
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/323430303a636334303a3a2f33322d3332203d3e2030.roa
File: 323430303a636334303a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier: 7hCEaUK9/+Fs/Poxi7kj06SUtYMOLUxMWUjE2hwFSTc=
Subject key identifier: 7C:23:22:D4:7C:B8:78:F3:7A:AE:7A:5A:21:CB:FF:5A:62:69:FE:07
Certificate issuer: /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial: 0233F1B97EDB6F337D7C3EC9477678271FD404A2
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/323430303a636334303a3a2f33322d3332203d3e2030.roa
Signing time: Thu 23 Apr 2026 07:51:43 +0000
ROA not before: Thu 23 Apr 2026 07:46:43 +0000
ROA not after: Thu 22 Apr 2027 07:51:43 +0000
asID: 0
IP address blocks: 2400:cc40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:33:f1:b9:7e:db:6f:33:7d:7c:3e:c9:47:76:78:27:1f:d4:04:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Validity
Not Before: Apr 23 07:46:43 2026 GMT
Not After : Apr 22 07:51:43 2027 GMT
Subject: CN=7C2322D47CB878F37AAE7A5A21CBFF5A6269FE07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ff:91:d0:d9:15:ab:de:65:4d:7f:5f:0d:5b:
4e:16:27:34:f8:c4:66:b0:26:9c:ef:7c:8b:ff:50:
f9:97:b6:89:47:04:6c:45:69:df:6f:af:5d:b1:01:
4d:7e:b8:34:25:d6:de:d9:62:74:97:af:16:7f:b1:
95:2e:21:d9:0b:59:f7:11:8a:62:88:3a:59:37:f7:
76:f9:56:ae:fd:a8:25:06:76:11:b6:dc:34:e6:24:
9b:db:c9:c6:a6:e7:07:60:ed:70:a6:64:b2:a5:a3:
10:31:79:65:1c:e6:fe:b5:e2:27:05:73:f3:a7:74:
ea:d1:98:c2:c5:1d:dd:d2:e9:01:46:ec:89:93:58:
ff:70:84:06:83:c2:7d:31:36:51:e8:60:e6:59:26:
04:d4:83:43:36:0f:f5:9b:7e:19:a1:4f:e9:ac:7b:
7e:4d:51:a7:96:50:46:be:06:9b:65:55:34:6e:88:
de:68:72:da:a5:83:75:59:ff:f5:0c:0c:7c:e9:27:
5c:f0:6f:25:fc:37:26:16:f9:8c:d8:b6:6f:06:0a:
07:eb:5c:69:e3:f5:ee:90:ac:8b:6d:ba:7f:d5:f2:
de:20:8b:37:b7:13:37:51:60:25:7e:5c:e0:aa:51:
3e:e3:4f:e1:d3:0b:42:20:77:56:60:af:ea:74:c0:
ad:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:23:22:D4:7C:B8:78:F3:7A:AE:7A:5A:21:CB:FF:5A:62:69:FE:07
X509v3 Authority Key Identifier:
keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/323430303a636334303a3a2f33322d3332203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:cc40::/32
Signature Algorithm: sha256WithRSAEncryption
cd:c4:c4:95:b0:c4:bd:c1:48:a3:17:34:0a:2d:8e:bd:5e:05:
b7:1e:cc:5d:70:c0:40:bc:4b:82:45:51:49:9a:ff:1e:53:62:
89:d7:ed:27:72:11:74:3b:60:14:c1:08:59:9e:ba:5e:c3:8b:
94:3c:d2:2d:5c:ba:73:c8:3a:c4:b8:5d:37:d7:a7:a6:7c:e2:
b9:d6:de:10:05:61:9c:86:d6:f1:5a:ad:bb:94:63:40:85:16:
3a:6a:44:08:6b:e8:ff:f4:aa:71:b8:18:ff:2f:48:51:43:b8:
0e:ab:10:b2:3c:bf:75:8b:af:e6:60:4d:06:2b:06:1b:57:79:
53:24:f9:9a:eb:37:81:38:14:ba:f9:ae:47:16:0f:e3:b1:ae:
43:1c:d9:c0:fc:f7:48:c3:ad:d7:78:a6:ae:c3:f8:16:2b:9f:
0c:78:79:c1:fa:d6:26:34:c8:2b:71:c0:62:dc:75:ff:37:98:
49:5a:d4:a4:38:84:41:a9:d4:02:df:6b:d2:dd:11:f2:ae:8d:
44:3c:9d:f8:e4:db:ab:07:48:29:2d:2e:c8:c4:b0:70:b4:52:
e3:93:8b:f9:6f:c4:30:84:28:f6:c6:d6:5e:d5:a8:fe:7e:34:
a8:ce:71:29:a6:43:13:15:70:98:e6:95:af:19:a2:27:77:2e:
fa:7e:f3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:05:35 2026 by rpki-client