
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a383030303a3a2f33362d3336203d3e203234313339.roa
File: 323430363a363130303a383030303a3a2f33362d3336203d3e203234313339.roa (raw, json)
Hash identifier: HQHQ7zcb2DUJkBE2yCKj5cQdoRT7QjDD4vyaoEjiVz0=
Subject key identifier: 05:B0:08:04:5C:B4:D0:79:89:74:59:8F:5D:66:DE:58:58:80:37:8C
Certificate issuer: /CN=AA39AE9FC417219D4A84D7759F82869F86905204
Certificate serial: 2764D24C69F3F9B2927A4F1977EADCE5D17AF2E6
Authority key identifier: AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a383030303a3a2f33362d3336203d3e203234313339.roa
Signing time: Tue 12 May 2026 07:24:50 +0000
ROA not before: Tue 12 May 2026 07:19:50 +0000
ROA not after: Tue 11 May 2027 07:24:50 +0000
asID: 24139
IP address blocks: 2406:6100:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl
rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:64:d2:4c:69:f3:f9:b2:92:7a:4f:19:77:ea:dc:e5:d1:7a:f2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA39AE9FC417219D4A84D7759F82869F86905204
Validity
Not Before: May 12 07:19:50 2026 GMT
Not After : May 11 07:24:50 2027 GMT
Subject: CN=05B008045CB4D0798974598F5D66DE585880378C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:c6:87:2c:dd:a5:f7:c5:d7:4f:05:5b:1e:
49:1a:ef:5a:a5:dd:5f:d3:a6:93:61:71:57:04:2f:
a4:85:da:19:75:99:c7:07:50:a0:75:38:90:ed:1a:
f2:42:b8:bb:05:89:92:89:6c:90:6e:75:8c:11:20:
4b:bd:bf:ad:ac:77:41:54:54:88:3c:e3:ae:2a:49:
c2:bc:64:2e:b6:a6:6b:6f:4e:d4:17:7a:59:92:d2:
d5:35:3a:60:f7:ac:a8:ef:7e:62:19:7d:22:04:6b:
a2:fd:a1:fe:a8:4a:8d:ce:7a:3b:61:8e:20:21:2a:
d8:61:b9:54:ed:7b:de:53:a3:5d:1b:f5:ee:83:f3:
bc:e1:5b:6e:af:6d:ec:7f:e0:c8:6a:8c:48:ed:97:
c4:4a:03:11:64:8d:d7:e8:42:e0:7d:71:5b:ae:1c:
5d:ef:f4:3c:7c:eb:8e:c7:ae:44:22:8a:8b:45:9e:
3c:15:d4:af:8c:16:fa:c8:ef:42:52:5c:ad:c8:25:
9d:67:79:ee:78:5d:c1:69:7f:42:1e:d2:06:57:cc:
13:2d:9c:58:f8:c5:c9:d8:cf:c0:a2:8b:8c:b2:7d:
e1:46:09:34:63:41:e8:07:f0:be:19:02:bd:36:e7:
04:1c:96:12:25:01:ce:f8:a4:87:cc:63:68:af:64:
a3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B0:08:04:5C:B4:D0:79:89:74:59:8F:5D:66:DE:58:58:80:37:8C
X509v3 Authority Key Identifier:
keyid:AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a383030303a3a2f33362d3336203d3e203234313339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:6100:8000::/36
Signature Algorithm: sha256WithRSAEncryption
59:72:a3:f3:4e:a9:75:e7:4f:5b:d1:5a:04:6b:93:e8:0c:4f:
91:b1:61:18:40:1f:42:d4:e1:06:92:b4:1b:dc:b8:98:38:08:
25:0c:e6:2c:5a:9b:e4:fa:a9:ef:bf:2d:0b:7e:b4:72:5f:9e:
b5:d3:0a:9e:b1:be:12:a9:1e:a6:4c:8b:a2:a5:56:34:ac:29:
f2:a5:61:32:35:dd:9a:a3:9a:8a:c5:fa:a3:fa:87:83:83:97:
6d:ac:30:19:f1:2d:4d:ec:73:83:bf:ec:db:e1:83:f5:96:f8:
ad:44:39:a1:a8:0f:ee:23:ab:29:4d:1f:6b:9d:1f:8c:1c:d8:
e7:0a:5f:8d:a7:cf:51:1c:12:c0:ff:65:7b:d2:8c:c2:e7:00:
9c:40:a3:b4:5a:a2:af:05:29:0a:13:7c:3c:74:f6:e0:25:27:
35:26:a4:6f:76:dd:58:b0:98:6e:24:a8:38:de:3a:ae:1d:66:
b6:5c:8f:ac:7f:e0:8a:a9:ab:93:90:1b:85:14:51:c6:2f:e4:
10:77:d8:66:cf:ba:60:fa:35:28:e0:7b:dd:4f:16:b4:9a:01:
42:75:4d:c1:b9:05:11:d7:30:72:c7:5f:65:02:54:4f:3d:ac:
9a:23:c0:0b:2f:32:72:a8:20:06:16:1e:98:e1:6a:73:c4:e5:
f2:da:4e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:42:03 2026 by rpki-client