
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a343030303a3a2f33362d3336203d3e203234313339.roa
File: 323430363a363130303a343030303a3a2f33362d3336203d3e203234313339.roa (raw, json)
Hash identifier: Nc+iO12T5PwOZ1omW+heF25TZ/63WJlMCVihooShVAQ=
Subject key identifier: 8D:7B:A5:29:E8:21:D5:29:ED:23:08:01:14:CD:A2:E3:25:CB:0D:C1
Certificate issuer: /CN=AA39AE9FC417219D4A84D7759F82869F86905204
Certificate serial: 507C79B5E25A0831EE3A20449E052AAE7E453BA3
Authority key identifier: AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a343030303a3a2f33362d3336203d3e203234313339.roa
Signing time: Tue 12 May 2026 07:24:50 +0000
ROA not before: Tue 12 May 2026 07:19:50 +0000
ROA not after: Tue 11 May 2027 07:24:50 +0000
asID: 24139
IP address blocks: 2406:6100:4000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl
rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:7c:79:b5:e2:5a:08:31:ee:3a:20:44:9e:05:2a:ae:7e:45:3b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA39AE9FC417219D4A84D7759F82869F86905204
Validity
Not Before: May 12 07:19:50 2026 GMT
Not After : May 11 07:24:50 2027 GMT
Subject: CN=8D7BA529E821D529ED23080114CDA2E325CB0DC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:06:cb:b9:16:39:ae:79:b1:87:e7:0f:db:00:
98:c8:0f:17:36:38:a6:d3:8b:46:6b:7f:0c:e9:4a:
9d:ef:07:1d:44:c6:d4:23:21:a2:2c:03:9a:8b:da:
94:75:74:51:23:4f:8c:3e:c7:64:b8:f6:05:d5:60:
4f:13:a4:0f:71:de:eb:43:2f:d5:74:67:5d:25:e6:
10:10:95:46:c8:9f:9a:3a:41:3b:fc:23:da:c9:7f:
99:b2:5c:04:30:08:2e:14:1c:a0:ab:3f:58:9c:98:
49:29:9f:39:c3:44:b1:5c:b4:2d:7a:34:9b:68:82:
af:4e:c2:ea:eb:08:69:99:c0:22:25:34:92:78:b4:
c7:18:69:46:2a:8b:56:ea:75:ab:06:3e:d0:7a:df:
0c:d1:f7:ae:00:bc:35:1e:1a:26:28:53:99:e0:fa:
b2:09:e6:7f:51:0a:42:d6:05:08:e0:17:54:c8:32:
15:72:60:bd:01:d1:d2:b9:6e:0f:70:bb:5f:91:da:
72:6f:0f:46:4f:df:63:13:38:36:a3:d5:03:32:f8:
0d:04:1f:5e:d9:01:c3:79:fe:50:91:98:a9:4d:de:
37:7b:5e:93:99:d5:9e:41:20:6a:22:f0:69:32:85:
77:00:59:66:84:9c:30:07:08:fe:8c:31:81:ac:70:
df:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7B:A5:29:E8:21:D5:29:ED:23:08:01:14:CD:A2:E3:25:CB:0D:C1
X509v3 Authority Key Identifier:
keyid:AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a343030303a3a2f33362d3336203d3e203234313339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:6100:4000::/36
Signature Algorithm: sha256WithRSAEncryption
89:c0:e7:9e:89:40:4b:3f:fe:6f:1c:05:31:d0:1a:a0:50:4f:
d2:20:6a:3a:f0:fc:c6:6e:e3:46:76:fc:e7:95:5c:ec:ca:29:
