
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106035279619293197/0/323430363a353334303a3a2f33322d3332203d3e20313339313336.roa
File: 323430363a353334303a3a2f33322d3332203d3e20313339313336.roa (raw, json)
Hash identifier: CpJc6IZGrJww5ORAqOAIJSEWedSN07vUHgD7v72aGEE=
Subject key identifier: A1:B8:5B:D8:D8:57:A1:CA:7A:36:09:7D:E5:C7:25:64:A9:3D:F4:E4
Certificate issuer: /CN=90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415
Certificate serial: 558276575E0DE7F52DAB9A9003C616D8A2AE00E4
Authority key identifier: 90:B9:0B:70:03:C4:49:7A:0D:82:CB:81:A2:BD:4D:A4:EE:9A:B4:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/323430363a353334303a3a2f33322d3332203d3e20313339313336.roa
Signing time: Wed 13 May 2026 09:08:28 +0000
ROA not before: Wed 13 May 2026 09:03:28 +0000
ROA not after: Wed 12 May 2027 09:08:28 +0000
asID: 139136
IP address blocks: 2406:5340::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.crl
rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:05:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:82:76:57:5e:0d:e7:f5:2d:ab:9a:90:03:c6:16:d8:a2:ae:00:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415
Validity
Not Before: May 13 09:03:28 2026 GMT
Not After : May 12 09:08:28 2027 GMT
Subject: CN=A1B85BD8D857A1CA7A36097DE5C72564A93DF4E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c3:39:eb:79:b9:9f:54:5c:93:34:9d:0e:ff:
1e:3e:85:19:cc:31:00:5e:f4:dc:5d:a4:52:0a:bc:
d2:6a:0b:dd:e3:0c:8e:d7:7c:aa:7e:75:9e:55:d0:
1f:5c:3b:0a:88:b7:b6:14:5a:f7:a6:2c:18:be:88:
9f:dd:11:8e:2e:83:d6:6c:05:ed:b6:50:aa:e1:fe:
9b:0f:e5:27:39:8f:98:a3:0e:3e:fb:e7:be:d9:57:
af:de:18:4f:6e:b0:12:30:2e:99:0b:db:44:e9:8d:
f1:73:d6:51:b6:1d:d6:d8:bf:29:24:59:33:ef:2c:
c6:7d:9b:cc:60:11:d2:3e:11:31:85:d8:8c:d4:6f:
a1:28:1a:ce:aa:bd:aa:fb:47:22:9d:eb:d5:fd:b6:
8b:46:b6:a1:be:bf:75:8e:d6:32:97:91:14:e8:ab:
40:ab:21:62:26:2c:a1:60:be:76:6c:d5:5c:4d:5f:
26:86:cb:a0:f7:2b:56:a7:c4:12:d2:75:78:fa:f4:
22:4c:f7:e0:49:03:47:78:ed:99:65:28:e6:e5:77:
d2:34:33:6c:2f:b5:0d:c9:34:77:b2:a1:39:2d:f9:
c4:f4:99:0c:2a:96:ba:90:0c:a9:6b:c7:76:39:5c:
a8:9b:83:34:74:50:1b:ae:6b:99:4b:5e:f3:32:e5:
38:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B8:5B:D8:D8:57:A1:CA:7A:36:09:7D:E5:C7:25:64:A9:3D:F4:E4
X509v3 Authority Key Identifier:
keyid:90:B9:0B:70:03:C4:49:7A:0D:82:CB:81:A2:BD:4D:A4:EE:9A:B4:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/323430363a353334303a3a2f33322d3332203d3e20313339313336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:5340::/32
Signature Algorithm: sha256WithRSAEncryption
a3:e6:4a:be:4d:ff:a3:60:54:53:42:7b:4c:61:07:a9:41:a6:
12:8e:b9:56:e7:60:91:a6:27:f8:51:86:ff:86:5c:86:31:68:
64:0f:35:d5:3d:91:24:6a:4e:7f:ec:57:31:91:32:dc:ef:a1:
cc:4e:d1:df:56:fd:73:af:e7:f2:3e:e6:e6:66:88:60:0a:56:
67:fd:02:15:3e:18:7d:18:c1:11:9e:63:ab:dd:32:58:cb:16:
47:9d:33:63:9b:49:ba:b0:af:27:50:9a:d2:92:c6:d7:8c:7f:
d8:53:e5:10:ad:ba:8a:2a:b4:2d:db:b1:f3:9d:38:68:78:d8:
14:b5:d8:51:bb:cd:49:29:96:5c:8d:7f:56:24:f1:57:b7:c1:
6d:be:21:ac:a5:70:fe:08:25:51:cd:3b:17:d2:47:bd:27:02:
5b:82:ce:fe:7e:ee:ce:54:b5:ae:25:75:db:14:e3:bb:fc:d0:
0e:30:a2:fc:15:bd:9c:6e:61:85:f7:5d:ea:74:ea:aa:1f:42:
d2:e6:01:f9:11:63:51:05:36:04:5b:84:af:a0:91:ef:b2:31:
46:37:4e:33:24:cd:b0:e7:40:ee:c3:7c:2d:1b:bd:f4:64:c7:
95:e9:e0:62:a6:3c:0d:fe:e2:24:51:ce:39:e4:74:6d:d6:64:
03:27:98:e5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 21:32:34 2026 by rpki-client