
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106055295731236875/0/323430333a363734303a3a2f34382d3438203d3e2034383038.roa
File: 323430333a363734303a3a2f34382d3438203d3e2034383038.roa (raw, json)
Hash identifier: xVjIIll3PePJXngcsv3lCke4SgWX61LJmNnDtNzxkZU=
Subject key identifier: B5:7F:55:16:BC:08:BF:90:03:8F:0A:EF:6A:F5:C4:6F:E9:DD:F0:4A
Certificate issuer: /CN=FA453AF3F4AB166551FD4C322D5FD2384364BAEA
Certificate serial: 1C005DF85EB0986EFC9DD5385E18A3906E38A554
Authority key identifier: FA:45:3A:F3:F4:AB:16:65:51:FD:4C:32:2D:5F:D2:38:43:64:BA:EA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/323430333a363734303a3a2f34382d3438203d3e2034383038.roa
Signing time: Mon 11 May 2026 03:19:35 +0000
ROA not before: Mon 11 May 2026 03:14:35 +0000
ROA not after: Mon 10 May 2027 03:19:35 +0000
asID: 4808
IP address blocks: 2403:6740::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.crl
rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:04:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:00:5d:f8:5e:b0:98:6e:fc:9d:d5:38:5e:18:a3:90:6e:38:a5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA453AF3F4AB166551FD4C322D5FD2384364BAEA
Validity
Not Before: May 11 03:14:35 2026 GMT
Not After : May 10 03:19:35 2027 GMT
Subject: CN=B57F5516BC08BF90038F0AEF6AF5C46FE9DDF04A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d2:43:46:ab:13:b1:5c:7c:22:95:f0:21:06:
e3:90:58:74:04:7b:d6:a4:20:14:bf:11:56:29:da:
73:47:d0:3b:67:67:77:52:14:c4:0c:27:b6:8a:4c:
ef:8d:4a:0d:5d:80:66:84:14:11:9a:7f:9a:68:32:
81:d5:db:d6:ce:cf:82:bc:1e:7a:a2:b6:9b:08:12:
dc:0f:05:21:9d:17:c0:2b:6f:a4:d6:9d:ff:ea:4c:
ad:04:32:2f:44:5e:3d:cb:12:28:fd:67:ec:d7:76:
d1:30:86:74:1a:8e:31:eb:be:21:af:04:12:26:1a:
3d:e4:46:8d:ad:6e:35:f5:60:43:68:38:29:32:db:
bb:bf:54:28:f4:4e:d7:c2:e7:2b:c6:23:c0:67:81:
c5:8d:03:38:a4:26:c6:25:c0:41:da:4c:be:40:02:
e1:a7:0c:51:ae:16:10:17:64:97:57:4b:76:b1:17:
e3:07:27:73:37:32:72:8f:8e:8a:e8:12:fc:af:37:
da:86:b8:81:c6:20:6f:4f:ae:a3:5c:e9:c3:5a:1a:
77:a3:a6:1c:39:ab:e4:de:04:d7:99:7c:87:b9:e2:
e1:7d:4b:86:7f:31:e7:0c:c6:7b:a8:ab:40:f4:aa:
73:cd:d0:2b:b8:50:27:c6:8a:e6:25:3b:dd:fa:20:
07:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7F:55:16:BC:08:BF:90:03:8F:0A:EF:6A:F5:C4:6F:E9:DD:F0:4A
X509v3 Authority Key Identifier:
keyid:FA:45:3A:F3:F4:AB:16:65:51:FD:4C:32:2D:5F:D2:38:43:64:BA:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/323430333a363734303a3a2f34382d3438203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:6740::/48
Signature Algorithm: sha256WithRSAEncryption
67:2f:f0:f6:b2:89:f2:68:98:a5:88:71:14:67:5a:4c:63:c9:
7c:b3:af:96:22:03:f3:1f:2b:b2:3a:f9:3c:aa:2c:7e:d7:ef:
04:4b:45:0d:d0:22:72:eb:95:27:53:6a:14:40:1d:99:46:81:
f9:0e:c6:1b:94:78:81:67:17:c8:17:f8:7b:b8:f5:4e:b8:b4:
e2:38:e3:7a:22:84:73:4e:ce:ae:15:01:c2:f9:80:0c:5b:f3:
86:0e:92:3c:1c:76:42:9c:16:a7:83:e9:e0:17:e0:63:ba:23:
35:9b:67:00:fb:5d:fc:ac:a7:d0:11:fb:3b:66:7c:b1:fb:77:
1f:56:a1:be:ed:5f:94:1b:44:af:22:2a:c0:11:05:35:ee:62:
49:73:1d:fc:14:bc:9c:e9:e0:29:93:16:f6:68:ba:19:cc:03:
c6:f2:6c:31:99:a2:78:ee:1b:19:d3:4d:b2:57:e1:fd:75:a5:
2b:2d:ce:6b:e9:7e:6d:0a:48:04:b3:dc:06:3c:24:cd:87:6c:
04:c0:35:ea:3f:37:c5:58:fd:76:32:65:03:1d:7d:5f:ff:54:
e6:bd:fa:e5:2e:2b:15:d0:5a:a9:77:0e:e3:54:b4:b0:a2:02:
e3:f8:e8:93:ec:9f:47:d2:e2:89:ac:ac:b0:c5:19:f8:4e:3d:
7c:0e:ec:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:57:00 2026 by rpki-client