ca:27:42:a6:5e:fc:b2:a5:52:e1:29:24:9b:91:27:8e:2a:ca:
ae:f0:35:95:ef:0e:66:30:0f:58:bb:e6:6a:b4:d6:a4:0d:7b:
8b:75:6b:cb:26:c2:54:13:01:b5:4c:b0:b7:2d:8b:d1:f6:1b:
70:9c:80:76:53:c4:d7:94:05:6d:48:7c:a8:63:c9:35:fe:84:
6a:d4:e3:6c:33:ce:35:8b:8d:19:4c:fd:ff:cd:dd:0a:e3:6a:
67:7f:1f:71:b2:87:46:4f:cb:86:25:c9:a0:7d:98:b2:c1:6a:
4e:ba:02:8a:4e:1b:ea:fe:a9:0f:e2:bc:65:1f:da:39:a4:06:
63:59:e6:13:59:7a:ba:67:41:31:36:fc:b0:9a:ed:c2:d3:2c:
1b:7c:95:c4:87:a5:53:ad:d6:0f:f3:b2:ea:9b:36:a9:b5:7c:
fc:3c:ca:e5:20:b1:58:99:55:c8:3c:86:fe:dc:06:f3:78:f9:
fd:9d:ca:35:30:50:cc:66:77:e6:9f:4b:1c:b1:d5:90:63:06:
14:15:57:f3:bb:96:52:b4:c2:a5:79:5a:e9:bb:95:b7:ee:d1:
0d:cc:a6:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUUHx5teJaCDHuOiBEngUqrn5FO6MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUEzOUFFOUZDNDE3MjE5RDRBODRENzc1OUY4Mjg2OUY4
NjkwNTIwNDAeFw0yNjA1MTIwNzE5NTBaFw0yNzA1MTEwNzI0NTBaMDMxMTAvBgNV
BAMTKDhEN0JBNTI5RTgyMUQ1MjlFRDIzMDgwMTE0Q0RBMkUzMjVDQjBEQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaBsu5FjmuebGH5w/bAJjIDxc2
OKbTi0ZrfwzpSp3vBx1ExtQjIaIsA5qL2pR1dFEjT4w+x2S49gXVYE8TpA9x3utD
L9V0Z10l5hAQlUbIn5o6QTv8I9rJf5myXAQwCC4UHKCrP1icmEkpnznDRLFctC16
NJtogq9OwurrCGmZwCIlNJJ4tMcYaUYqi1bqdasGPtB63wzR964AvDUeGiYoU5ng
+rIJ5n9RCkLWBQjgF1TIMhVyYL0B0dK5bg9wu1+R2nJvD0ZP32MTODaj1QMy+A0E
H17ZAcN5/lCRmKlN3jd7XpOZ1Z5BIGoi8GkyhXcAWWaEnDAHCP6MMYGscN81AgMB
AAGjggIgMIICHDAdBgNVHQ4EFgQUjXulKegh1SntIwgBFM2i4yXLDcEwHwYDVR0j
BBgwFoAUqjmun8QXIZ1KhNd1n4KGn4aQUgQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NjQ1MzA5OTEyNTQwNzc2My8wL0FBMzlBRTlGQzQxNzIxOUQ0QTg0RDc3NTlGODI4
NjlGODY5MDUyMDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUEzOUFFOUZDNDE3MjE5RDRBODRENzc1OUY4Mjg2OUY4NjkwNTIwNC5jZXIw
gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMTA2NDUzMDk5MTI1NDA3NzYzLzAvMzIzNDMwMzYz
YTM2MzEzMDMwM2EzNDMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDMyMzQz
MTMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB
Af8EEjAQMA4EAgACMAgDBgQkBmEAQDANBgkqhkiG9w0BAQsFAAOCAQEAicDnnolA
Sz/+bxwFMdAaoFBP0iBqOvD8xm7jRnb855Vc7MopyidCpl78sqVS4Skkm5EnjirK
rvA1le8OZjAPWLvmarTWpA17i3VryybCVBMBtUywty2L0fYbcJyAdlPE15QFbUh8
qGPJNf6EatTjbDPONYuNGUz9/83dCuNqZ38fcbKHRk/LhiXJoH2YssFqTroCik4b
6v6pD+K8ZR/aOaQGY1nmE1l6umdBMTb8sJrtwtMsG3yVxIelU63WD/Oy6ps2qbV8
/DzK5SCxWJlVyDyG/twG83j5/Z3KNTBQzGZ35p9LHLHVkGMGFBVX87uWUrTCpXla
6buVt+7RDcymmA==
-----END CERTIFICATE-----
Generated at Wed May 13 17:41:38 2026 by rpki-client