
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/323430333a623430303a3a2f33322d3332203d3e203130323132.roa
File: 323430333a623430303a3a2f33322d3332203d3e203130323132.roa (raw, json)
Hash identifier: Lzi2DAdro4APWJFpn+0Cg+SAoUvuID2xUmJmE84KTvc=
Subject key identifier: 62:26:94:92:D6:6A:A3:B0:0D:A8:6F:52:84:F1:60:1D:B7:16:B1:1E
Certificate issuer: /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Certificate serial: 68E3060AF61162F6C38A1E9F26E6A74DE0E45AAE
Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/323430333a623430303a3a2f33322d3332203d3e203130323132.roa
Signing time: Tue 28 Apr 2026 07:12:54 +0000
ROA not before: Tue 28 Apr 2026 07:07:54 +0000
ROA not after: Tue 27 Apr 2027 07:12:54 +0000
asID: 10212
IP address blocks: 2403:b400::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:e3:06:0a:f6:11:62:f6:c3:8a:1e:9f:26:e6:a7:4d:e0:e4:5a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Validity
Not Before: Apr 28 07:07:54 2026 GMT
Not After : Apr 27 07:12:54 2027 GMT
Subject: CN=62269492D66AA3B00DA86F5284F1601DB716B11E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4a:a3:b0:6c:8c:62:24:16:1e:4e:c3:f4:5e:
63:ca:7d:6b:51:80:a1:cc:13:25:f1:7d:58:af:b2:
e7:37:ac:e4:1a:70:80:82:34:a0:68:0b:88:1c:80:
36:13:9b:38:bd:3e:b0:42:3e:bf:4f:1b:fc:85:f6:
f1:22:ba:f8:01:6a:3a:68:95:73:8c:80:60:81:a8:
e5:1c:a2:ab:59:cc:b8:bd:8b:dd:e7:cd:6e:34:c3:
70:77:50:dd:ab:bd:38:5b:9a:8d:4a:05:95:82:73:
0b:5b:a3:82:37:8f:63:c7:d9:ba:9f:3b:bc:91:54:
d1:1b:9f:c6:66:f2:e5:94:68:e2:f0:9c:2a:f9:7b:
78:76:4a:4f:2e:19:a4:8c:a1:5b:bc:86:d0:f9:34:
2f:f7:6c:5e:83:34:e4:36:91:6c:03:b1:ab:ad:5d:
70:60:8a:1c:4f:f1:6e:49:93:d5:49:90:41:3c:04:
29:17:14:8f:04:53:e1:29:15:ad:ac:e8:35:3b:19:
1e:03:89:38:2c:a4:8c:47:e9:7d:bc:29:57:33:58:
a2:92:a5:22:10:39:2f:8e:10:36:07:87:b6:43:12:
60:87:47:d2:89:7d:66:b4:50:8b:45:80:55:31:f7:
be:96:09:d1:c6:30:b0:a4:06:fd:bb:f3:42:0a:3a:
ca:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:26:94:92:D6:6A:A3:B0:0D:A8:6F:52:84:F1:60:1D:B7:16:B1:1E
X509v3 Authority Key Identifier:
keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/323430333a623430303a3a2f33322d3332203d3e203130323132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:b400::/32
Signature Algorithm: sha256WithRSAEncryption
b2:2b:bd:2a:ba:e6:2c:0f:4b:56:29:f3:bf:a2:91:c5:91:48:
eb:40:2a:d7:5e:0a:3d:b3:1f:ba:c0:dc:16:4a:47:76:46:31:
5d:9f:90:10:1b:95:f0:6a:52:93:c3:77:7a:dc:a9:85:b2:12:
d9:e6:db:a5:dd:c8:78:f9:68:d2:3a:eb:9f:66:67:9e:e7:b4:
98:a7:26:06:d4:b8:56:ba:cd:be:9b:19:55:74:93:f0:3a:13:
89:6f:fa:7f:84:1c:f1:85:ee:ab:40:28:d9:1f:bc:bc:5b:24:
6a:39:df:c6:b4:ce:a0:51:06:e6:86:93:97:8b:d0:e8:c3:f8:
dd:b5:30:7c:6e:30:2c:7f:3f:cf:26:16:d7:89:9c:1e:2c:e7:
f9:b5:3a:48:57:f2:a4:09:2a:c2:ac:f6:af:ec:f4:01:af:f3:
ee:8d:d5:6d:49:3c:0d:65:41:55:36:93:34:03:18:d3:8c:a4:
de:64:b6:eb:49:2f:34:b2:89:c5:76:d3:ff:f1:a7:37:a2:34:
2c:3a:e9:fe:38:c3:23:51:b6:01:68:5c:6d:7f:84:99:40:47:
03:3a:bb:f5:fd:f4:4f:18:8c:dd:58:3f:16:90:2d:3e:6c:d1:
96:4c:74:1e:94:a6:f0:7b:ec:df:91:00:a9:f2:98:cc:8b:ea:
81:17:04:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:49:24 2026 by rpki-client