
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106035279619293197/0/323430363a353334303a363636363a3a2f34382d3438203d3e20313339313336.roa
File: 323430363a353334303a363636363a3a2f34382d3438203d3e20313339313336.roa (raw, json)
Hash identifier: HoPmirMEOyLSslW6ouFEpRs6yyPTIWLGvLps3vROopY=
Subject key identifier: 73:5E:FD:26:65:1C:DF:69:23:7B:26:0A:09:EB:C0:FF:83:1E:58:30
Certificate issuer: /CN=90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415
Certificate serial: 46B4029E346B55119CC16F65FA5AB03AF06F0910
Authority key identifier: 90:B9:0B:70:03:C4:49:7A:0D:82:CB:81:A2:BD:4D:A4:EE:9A:B4:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/323430363a353334303a363636363a3a2f34382d3438203d3e20313339313336.roa
Signing time: Wed 13 May 2026 09:08:28 +0000
ROA not before: Wed 13 May 2026 09:03:28 +0000
ROA not after: Wed 12 May 2027 09:08:28 +0000
asID: 139136
IP address blocks: 2406:5340:6666::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.crl
rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:05:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:b4:02:9e:34:6b:55:11:9c:c1:6f:65:fa:5a:b0:3a:f0:6f:09:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415
Validity
Not Before: May 13 09:03:28 2026 GMT
Not After : May 12 09:08:28 2027 GMT
Subject: CN=735EFD26651CDF69237B260A09EBC0FF831E5830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4e:81:e4:67:0f:95:b1:c0:f2:65:5d:5f:49:
9e:19:db:a8:5a:20:7d:df:03:58:9e:60:b0:57:7b:
02:6b:81:e8:f6:42:e1:59:25:01:c7:ca:c5:3e:aa:
f0:d3:c1:62:51:33:a3:d3:60:a1:9c:01:4c:db:70:
7e:ac:ca:b9:ea:3d:ae:7f:e2:af:c2:85:41:72:60:
aa:45:ab:7f:b2:d6:36:5e:fc:30:e0:21:20:c1:94:
1e:f2:f0:8f:aa:7b:05:cf:04:ad:fd:45:ea:71:00:
83:5c:37:d9:60:ba:e5:3a:3c:ae:6d:89:79:1a:4f:
ff:87:a0:e3:26:d4:de:5c:5b:0f:6c:68:24:6b:07:
6c:a6:03:a9:82:8e:78:f9:08:8b:bb:75:5e:b1:d5:
df:8c:fb:ea:5e:0c:af:f2:c0:f2:e0:7b:cc:5a:7f:
99:8c:a4:e7:73:20:d1:8a:ee:da:82:dd:e7:ae:06:
98:bb:66:ba:d3:9b:7b:8f:5b:e7:b8:61:b9:63:21:
18:d8:a9:23:4d:de:17:f8:e1:7c:49:59:84:da:f5:
99:9e:c3:b0:12:f3:96:5c:b1:88:4c:2a:78:9b:0d:
58:3c:43:30:0b:fe:62:23:7b:35:2a:8a:5a:bb:0a:
32:4f:6b:7e:1d:55:0c:0a:40:04:25:e7:f6:2b:65:
53:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5E:FD:26:65:1C:DF:69:23:7B:26:0A:09:EB:C0:FF:83:1E:58:30
X509v3 Authority Key Identifier:
keyid:90:B9:0B:70:03:C4:49:7A:0D:82:CB:81:A2:BD:4D:A4:EE:9A:B4:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/323430363a353334303a363636363a3a2f34382d3438203d3e20313339313336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:5340:6666::/48
Signature Algorithm: sha256WithRSAEncryption
90:52:10:e4:2c:6e:04:39:f9:ad:4d:a5:c4:15:72:02:86:9a:
4c:91:f6:7f:d1:30:4e:64:2e:ef:00:96:a7:3c:4d:7a:38:3e:
b8:ea:76:41:5c:33:f1:82:15:92:ac:2b:8a:12:98:4a:01:6d:
cb:23:64:d3:9a:a2:13:d6:9b:26:12:d8:c7:72:49:a8:97:19:
d9:bb:87:99:a7:8b:3c:3c:a7:38:36:f5:fa:cb:e9:b5:31:bb:
f9:a6:88:81:9b:4e:c9:55:dc:b3:62:5c:8e:c2:f1:f0:d7:78:
29:db:27:82:15:d2:d3:10:08:bc:80:aa:ed:cf:9b:55:4e:47:
f5:b7:75:26:bf:7a:68:1a:51:83:41:24:2a:56:39:36:f2:c4:
e8:cd:37:1b:8e:df:4e:5a:24:9d:81:74:2a:52:ef:2f:34:3c:
5a:7c:5f:08:18:03:73:12:a7:89:99:8a:df:46:26:4c:33:6e:
e0:51:46:57:c1:f6:32:10:41:96:a0:5c:69:60:1b:10:4e:14:
4e:95:66:49:1c:8e:c1:00:f6:f0:c0:b9:1a:24:53:0d:f3:ee:
d6:36:b7:0d:73:3b:eb:8e:64:a3:40:bf:3f:cf:b2:7c:3c:a0:
f9:96:5e:ec:78:2b:88:9e:06:c7:22:c9:63:98:ca:01:96:b6:
f8:e6:95:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:32:36 2026 by rpki-client