
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105375930328547341/0/323430333a346138303a3a2f33322d3332203d3e2030.roa
File: 323430333a346138303a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier: E+y7ZP4/IkfHf0gPRAUW7GMFf81wT+enHmqcRbcYENg=
Subject key identifier: F7:09:E5:C3:FD:D4:DA:DB:BA:DD:63:14:3A:DB:C0:67:16:B4:94:E4
Certificate issuer: /CN=30BFDE48CAB9DDD5E275A7241FF7E4E40518F507
Certificate serial: 174D1F0AC5E7A0C3F2E98A4DB370A96882B5424F
Authority key identifier: 30:BF:DE:48:CA:B9:DD:D5:E2:75:A7:24:1F:F7:E4:E4:05:18:F5:07
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/323430333a346138303a3a2f33322d3332203d3e2030.roa
Signing time: Sat 09 May 2026 06:18:17 +0000
ROA not before: Sat 09 May 2026 06:13:17 +0000
ROA not after: Sat 08 May 2027 06:18:17 +0000
asID: 0
IP address blocks: 2403:4a80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.crl
rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:50:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:4d:1f:0a:c5:e7:a0:c3:f2:e9:8a:4d:b3:70:a9:68:82:b5:42:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30BFDE48CAB9DDD5E275A7241FF7E4E40518F507
Validity
Not Before: May 9 06:13:17 2026 GMT
Not After : May 8 06:18:17 2027 GMT
Subject: CN=F709E5C3FDD4DADBBADD63143ADBC06716B494E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fd:ea:a2:24:08:24:69:70:ff:3c:2a:41:36:
6b:99:2e:1e:c8:f7:94:c3:77:36:c2:f9:8d:fc:ed:
57:66:2e:a0:f9:f6:79:9d:e5:75:6f:50:bc:ab:df:
8a:58:f0:98:0a:50:23:ad:14:aa:4d:eb:51:64:40:
5f:92:47:e7:59:5f:15:7a:0c:26:da:34:24:43:88:
40:08:7c:59:c3:e9:f6:0d:2c:49:c3:c0:e0:c3:10:
2c:a7:8a:e4:55:61:98:42:34:c8:bf:f6:a6:e5:ad:
54:e0:60:b8:23:ef:ff:5f:ec:00:19:b3:c0:75:5b:
be:f8:37:78:ea:ec:0a:d3:2b:d3:8b:c7:54:92:61:
2a:1a:ee:71:f8:7a:85:b0:9e:b8:02:cc:29:dd:76:
90:3a:39:b6:fd:1c:3d:f9:f7:8f:4b:9e:84:f3:7b:
6a:24:4a:39:c2:54:b0:4d:5f:1a:e9:bf:29:80:29:
90:11:e5:ec:2c:f6:7d:2c:d8:24:04:e8:75:fe:9c:
d7:4b:28:6b:71:51:24:e6:ae:26:9f:d9:e8:61:27:
17:1e:e5:5c:7b:30:af:9c:4d:e3:4b:12:e0:b4:45:
90:a5:5a:c8:8c:c6:8e:12:ad:ab:03:fa:ca:ff:1d:
af:03:68:25:25:6a:b9:eb:91:3e:44:6f:4f:53:b1:
b4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:09:E5:C3:FD:D4:DA:DB:BA:DD:63:14:3A:DB:C0:67:16:B4:94:E4
X509v3 Authority Key Identifier:
keyid:30:BF:DE:48:CA:B9:DD:D5:E2:75:A7:24:1F:F7:E4:E4:05:18:F5:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/323430333a346138303a3a2f33322d3332203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:4a80::/32
