
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a3a2f33362d3336203d3e203234313339.roa
File: 323430363a363130303a3a2f33362d3336203d3e203234313339.roa (raw, json)
Hash identifier: KS372/eSv2i+u4bHIZxCPYLZ9s7d9YBvzuhY+9gcHh4=
Subject key identifier: C3:70:F0:8D:48:DE:A4:0D:03:24:77:C6:6C:C5:77:DF:24:FF:02:87
Certificate issuer: /CN=AA39AE9FC417219D4A84D7759F82869F86905204
Certificate serial: 6DE78B72E0572F5DA654B39882E4C00B6E35B575
Authority key identifier: AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a3a2f33362d3336203d3e203234313339.roa
Signing time: Tue 12 May 2026 07:24:50 +0000
ROA not before: Tue 12 May 2026 07:19:50 +0000
ROA not after: Tue 11 May 2027 07:24:50 +0000
asID: 24139
IP address blocks: 2406:6100::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl
rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:e7:8b:72:e0:57:2f:5d:a6:54:b3:98:82:e4:c0:0b:6e:35:b5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA39AE9FC417219D4A84D7759F82869F86905204
Validity
Not Before: May 12 07:19:50 2026 GMT
Not After : May 11 07:24:50 2027 GMT
Subject: CN=C370F08D48DEA40D032477C66CC577DF24FF0287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e3:e0:b3:16:60:87:6a:58:ce:d3:5e:f4:01:
6c:ac:49:68:5b:94:45:74:21:8a:d2:7b:72:d8:8b:
ed:3c:0e:3f:ed:55:f0:e4:34:6e:c3:58:69:bf:6d:
c8:3d:71:b8:aa:aa:76:8b:cf:bb:b8:64:20:09:1f:
cd:91:89:60:63:c9:59:6c:8a:b4:ac:85:bc:10:ec:
72:a6:17:c8:5f:a4:40:91:87:3d:8f:cf:86:b1:7e:
bc:6f:7b:42:36:23:0a:f5:9f:49:5a:61:24:4f:4e:
cb:89:a7:99:be:90:1c:76:9a:8e:e8:40:cf:6d:a0:
2a:1f:9c:fd:17:84:fd:7b:26:c0:ce:6f:f1:79:97:
5d:61:02:8d:67:b1:7e:38:ba:38:dc:85:8a:77:b1:
b5:ba:d4:8d:3d:e7:de:0a:4a:80:ac:1c:07:f9:96:
ec:86:61:b1:a8:8f:68:d8:84:6e:e6:a9:e1:b5:e1:
d4:91:45:82:e5:1c:89:72:cf:07:f5:bd:07:80:5b:
57:52:10:6a:9c:f1:7b:f0:69:ac:c1:81:9e:b7:d9:
2b:64:91:9a:90:34:53:8b:b5:26:f7:09:13:b7:04:
46:cb:03:ca:50:3a:41:b7:95:b9:55:3a:8b:42:cb:
17:8d:9f:66:32:21:f8:1b:8a:35:91:fc:c2:6c:56:
47:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:70:F0:8D:48:DE:A4:0D:03:24:77:C6:6C:C5:77:DF:24:FF:02:87
X509v3 Authority Key Identifier:
keyid:AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a3a2f33362d3336203d3e203234313339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:6100::/36
Signature Algorithm: sha256WithRSAEncryption
74:6b:f7:b2:0c:97:9b:35:f1:8b:b9:04:11:14:b3:f3:36:9a:
fa:66:b5:46:f3:e8:4d:49:ad:40:e3:d9:ef:25:96:5e:2a:d1:
67:f3:d1:74:5a:bd:b9:04:2b:c6:f1:c0:b6:ad:b1:fd:3e:93:
24:b2:98:75:b1:32:e9:e4:de:ce:16:92:8a:68:14:08:e6:8f:
27:ab:f2:4f:a7:99:c4:90:2c:7a:00:9a:db:74:f3:1c:c2:05:
23:e8:7e:96:df:77:b3:28:8e:d7:63:35:83:ad:4d:0d:cf:79:
b9:30:b1:44:f9:9b:ed:ad:3f:b8:2b:10:2e:44:c3:30:88:d0:
f3:ab:1d:80:4e:9b:d5:a2:e3:fb:44:8d:0a:01:2d:c5:91:49:
bd:3f:40:d5:ba:99:17:5a:51:7b:30:71:82:ae:ce:bf:ae:61:
ab:42:81:19:54:c5:73:b3:ad:44:1c:e7:e4:fd:e0:f5:6b:5b:
94:65:e6:1c:de:8c:84:18:d8:fc:c8:f1:21:5e:ab:be:dd:38:
61:e2:0e:7b:06:b2:4a:03:0c:60:8b:c1:71:ac:32:22:e9:f4:
15:49:e1:21:09:fa:3e:00:8d:b6:ea:d4:06:4c:5d:fe:b3:8c:
9c:d5:5d:28:5c:0b:49:d8:5a:46:93:84:98:69:0a:2d:07:80:
9d:8a:ac:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:14:41 2026 by rpki-client