
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a313030303a3a2f33362d3336203d3e203234313339.roa
File: 323430363a363130303a313030303a3a2f33362d3336203d3e203234313339.roa (raw, json)
Hash identifier: orp1bXNad5I7fyfSNRPjjEGSQNI3R+PNfxTZOqreeX0=
Subject key identifier: 16:D3:76:82:2B:AD:4A:5B:4C:6C:DA:21:C1:06:E6:2F:D1:9F:C7:05
Certificate issuer: /CN=AA39AE9FC417219D4A84D7759F82869F86905204
Certificate serial: 01E776E617D99CD90ECCAE3FF24F97E5C27E20F2
Authority key identifier: AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a313030303a3a2f33362d3336203d3e203234313339.roa
Signing time: Tue 12 May 2026 07:24:50 +0000
ROA not before: Tue 12 May 2026 07:19:50 +0000
ROA not after: Tue 11 May 2027 07:24:50 +0000
asID: 24139
IP address blocks: 2406:6100:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl
rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:e7:76:e6:17:d9:9c:d9:0e:cc:ae:3f:f2:4f:97:e5:c2:7e:20:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA39AE9FC417219D4A84D7759F82869F86905204
Validity
Not Before: May 12 07:19:50 2026 GMT
Not After : May 11 07:24:50 2027 GMT
Subject: CN=16D376822BAD4A5B4C6CDA21C106E62FD19FC705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:10:64:3e:d2:4c:a8:a7:58:d9:4f:5c:84:12:
d8:a9:2c:4d:f7:b9:31:4e:d2:39:c6:bb:9a:06:a5:
7b:b0:41:be:d5:d4:76:58:c8:df:9b:2d:1c:f5:fd:
44:2c:09:85:b9:dd:f0:3f:75:10:29:2f:f3:69:4b:
30:33:f0:b6:da:e6:c1:18:f7:6b:6d:cd:6b:2f:d6:
3b:69:37:a2:23:ea:f8:87:e3:43:ea:c4:35:7c:88:
e2:66:2c:b2:20:54:a4:67:89:cd:ad:39:bb:ed:0b:
54:51:34:11:0e:51:84:ad:84:7d:7d:d2:ed:c4:5f:
c6:31:bd:13:95:a3:89:49:59:15:69:b1:1b:54:e5:
7e:46:7a:2a:59:e6:0c:49:16:3e:c7:56:64:f7:90:
fc:15:67:62:82:02:46:ac:c8:35:a2:8d:34:af:10:
07:e1:86:2f:e7:d1:02:55:22:00:bd:fe:0a:28:0b:
05:a9:ce:4f:76:4a:8a:fb:62:8c:51:3e:92:03:0d:
65:62:f8:17:fc:6a:33:52:2c:14:ab:ce:82:ae:b1:
b9:0e:3a:e7:c3:bd:5b:50:2b:a7:80:16:e4:6c:03:
32:54:ab:5f:7b:5c:31:37:05:6a:b0:b3:7b:3e:41:
10:47:31:f0:49:f0:99:63:2d:3a:b3:e2:ac:6f:df:
65:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D3:76:82:2B:AD:4A:5B:4C:6C:DA:21:C1:06:E6:2F:D1:9F:C7:05
X509v3 Authority Key Identifier:
keyid:AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a313030303a3a2f33362d3336203d3e203234313339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:6100:1000::/36
Signature Algorithm: sha256WithRSAEncryption
83:5f:87:1a:61:28:da:72:f5:d1:45:a5:b9:9b:d5:f3:a0:5d:
11:7c:b2:63:b7:a1:43:22:a1:bf:67:ab:70:f9:9b:b5:e6:ca:
23:d4:c8:9a:be:ef:60:78:87:38:b3:0f:a6:b9:29:35:d3:b7:
e0:a1:d5:f1:53:95:ab:f5:d1:bc:9b:27:d1:5b:96:c0:88:ee:
7c:7f:51:47:fd:b4:ff:4a:35:4e:03:12:2f:8d:10:21:e1:5b:
31:76:70:f4:d2:3f:00:5c:76:7d:4b:69:15:f3:84:d8:95:ca:
22:a6:c1:b4:a6:cb:38:47:de:e5:7d:f5:47:72:c9:f4:f5:36:
6b:05:f2:62:99:52:12:31:af:39:32:2f:bd:fd:da:d6:ca:bd:
c0:2d:77:05:90:65:10:63:97:1e:69:45:66:69:92:25:80:e9:
db:d4:ad:bc:c8:53:49:01:79:62:b9:86:70:7a:b7:f8:73:95:
f0:90:c8:ec:3b:21:96:e6:50:c7:74:3e:11:17:5b:3f:a6:03:
ca:d9:b1:22:44:b8:0a:3d:7d:bb:35:86:3f:77:66:51:1d:9e:
f4:af:fe:64:4f:02:9f:57:de:02:d9:dc:a6:a6:fd:19:50:85:
d6:eb:13:18:31:fa:e5:87:a2:36:55:b7:0b:e5:40:d6:9c:b7:
99:14:7b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:42:03 2026 by rpki-client