
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104592295958675461/0/323430323a393263303a3a2f33322d3332203d3e20313331353232.roa
File: 323430323a393263303a3a2f33322d3332203d3e20313331353232.roa (raw, json)
Hash identifier: bn74U/pJ6i07cFoLddKvBk+QLiigztrzbjuTsxVUDHs=
Subject key identifier: A8:B9:B2:26:B2:1E:4E:23:4E:19:7E:1B:F8:96:21:C9:42:4A:D8:E6
Certificate issuer: /CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
Certificate serial: 37C9DE4366138E95FFA5147B476744BFF232E07E
Authority key identifier: 65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/323430323a393263303a3a2f33322d3332203d3e20313331353232.roa
Signing time: Thu 07 May 2026 02:28:14 +0000
ROA not before: Thu 07 May 2026 02:23:14 +0000
ROA not after: Thu 06 May 2027 02:28:14 +0000
asID: 131522
IP address blocks: 2402:92c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl
rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:26:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:c9:de:43:66:13:8e:95:ff:a5:14:7b:47:67:44:bf:f2:32:e0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
Validity
Not Before: May 7 02:23:14 2026 GMT
Not After : May 6 02:28:14 2027 GMT
Subject: CN=A8B9B226B21E4E234E197E1BF89621C9424AD8E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1b:d1:01:1c:a4:3e:e9:10:60:98:07:3a:ba:
73:32:92:33:86:0e:15:1b:2d:78:74:97:57:ad:9e:
13:fd:2b:84:40:f3:a2:b5:2e:3a:78:96:63:5d:a3:
87:dc:5d:cc:c0:b4:0d:1f:52:25:e5:3f:5e:3e:9f:
43:dd:a2:92:89:85:d8:bc:59:91:18:7e:4c:b3:c6:
c1:ef:93:75:6a:0f:7a:74:de:52:d3:43:eb:df:7e:
23:9a:50:d9:61:87:27:b4:a9:42:eb:00:80:fe:c5:
4c:73:e2:5e:05:8e:5d:4e:86:de:cf:b7:80:2e:06:
84:62:bd:ca:4f:6b:e2:5c:9c:4f:34:5e:ab:fd:03:
d4:3d:51:be:4a:6e:94:6e:5d:63:b0:93:f3:45:8d:
51:8e:37:b0:b8:40:9b:01:db:90:72:df:1f:23:eb:
b1:d6:94:cb:aa:53:0f:62:48:90:cb:22:32:b8:b3:
19:95:c3:ad:d3:7c:d9:bb:a1:b5:be:c4:6c:db:1a:
66:f8:a8:ba:c6:bb:e8:8b:c8:a5:80:61:f5:1a:8e:
fc:0b:99:04:37:e1:cf:fd:73:b8:9a:cc:89:b5:d4:
a6:33:12:fa:5e:b6:a4:1f:3b:71:77:e0:18:e8:03:
34:d5:3e:3e:35:87:fd:23:5f:75:3b:54:7e:14:87:
c9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B9:B2:26:B2:1E:4E:23:4E:19:7E:1B:F8:96:21:C9:42:4A:D8:E6
X509v3 Authority Key Identifier:
keyid:65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/323430323a393263303a3a2f33322d3332203d3e20313331353232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:92c0::/32
Signature Algorithm: sha256WithRSAEncryption
1d:45:02:e5:ff:85:c7:9f:10:f3:f5:ce:49:aa:b9:ed:01:cf:
e9:48:1c:da:c8:65:43:41:43:72:e8:ac:bd:59:57:2e:5b:ba:
58:c1:be:28:62:d2:ac:ac:b9:ba:4d:fa:3b:6e:32:43:eb:85:
5f:ed:32:4e:d7:c0:81:e7:a2:a7:1a:96:69:bc:3c:52:38:05:
25:dc:77:c0:61:68:5b:33:7d:59:12:e4:32:ca:a8:3c:06:24:
80:64:2f:4e:b1:46:a1:51:fc:c9:41:f1:8e:94:4d:e9:06:ae:
cd:cc:cc:14:51:42:c1:bd:e0:40:a0:9b:5c:b9:ca:c7:83:a2:
66:b6:1c:f9:48:a4:7d:e7:bd:73:d6:b3:61:a8:1e:ae:0b:30:
32:bd:61:4b:27:a5:b6:ca:ad:42:c8:13:59:d9:4f:7d:54:df:
00:b2:1d:b1:19:80:7e:84:88:06:58:c4:e1:e2:d7:48:ed:b6:
27:62:bd:59:c3:4b:3a:95:88:9a:7b:66:49:40:97:2e:cf:a3:
93:71:7b:66:95:02:b5:82:fc:68:b5:95:7e:76:2f:48:cd:4a:
18:f3:b2:83:d6:f3:fa:a9:d0:25:a6:d3:ab:39:cc:66:00:da:
d7:9c:c8:db:2b:4b:f2:ec:c3:39:9e:20:48:13:2a:85:59:8d:
2c:5d:8e:bc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 15:44:17 2026 by rpki-client