Signature Algorithm: sha256WithRSAEncryption
31:49:22:44:37:40:f8:4c:f9:af:7c:8c:ae:64:10:7d:5d:35:
71:54:65:03:1d:8d:55:c9:97:29:f2:27:65:b8:7b:c4:6f:96:
1e:34:52:64:25:99:44:dc:b6:20:19:74:22:98:21:8d:e8:03:
7c:48:fd:eb:08:48:aa:b0:d8:8c:34:54:61:2d:82:84:b7:13:
2f:37:01:2a:cd:03:dd:67:44:b3:1a:2e:0f:04:91:f4:c0:44:
e0:71:a7:db:09:7b:5d:0b:a8:3e:19:00:53:3a:7e:e5:66:54:
ac:3e:46:77:5e:9e:6f:dc:5e:93:0f:e3:53:41:92:e9:17:f8:
58:05:71:bb:5f:5d:0a:32:c7:0a:d5:de:f4:1f:2a:71:b5:88:
21:07:71:55:73:ec:a1:5a:77:be:25:d4:a6:ab:bc:ee:12:9f:
a6:20:e6:26:17:f9:98:00:1b:ef:ec:7b:0a:76:9b:50:fa:96:
c5:f3:ce:6a:37:17:96:06:5f:d6:96:91:8d:10:6e:2b:a9:a5:
14:05:a9:d9:25:dc:1a:7a:37:01:b8:71:ac:8e:d1:a4:b3:14:
5d:d7:09:a8:d7:94:59:43:3b:5e:35:b1:54:15:f1:c9:1c:0d:
18:5d:3c:e2:de:05:b6:e5:8c:99:4e:55:7b:76:6c:4f:9b:f0:
fc:8b:e0:8a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUF00fCsXnoMPy6YpNs3CpaIK1Qk8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBCRkRFNDhDQUI5RERENUUyNzVBNzI0MUZGN0U0RTQw
NTE4RjUwNzAeFw0yNjA1MDkwNjEzMTdaFw0yNzA1MDgwNjE4MTdaMDMxMTAvBgNV
BAMTKEY3MDlFNUMzRkRENERBREJCQURENjMxNDNBREJDMDY3MTZCNDk0RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD/eqiJAgkaXD/PCpBNmuZLh7I
95TDdzbC+Y387VdmLqD59nmd5XVvULyr34pY8JgKUCOtFKpN61FkQF+SR+dZXxV6
DCbaNCRDiEAIfFnD6fYNLEnDwODDECyniuRVYZhCNMi/9qblrVTgYLgj7/9f7AAZ
s8B1W774N3jq7ArTK9OLx1SSYSoa7nH4eoWwnrgCzCnddpA6Obb9HD35949LnoTz
e2okSjnCVLBNXxrpvymAKZAR5ews9n0s2CQE6HX+nNdLKGtxUSTmriaf2ehhJxce
5Vx7MK+cTeNLEuC0RZClWsiMxo4SrasD+sr/Ha8DaCUlarnrkT5Eb09TsbShAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU9wnlw/3U2tu63WMUOtvAZxa0lOQwHwYDVR0j
BBgwFoAUML/eSMq53dXidackH/fk5AUY9QcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NTM3NTkzMDMyODU0NzM0MS8wLzMwQkZERTQ4Q0FCOURERDVFMjc1QTcyNDFGRjdF
NEU0MDUxOEY1MDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzBCRkRFNDhDQUI5RERENUUyNzVBNzI0MUZGN0U0RTQwNTE4RjUwNy5jZXIw
gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA1Mzc1OTMwMzI4NTQ3MzQxLzAvMzIzNDMwMzMzYTM0
NjEzODMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkA0qA
MA0GCSqGSIb3DQEBCwUAA4IBAQAxSSJEN0D4TPmvfIyuZBB9XTVxVGUDHY1VyZcp
8idluHvEb5YeNFJkJZlE3LYgGXQimCGN6AN8SP3rCEiqsNiMNFRhLYKEtxMvNwEq
zQPdZ0SzGi4PBJH0wETgcafbCXtdC6g+GQBTOn7lZlSsPkZ3Xp5v3F6TD+NTQZLp
F/hYBXG7X10KMscK1d70HypxtYghB3FVc+yhWne+JdSmq7zuEp+mIOYmF/mYABvv
7HsKdptQ+pbF885qNxeWBl/WlpGNEG4rqaUUBanZJdwaejcBuHGsjtGksxRd1wmo
15RZQzteNbFUFfHJHA0YXTzi3gW25YyZTlV7dmxPm/D8i+CK
-----END CERTIFICATE-----
Generated at Wed May 13 14:27:46 2026 by rpki-client