
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/323430303a636363303a3a2f33322d3332203d3e2030.roa
File: 323430303a636363303a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier: rv74VCxJxKzC3ZVx9OI376BNqC+IcXnFyeDN0Nmu9SY=
Subject key identifier: 00:7A:D3:03:4A:7F:1A:1B:5F:76:D1:D1:29:81:F6:F2:76:D3:63:42
Certificate issuer: /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial: 656C9E09CF4F1CBD2BCA962FA4C085FFE07963DA
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/323430303a636363303a3a2f33322d3332203d3e2030.roa
Signing time: Thu 23 Apr 2026 07:51:43 +0000
ROA not before: Thu 23 Apr 2026 07:46:43 +0000
ROA not after: Thu 22 Apr 2027 07:51:43 +0000
asID: 0
IP address blocks: 2400:ccc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:6c:9e:09:cf:4f:1c:bd:2b:ca:96:2f:a4:c0:85:ff:e0:79:63:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Validity
Not Before: Apr 23 07:46:43 2026 GMT
Not After : Apr 22 07:51:43 2027 GMT
Subject: CN=007AD3034A7F1A1B5F76D1D12981F6F276D36342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bb:f7:9e:bf:60:79:8e:06:dc:9a:0a:49:16:
8c:77:b3:a0:39:ec:c6:fd:09:72:a4:28:2f:25:17:
30:44:ca:ab:cd:58:bc:87:e2:8a:eb:0e:48:27:9f:
06:8f:b1:f6:b5:9d:7b:fb:34:ec:28:cc:3f:02:65:
ed:00:d4:27:3c:1c:90:ab:5f:4f:22:c0:86:5a:3a:
dd:6e:a9:7e:f8:57:8f:91:73:41:0f:1a:d2:5e:3f:
7f:a8:17:a4:3a:e6:06:82:07:30:09:2a:5e:cf:b9:
f1:d0:ad:55:f2:f4:8f:fd:cd:27:ed:08:f9:64:c0:
45:22:59:9a:be:f6:c5:d2:ff:f3:43:16:10:ab:ee:
f5:3b:7d:26:37:97:5f:67:70:8e:eb:b2:32:1d:24:
d8:94:4c:8c:ef:1a:83:62:c4:46:0f:95:e6:f4:df:
f7:92:1e:3c:0c:6b:64:72:cb:4c:c6:f8:e0:c5:a3:
f7:1e:4e:86:47:1d:61:ef:3d:33:78:e4:cb:23:a6:
85:f3:fd:67:04:a1:53:e8:c8:2a:cf:fb:31:4c:97:
e3:71:9b:a8:13:8a:a2:51:88:23:7c:1f:19:c1:12:
ac:a4:e4:f6:52:13:25:c9:27:33:77:ad:2d:e2:b8:
8f:48:d0:81:bc:7d:21:5e:bc:99:36:67:d3:71:20:
4c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7A:D3:03:4A:7F:1A:1B:5F:76:D1:D1:29:81:F6:F2:76:D3:63:42
X509v3 Authority Key Identifier:
keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/323430303a636363303a3a2f33322d3332203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:ccc0::/32
Signature Algorithm: sha256WithRSAEncryption
1e:d0:f4:44:e0:cb:c7:7f:1c:57:f9:ba:9f:b4:47:b8:47:71:
03:44:4d:24:d3:9b:c2:9e:8d:29:bf:b5:b7:35:21:f2:3f:46:
06:b1:ae:c6:de:9b:e0:90:f5:12:87:7b:0c:97:43:41:0f:be:
ff:78:00:f8:97:f6:bb:5a:9a:b6:0a:dc:f8:da:e0:81:81:f1:
ff:10:b4:55:f4:ec:31:55:cb:8b:c0:1a:77:78:0b:f6:ad:61:
df:01:31:77:cf:4a:58:55:0a:fd:04:a5:0c:72:1b:17:d1:ef:
73:69:cd:0c:a3:db:7b:51:8c:70:b5:2c:ff:d9:53:46:4c:80:
bc:dc:df:6b:df:da:51:f3:1e:50:42:f5:e7:7e:09:ed:e2:59:
fc:85:1b:0c:6b:6e:b7:79:01:88:2c:da:d6:a9:c7:45:d4:9d:
a1:2b:d9:49:69:b1:1f:a1:37:a3:3f:40:8e:84:2d:68:f5:35:
a0:b4:7d:e9:30:2d:d0:36:94:a6:34:c6:18:25:be:72:4c:55:
23:4b:14:c7:50:29:0e:67:6d:a6:ed:70:09:0d:09:60:30:44:
fb:a1:26:5d:83:b8:fb:cc:df:2d:ce:41:12:08:3a:17:ad:a7:
fd:70:48:f8:b2:48:2c:69:1b:36:d2:9f:a6:8e:3f:53:f8:3e:
43:dc:c1:22
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUZWyeCc9PHL0rypYvpMCF/+B5Y9owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdB
N0QxNEI0MDAeFw0yNjA0MjMwNzQ2NDNaFw0yNzA0MjIwNzUxNDNaMDMxMTAvBgNV
BAMTKDAwN0FEMzAzNEE3RjFBMUI1Rjc2RDFEMTI5ODFGNkYyNzZEMzYzNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTu/eev2B5jgbcmgpJFox3s6A5
7Mb9CXKkKC8lFzBEyqvNWLyH4orrDkgnnwaPsfa1nXv7NOwozD8CZe0A1Cc8HJCr
X08iwIZaOt1uqX74V4+Rc0EPGtJeP3+oF6Q65gaCBzAJKl7PufHQrVXy9I/9zSft
CPlkwEUiWZq+9sXS//NDFhCr7vU7fSY3l19ncI7rsjIdJNiUTIzvGoNixEYPleb0
3/eSHjwMa2Ryy0zG+ODFo/ceToZHHWHvPTN45MsjpoXz/WcEoVPoyCrP+zFMl+Nx
m6gTiqJRiCN8HxnBEqyk5PZSEyXJJzN3rS3iuI9I0IG8fSFevJk2Z9NxIEw5AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUAHrTA0p/GhtfdtHRKYH28nbTY0IwHwYDVR0j
BBgwFoAUFldnVvCwO/dezWvESaO+96fRS0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
OTYwMjYzNjM2NzIwMDI1OS8wLzE2NTc2NzU2RjBCMDNCRjc1RUNENkJDNDQ5QTNC
RUY3QTdEMTRCNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdBN0QxNEI0MC5jZXIw
gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk5NjAyNjM2MzY3MjAwMjU5LzAvMzIzNDMwMzAzYTYz
NjM2MzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAMzA
MA0GCSqGSIb3DQEBCwUAA4IBAQAe0PRE4MvHfxxX+bqftEe4R3EDRE0k05vCno0p
v7W3NSHyP0YGsa7G3pvgkPUSh3sMl0NBD77/eAD4l/a7Wpq2Ctz42uCBgfH/ELRV
9OwxVcuLwBp3eAv2rWHfATF3z0pYVQr9BKUMchsX0e9zac0Mo9t7UYxwtSz/2VNG
TIC83N9r39pR8x5QQvXnfgnt4ln8hRsMa263eQGILNrWqcdF1J2hK9lJabEfoTej
P0COhC1o9TWgtH3pMC3QNpSmNMYYJb5yTFUjSxTHUCkOZ22m7XAJDQlgMET7oSZd
g7j7zN8tzkESCDoXraf9cEj4skgsaRs20p+mjj9T+D5D3MEi
-----END CERTIFICATE-----
Generated at Wed May 13 13:33:52 2026 by rpki-client