
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104592295958675461/0/323430323a393263303a3a2f34382d3438203d3e2034383038.roa
File: 323430323a393263303a3a2f34382d3438203d3e2034383038.roa (raw, json)
Hash identifier: z3aW/cGUBCOgCbXCNQM0uYgfb7vC4XZ7KBubPUKlgb8=
Subject key identifier: BE:1D:3E:38:7C:0C:09:BB:6E:85:11:DB:0E:23:BF:69:BA:D9:97:A6
Certificate issuer: /CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
Certificate serial: 33F8CFD41E9866AC0D09F4FBA1683134672B493A
Authority key identifier: 65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/323430323a393263303a3a2f34382d3438203d3e2034383038.roa
Signing time: Thu 07 May 2026 02:27:45 +0000
ROA not before: Thu 07 May 2026 02:22:45 +0000
ROA not after: Thu 06 May 2027 02:27:45 +0000
asID: 4808
IP address blocks: 2402:92c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl
rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:26:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:f8:cf:d4:1e:98:66:ac:0d:09:f4:fb:a1:68:31:34:67:2b:49:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
Validity
Not Before: May 7 02:22:45 2026 GMT
Not After : May 6 02:27:45 2027 GMT
Subject: CN=BE1D3E387C0C09BB6E8511DB0E23BF69BAD997A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:04:1f:c1:9e:4b:ab:fb:e0:05:64:4d:8d:e1:
d7:39:3e:10:ee:59:f9:73:b9:14:e0:ea:41:c6:f0:
83:84:28:ed:0f:b0:bb:3e:93:3e:5c:74:9c:f7:dc:
0b:9e:e0:9b:5b:f5:f6:e2:69:97:dc:6a:e3:5f:6c:
be:2e:3e:f6:71:f7:87:d2:e1:36:94:1e:9b:70:61:
7c:12:54:6b:ef:92:d5:1e:22:54:92:ec:61:53:e8:
05:b8:49:12:26:4f:9e:1b:1a:59:a0:4c:d8:d9:2e:
74:b4:a0:75:1f:67:43:32:c8:00:9c:f1:02:7b:51:
58:6e:7c:a6:75:f5:36:0f:38:07:18:eb:12:fa:3f:
44:53:ec:e8:46:e5:c4:55:ef:c8:85:38:8f:ad:22:
77:2f:c4:0f:9c:c3:b0:cc:4d:1a:5a:48:2a:db:73:
76:e2:fd:b1:f8:60:2c:6f:c3:7c:d0:d3:5c:b1:b9:
de:0a:c2:9d:ae:82:62:e3:b6:91:76:62:3d:61:67:
42:2f:d7:e6:16:a9:04:ff:69:8f:d3:17:7f:ef:d6:
42:f3:8f:83:b2:b7:9e:46:75:f3:4d:b4:33:18:75:
a9:01:91:ea:a2:1d:35:e3:37:e8:71:8f:50:cb:33:
8c:fb:b8:9a:f3:e0:aa:4d:a5:94:5a:74:38:29:9b:
88:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1D:3E:38:7C:0C:09:BB:6E:85:11:DB:0E:23:BF:69:BA:D9:97:A6
X509v3 Authority Key Identifier:
keyid:65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/323430323a393263303a3a2f34382d3438203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:92c0::/48
Signature Algorithm: sha256WithRSAEncryption
9f:35:01:93:c4:14:79:41:ad:27:59:f6:84:9b:1a:34:3a:ce:
b2:d4:da:f0:64:49:c3:8d:74:31:36:3c:c3:16:68:58:34:42:
5f:0d:58:93:02:6c:58:4a:12:09:d1:ad:e4:58:75:a0:8b:00:
38:f6:78:00:d0:f1:e2:6a:01:13:08:d6:f8:e9:e2:ee:be:2b:
97:a1:26:0f:0b:d4:ee:b8:51:60:37:8e:c0:07:81:25:07:5b:
f8:81:1e:a1:7c:dd:32:cc:bb:8d:ed:37:b1:8e:cd:4c:62:e0:
77:c1:72:f1:3e:fa:5a:9d:7b:16:c0:9d:d6:c7:aa:24:9f:d5:
84:84:da:0a:4d:68:b7:f7:db:15:df:a2:0a:d8:03:28:55:16:
d2:de:85:ae:01:cc:59:bb:6b:45:36:06:59:77:fc:64:da:be:
db:a9:d0:41:8a:e6:02:cc:0c:a9:9e:42:a4:28:41:a8:9b:b7:
70:bc:7c:9e:df:b6:96:8f:9e:16:c4:cf:3b:6a:bb:60:80:fd:
e4:19:e6:2e:62:cc:f6:10:bc:13:17:f8:e5:26:e4:38:89:f9:
7e:f9:01:4d:89:8c:b0:b4:5e:4d:29:f8:15:7a:7b:56:82:75:
6a:f6:00:7c:b0:aa:65:47:ee:97:33:fa:b0:6c:73:d5:28:f0:
95:35:32:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:11:07 2026 by rpki-client