
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/323430303a636634303a3a2f33322d3332203d3e2030.roa
File: 323430303a636634303a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier: aqWDxbSFkD4ntZuIdzsexZyfbql26qNmP/jDiy43h5c=
Subject key identifier: 39:6E:7F:0E:6E:CC:46:3F:E3:6B:22:B0:6F:6A:50:93:5B:04:D3:AA
Certificate issuer: /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial: 1D6B402C0CC4FFCF89F92598FCF30DAF50BF18FD
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/323430303a636634303a3a2f33322d3332203d3e2030.roa
Signing time: Thu 23 Apr 2026 07:51:44 +0000
ROA not before: Thu 23 Apr 2026 07:46:44 +0000
ROA not after: Thu 22 Apr 2027 07:51:44 +0000
asID: 0
IP address blocks: 2400:cf40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:6b:40:2c:0c:c4:ff:cf:89:f9:25:98:fc:f3:0d:af:50:bf:18:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Validity
Not Before: Apr 23 07:46:44 2026 GMT
Not After : Apr 22 07:51:44 2027 GMT
Subject: CN=396E7F0E6ECC463FE36B22B06F6A50935B04D3AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:65:5f:79:f8:c8:41:aa:a0:ae:f3:ac:00:38:
60:7f:ac:31:27:40:5f:68:91:8b:78:14:a8:ae:59:
5a:25:45:f7:95:82:f7:01:8e:f2:67:5e:29:f7:44:
32:27:d3:ff:f7:f4:38:4c:9d:33:15:eb:66:06:dd:
08:b0:c1:7c:76:75:35:ae:9a:9b:81:80:a3:39:41:
8b:07:5a:25:1b:57:d6:69:d7:15:d2:65:5c:e6:56:
82:0c:e3:7b:02:40:2c:d6:57:86:92:1c:a0:7b:78:
96:69:d0:08:27:f8:d3:26:43:86:f7:9e:40:b1:79:
37:aa:69:dd:e0:04:9e:6c:36:4c:a9:89:d6:d6:53:
d3:07:3d:65:66:a7:28:e2:f9:60:81:9c:2b:07:a6:
0c:9f:b8:81:30:18:02:29:6c:75:ec:d7:5e:45:e9:
f4:7b:f6:5d:c0:d5:a1:e5:5e:85:dd:da:f1:3f:41:
2c:99:17:9c:a0:61:5e:cc:dc:2a:b4:c3:7a:6b:16:
23:ae:05:63:62:1d:d1:c8:ba:fb:92:0b:3e:51:0e:
52:bd:bc:ae:8f:98:b9:60:b0:b7:da:67:4a:ee:e5:
f2:c9:d4:a6:b3:9e:b5:73:e7:ff:82:09:a9:5e:a6:
ca:08:b6:b9:fc:bd:75:5e:41:8f:53:d3:35:f1:94:
c2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6E:7F:0E:6E:CC:46:3F:E3:6B:22:B0:6F:6A:50:93:5B:04:D3:AA
X509v3 Authority Key Identifier:
keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/323430303a636634303a3a2f33322d3332203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:cf40::/32
Signature Algorithm: sha256WithRSAEncryption
95:d4:57:cc:af:9e:8a:b8:72:bf:c7:23:e4:f1:4a:3d:1a:0c:
aa:cf:ba:32:65:f2:7c:45:56:d3:64:a8:35:a2:6a:94:85:b1:
c1:6e:74:46:c3:0f:b8:8c:45:09:44:a3:0e:a6:a5:5d:c3:42:
f4:6f:59:42:1d:69:8a:a5:f7:f5:c6:26:f1:bc:6e:fb:ea:16:
a9:da:34:9f:ca:0c:d9:c6:dc:2e:5f:40:20:b5:60:d2:24:80:
53:3b:0c:1c:d9:78:6a:89:15:b7:71:c4:87:83:92:c5:c7:8c:
b1:00:95:ac:f7:df:56:d3:ea:d4:85:56:f3:f2:10:0c:46:ae:
94:fe:bf:a9:63:16:c9:4b:3e:da:64:39:4d:95:85:f0:6c:cd:
91:52:b6:f5:a7:a6:3c:d3:f7:90:be:10:f3:c9:4e:90:5b:ad:
75:d9:0c:79:0e:c3:e7:bc:36:78:ff:a5:c1:1e:1e:63:a8:fb:
c9:a4:20:6c:52:e3:84:da:07:a2:70:1f:4a:e7:ba:6a:d3:06:
ea:b9:29:f7:38:25:68:18:bf:81:34:b3:d2:11:e1:7d:d3:ad:
cb:05:ba:7e:b8:d7:85:63:ff:2d:56:cc:70:62:4b:58:6d:6a:
3c:e4:80:91:db:8f:c4:61:2c:42:ab:be:55:76:0a:2c:13:c8:
c8:06:8b:0d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUHWtALAzE/8+J+SWY/PMNr1C/GP0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdB
N0QxNEI0MDAeFw0yNjA0MjMwNzQ2NDRaFw0yNzA0MjIwNzUxNDRaMDMxMTAvBgNV
BAMTKDM5NkU3RjBFNkVDQzQ2M0ZFMzZCMjJCMDZGNkE1MDkzNUIwNEQzQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHZV95+MhBqqCu86wAOGB/rDEn
QF9okYt4FKiuWVolRfeVgvcBjvJnXin3RDIn0//39DhMnTMV62YG3QiwwXx2dTWu
mpuBgKM5QYsHWiUbV9Zp1xXSZVzmVoIM43sCQCzWV4aSHKB7eJZp0Agn+NMmQ4b3
nkCxeTeqad3gBJ5sNkypidbWU9MHPWVmpyji+WCBnCsHpgyfuIEwGAIpbHXs115F
6fR79l3A1aHlXoXd2vE/QSyZF5ygYV7M3Cq0w3prFiOuBWNiHdHIuvuSCz5RDlK9
vK6PmLlgsLfaZ0ru5fLJ1KaznrVz5/+CCalepsoItrn8vXVeQY9T0zXxlMJ9AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUOW5/Dm7MRj/jayKwb2pQk1sE06owHwYDVR0j
BBgwFoAUFldnVvCwO/dezWvESaO+96fRS0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
OTYwMjYzNjM2NzIwMDI1OS8wLzE2NTc2NzU2RjBCMDNCRjc1RUNENkJDNDQ5QTNC
RUY3QTdEMTRCNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdBN0QxNEI0MC5jZXIw
gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk5NjAyNjM2MzY3MjAwMjU5LzAvMzIzNDMwMzAzYTYz
NjYzNDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAM9A
MA0GCSqGSIb3DQEBCwUAA4IBAQCV1FfMr56KuHK/xyPk8Uo9Ggyqz7oyZfJ8RVbT
ZKg1omqUhbHBbnRGww+4jEUJRKMOpqVdw0L0b1lCHWmKpff1xibxvG776hap2jSf
ygzZxtwuX0AgtWDSJIBTOwwc2XhqiRW3ccSHg5LFx4yxAJWs999W0+rUhVbz8hAM
Rq6U/r+pYxbJSz7aZDlNlYXwbM2RUrb1p6Y80/eQvhDzyU6QW6112Qx5DsPnvDZ4
/6XBHh5jqPvJpCBsUuOE2geicB9K57pq0wbquSn3OCVoGL+BNLPSEeF9063LBbp+
uNeFY/8tVsxwYktYbWo85ICR24/EYSxCq75VdgosE8jIBosN
-----END CERTIFICATE-----
Generated at Wed May 13 14:02:41 2026 by rpki-client