/32
Signature Algorithm: sha256WithRSAEncryption
5e:ba:42:78:bd:fe:72:97:f1:e2:94:4c:58:65:4a:5d:31:0a:
a1:e6:37:17:70:6c:4c:54:ac:7a:fb:59:63:1e:51:a2:b8:a9:
ba:36:15:3a:13:07:f5:67:73:3a:48:f3:73:9e:8c:e2:f7:6a:
85:33:63:05:09:70:25:b3:30:e0:d6:12:b9:7c:6b:ec:48:8d:
12:f8:1a:19:31:65:18:e3:34:e8:06:95:ff:45:dc:27:76:fe:
1a:10:d8:55:75:d0:5e:1a:5e:f4:f6:5d:4b:a7:ca:65:94:bc:
3e:9c:3c:14:04:db:58:74:98:fa:21:b5:41:b9:00:8d:bf:61:
60:f3:a4:ae:fb:5b:03:3d:49:f3:db:d0:ff:8d:0b:3e:2b:d5:
9b:34:93:73:a0:9a:ef:05:38:1e:4e:ba:45:bb:25:5f:fb:d8:
76:c0:dc:ab:e6:8b:31:48:2f:89:45:88:86:76:2a:14:57:3f:
1b:a2:60:64:89:d6:68:4b:54:e4:a2:62:f6:e5:e0:70:a2:fe:
21:16:78:a9:cf:99:35:1e:7a:73:aa:f9:29:26:d1:06:4a:db:
46:dc:4d:58:0c:3d:8d:68:10:34:b1:be:8f:22:a8:46:1a:1e:
af:af:cd:bd:8b:19:28:bc:db:3b:bb:22:29:f3:f3:cd:f9:54:
02:ac:5f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:45:54 2026 by rpki-client