
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/323430333a386430303a3a2f33322d3332203d3e2030.roa
File: 323430333a386430303a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier: gIkKhDGvtYYE6/aWKUIImphtgEWTKYyUl0BLIRN8eU4=
Subject key identifier: E8:3C:5B:AC:9F:BB:E4:09:26:C5:8E:35:90:36:CE:CA:7B:AF:62:1B
Certificate issuer: /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Certificate serial: 3250CB96C723A4E8539AC38E13398CC6EB77DAA8
Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/323430333a386430303a3a2f33322d3332203d3e2030.roa
Signing time: Wed 29 Apr 2026 09:01:45 +0000
ROA not before: Wed 29 Apr 2026 08:56:45 +0000
ROA not after: Wed 28 Apr 2027 09:01:45 +0000
asID: 0
IP address blocks: 2403:8d00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:50:cb:96:c7:23:a4:e8:53:9a:c3:8e:13:39:8c:c6:eb:77:da:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Validity
Not Before: Apr 29 08:56:45 2026 GMT
Not After : Apr 28 09:01:45 2027 GMT
Subject: CN=E83C5BAC9FBBE40926C58E359036CECA7BAF621B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e1:60:6f:32:e9:54:6b:0b:ff:55:6a:2c:f0:
5d:1e:a8:e1:69:d0:2e:36:37:7a:70:aa:7e:dd:2f:
0a:79:fd:a5:fc:f7:bb:c3:56:1b:07:4d:45:3e:b0:
46:7f:e8:af:ce:94:58:32:95:70:28:9d:0b:3b:e0:
80:9a:f9:40:48:30:f1:81:22:1d:fd:03:59:2f:15:
e8:76:60:15:8a:c2:8f:b5:c1:ca:14:86:80:75:2e:
fb:3f:1c:4f:7e:a3:dd:01:b4:53:62:2d:d6:5b:7c:
db:37:fc:21:d2:f3:b7:93:c4:38:69:41:f8:6e:d9:
69:bd:af:3d:7a:59:e1:a1:0d:ac:51:b4:a7:dd:37:
ef:3a:60:41:98:0e:b9:03:c0:d4:4f:c6:63:76:34:
40:16:2c:30:9d:1e:13:ff:cf:e4:26:1d:54:21:3e:
bb:07:fc:f7:9a:35:96:76:bc:a9:f9:9e:94:b2:88:
c2:63:fd:c1:c8:84:75:dc:46:05:39:73:5a:67:ee:
d5:94:7c:19:16:a6:fc:5c:53:e2:1e:f5:2a:4f:59:
26:34:10:1b:77:c4:98:d0:1c:eb:79:26:e0:f3:c8:
90:66:03:c7:10:0d:cc:5d:10:6a:d6:21:10:9a:f7:
74:34:a4:eb:b8:1a:ce:9d:21:68:d5:e9:30:29:8d:
7f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3C:5B:AC:9F:BB:E4:09:26:C5:8E:35:90:36:CE:CA:7B:AF:62:1B
X509v3 Authority Key Identifier:
keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/323430333a386430303a3a2f33322d3332203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:8d00::/32
Signature Algorithm: sha256WithRSAEncryption
71:71:b8:e0:bc:87:fd:6d:41:49:5f:db:a4:3d:80:48:79:11:
80:fd:cd:c8:0d:20:f7:61:b8:88:a6:20:8a:2b:3e:fd:67:4c:
85:4e:d7:6d:3a:23:bb:79:04:78:35:19:f6:9c:6a:1f:1b:76:
85:4c:a8:3c:cd:4f:ea:ba:65:93:57:d9:41:cc:d6:55:7f:98:
16:14:c6:6a:1c:5c:67:e3:b3:cc:87:58:9b:0b:03:0d:ad:12:
ce:7c:d1:77:a5:51:ad:c3:91:99:96:75:ac:38:45:d7:cc:17:
7d:40:66:31:11:71:20:90:3b:35:5c:20:58:b6:eb:eb:e3:16:
d4:88:73:ec:fd:5a:4a:72:de:ea:40:33:10:1e:4b:3a:be:55:
76:7b:fb:82:eb:bf:c2:77:e5:b6:06:05:4e:50:f6:ed:c1:65:
a3:2b:aa:37:02:c5:86:44:4b:8b:21:3c:86:1f:85:a5:a4:e8:
ec:70:19:86:4d:bd:c4:ad:d1:1c:2c:94:fb:fa:06:ea:a2:c7:
85:2d:02:67:30:6b:4a:1d:dd:4d:73:54:f7:df:2a:81:e0:c7:
24:bb:37:4b:73:cb:b6:1c:23:47:34:43:4a:c3:99:45:ba:12:
e4:f9:d6:45:03:9a:49:58:de:7f:ec:8a:11:03:d4:32:a5:2e:
0e:88:06:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:21:37 2026 by rpki-client