
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a623030303a3a2f33362d3336203d3e203234313339.roa
File: 323430363a363130303a623030303a3a2f33362d3336203d3e203234313339.roa (raw, json)
Hash identifier: f5fHl8wuWkXU6z2K2DrpawCQDN9O6wL8Ty6pgADDBdA=
Subject key identifier: 14:CE:A0:AF:F2:D9:F4:99:D8:38:FC:75:C7:EF:A2:CD:D2:F1:14:5E
Certificate issuer: /CN=AA39AE9FC417219D4A84D7759F82869F86905204
Certificate serial: 71C1FA79AD1F3477B793BB0D0056C17DAA6F08C6
Authority key identifier: AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a623030303a3a2f33362d3336203d3e203234313339.roa
Signing time: Tue 12 May 2026 07:24:50 +0000
ROA not before: Tue 12 May 2026 07:19:50 +0000
ROA not after: Tue 11 May 2027 07:24:50 +0000
asID: 24139
IP address blocks: 2406:6100:b000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl
rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:c1:fa:79:ad:1f:34:77:b7:93:bb:0d:00:56:c1:7d:aa:6f:08:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA39AE9FC417219D4A84D7759F82869F86905204
Validity
Not Before: May 12 07:19:50 2026 GMT
Not After : May 11 07:24:50 2027 GMT
Subject: CN=14CEA0AFF2D9F499D838FC75C7EFA2CDD2F1145E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:48:d6:82:d4:bc:0e:e9:26:6a:d6:71:00:fe:
dd:fe:04:49:9f:a8:1a:89:8c:fa:23:8b:d9:6a:75:
15:55:72:02:5f:2c:b5:46:7e:1c:45:39:b0:fe:aa:
40:40:fb:4d:24:39:5b:cc:d5:f2:5e:81:4f:8c:07:
83:a2:2a:a2:fe:99:ad:d3:68:7f:b7:34:85:cc:b4:
bd:4c:71:fc:87:30:da:95:d3:ec:52:f9:0f:e8:d2:
c8:ba:30:cd:01:53:ec:06:ca:c3:7d:45:b5:eb:23:
31:aa:64:9c:9e:bb:01:33:5e:ad:6a:e7:5f:8b:1f:
16:4b:0a:4c:b6:03:c4:21:55:f6:f8:01:c3:a6:18:
1b:fd:af:90:ba:36:23:fc:d3:1c:2f:1e:5e:72:c8:
f5:75:6e:81:16:c2:5c:65:11:54:e6:26:f1:ed:19:
2a:9a:27:ff:e3:1a:1e:4d:35:00:0b:47:17:a9:77:
f2:4f:4a:36:a0:bd:d4:a6:cd:e2:ea:c4:84:b1:ad:
6e:6a:0e:5d:42:43:76:ef:6d:3b:d6:f0:7a:57:18:
e1:fb:cd:5f:fd:eb:c2:ac:14:0c:f7:40:24:a5:c8:
71:a8:24:a2:5e:19:37:e6:64:e8:2d:96:55:e6:50:
88:40:a0:4f:22:86:4d:b1:36:39:4c:ff:23:e3:b6:
89:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CE:A0:AF:F2:D9:F4:99:D8:38:FC:75:C7:EF:A2:CD:D2:F1:14:5E
X509v3 Authority Key Identifier:
keyid:AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a623030303a3a2f33362d3336203d3e203234313339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:6100:b000::/36
Signature Algorithm: sha256WithRSAEncryption
6c:55:f6:88:e0:ee:f2:d6:29:3a:28:4e:14:62:17:44:e3:1a:
b0:b0:8c:83:06:ed:c0:67:79:a0:ea:d2:4b:51:44:21:13:8c:
a1:ec:a8:08:6f:d1:bf:9d:24:b8:b6:89:de:4f:fe:13:f3:c3:
4e:5b:33:a0:22:02:48:53:40:af:0f:bf:7a:3d:2c:2a:31:05:
ff:6d:b2:18:22:5f:84:36:fc:d8:11:3f:88:42:30:bc:79:2f:
f4:16:18:a7:a9:27:bd:9f:9c:9a:56:04:6c:76:c0:d4:d5:47:
a9:e8:f6:23:dd:ff:1d:0e:f2:1e:6c:af:2d:fb:fd:b9:a9:0d:
25:79:af:79:ca:f2:f4:5d:99:b1:19:e6:ee:ed:a9:e7:4f:31:
80:9c:2b:60:3e:ca:a6:24:68:a6:c6:ca:b4:09:f8:bb:1f:c7:
2a:84:22:7f:69:a4:46:28:6d:8f:48:ca:55:3c:7f:19:99:3a:
d7:e0:be:21:fb:fa:31:89:fa:1a:f5:55:62:e1:c1:ec:21:42:
a1:f3:0b:44:71:7c:13:07:33:a1:04:f6:bd:d6:28:f9:3c:f3:
7b:84:ff:75:72:c8:d2:61:40:69:4c:0c:6a:28:29:d4:ba:a9:
cf:09:25:ea:2e:b7:4f:41:c3:b3:61:5b:7f:c8:86:44:55:00:
25:15:03:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:42:03 2026 by rpki-client