
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a633030303a3a2f33362d3336203d3e203234313339.roa
File: 323430363a363130303a633030303a3a2f33362d3336203d3e203234313339.roa (raw, json)
Hash identifier: 5YdWn8WKBXq+DUYe3bznIwJ3ken9gwKvoEURrJwBcl4=
Subject key identifier: 10:BC:B9:2C:49:CF:12:C7:3F:A7:5C:27:B5:9B:59:87:94:D1:CC:0A
Certificate issuer: /CN=AA39AE9FC417219D4A84D7759F82869F86905204
Certificate serial: 54D889272E4934E2A6E6FB8366728BA10B336E8E
Authority key identifier: AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a633030303a3a2f33362d3336203d3e203234313339.roa
Signing time: Tue 12 May 2026 07:24:50 +0000
ROA not before: Tue 12 May 2026 07:19:50 +0000
ROA not after: Tue 11 May 2027 07:24:50 +0000
asID: 24139
IP address blocks: 2406:6100:c000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl
rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:d8:89:27:2e:49:34:e2:a6:e6:fb:83:66:72:8b:a1:0b:33:6e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA39AE9FC417219D4A84D7759F82869F86905204
Validity
Not Before: May 12 07:19:50 2026 GMT
Not After : May 11 07:24:50 2027 GMT
Subject: CN=10BCB92C49CF12C73FA75C27B59B598794D1CC0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:51:61:bd:fe:94:f0:6d:5b:45:97:e7:72:36:
c6:22:5b:f7:2e:72:a9:4e:a5:e3:f1:aa:b8:c7:24:
ba:51:10:31:b7:f9:85:0e:c3:4e:78:f5:23:bf:95:
d3:c4:67:01:41:94:61:98:7d:41:c1:8e:70:53:95:
4a:6a:e9:0a:16:2c:a1:0f:de:15:73:a3:63:ef:6f:
c6:da:05:c0:65:70:da:88:ae:66:48:5e:3b:77:10:
f7:9a:3c:16:15:80:c5:5f:7b:83:e4:45:e9:68:e5:
42:45:68:e5:fc:18:f6:c5:6a:b5:6b:ab:9d:8b:d6:
3b:4e:49:26:8f:b5:71:ae:28:d5:bf:91:70:38:64:
93:19:ce:11:47:4a:35:c4:95:3b:e3:7f:4e:26:17:
62:a2:37:4b:52:49:c4:86:a7:1e:c5:20:d7:39:96:
bb:84:2d:2c:67:dc:b9:82:a4:03:c2:59:db:4c:2a:
d4:1a:55:52:8e:60:79:66:90:df:a1:14:7e:12:88:
3b:c0:92:3c:5b:b0:eb:62:10:eb:bd:47:af:92:e9:
66:15:f4:7d:a4:a5:9c:7c:72:41:3e:6a:7a:95:70:
ed:81:e8:cf:8a:6c:0c:fd:9f:b8:3e:a8:71:a6:d7:
76:50:2c:2c:e1:ad:34:86:1a:8d:94:79:db:30:5d:
32:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BC:B9:2C:49:CF:12:C7:3F:A7:5C:27:B5:9B:59:87:94:D1:CC:0A
X509v3 Authority Key Identifier:
keyid:AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a633030303a3a2f33362d3336203d3e203234313339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:6100:c000::/36
Signature Algorithm: sha256WithRSAEncryption
06:5a:d8:70:76:ab:9e:17:bd:e5:a1:44:82:a8:f8:22:37:0c:
6d:aa:9f:19:42:f5:86:f3:74:94:ee:be:09:1c:a6:5d:58:57:
73:64:f7:57:c5:7e:08:a1:98:33:23:7b:66:51:6a:18:5e:a9:
f2:4c:16:53:c7:b0:78:b6:a8:e2:23:f6:b8:ae:70:f3:4c:f6:
94:86:25:49:20:cc:fb:57:26:d2:f3:92:72:f8:0e:21:2e:7a:
7a:06:92:78:1d:05:f7:fc:0c:89:85:c0:5b:a7:b9:1c:08:44:
17:0c:34:72:55:2e:d8:db:41:3b:3e:90:0b:f5:f1:18:cf:f7:
54:2f:e3:b3:6a:75:4b:9e:39:64:97:19:93:0f:bc:06:1f:78:
db:f6:93:ba:bc:62:c0:a0:f2:17:20:54:98:3d:4d:c3:fc:8f:
c8:72:67:60:af:c4:61:64:9d:04:90:74:cf:66:35:52:53:c9:
fe:c7:bf:87:95:18:b5:3d:e6:36:ef:71:20:35:f0:4f:ce:ab:
12:5d:93:7c:e6:08:88:63:a4:56:6a:cd:5c:dc:cf:44:40:ea:
64:21:6b:ca:ae:78:ab:9f:fa:e3:18:c9:06:6b:41:39:78:e2:
7b:d8:fc:83:86:38:12:e6:38:aa:59:6b:85:be:db:07:a7:97:
66:ea:bc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:41:45 2026 by rpki-client