
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a653030303a3a2f33362d3336203d3e203234313339.roa
File: 323430363a363130303a653030303a3a2f33362d3336203d3e203234313339.roa (raw, json)
Hash identifier: YdeoxCMtUMQSHMJliyZeYa6pXWnFk43C0hpRVJSj0uk=
Subject key identifier: 9B:D4:9A:B4:A8:C3:AE:18:7A:E0:59:84:0A:BA:4B:E6:F0:C6:D7:55
Certificate issuer: /CN=AA39AE9FC417219D4A84D7759F82869F86905204
Certificate serial: 4FA8532DB30ADEEFBB14EAFF217DD904E5545CFB
Authority key identifier: AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a653030303a3a2f33362d3336203d3e203234313339.roa
Signing time: Tue 12 May 2026 07:24:50 +0000
ROA not before: Tue 12 May 2026 07:19:50 +0000
ROA not after: Tue 11 May 2027 07:24:50 +0000
asID: 24139
IP address blocks: 2406:6100:e000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl
rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:a8:53:2d:b3:0a:de:ef:bb:14:ea:ff:21:7d:d9:04:e5:54:5c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA39AE9FC417219D4A84D7759F82869F86905204
Validity
Not Before: May 12 07:19:50 2026 GMT
Not After : May 11 07:24:50 2027 GMT
Subject: CN=9BD49AB4A8C3AE187AE059840ABA4BE6F0C6D755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:dc:d4:52:a5:c0:e0:71:0f:09:69:42:73:4b:
a2:7b:b7:e6:14:e8:af:3b:12:17:3f:4b:26:a5:eb:
c6:33:a4:2a:1f:3f:74:cf:b3:85:26:31:a8:7b:4a:
22:46:d4:38:46:cd:0f:58:b8:dc:7c:97:6a:c8:3e:
23:d9:0a:94:44:da:b0:ae:2d:da:ce:c8:8e:81:fd:
f5:5e:2d:7c:2d:79:eb:c5:5b:a2:a8:60:7c:8c:f2:
1e:03:f5:67:cb:3f:c2:e1:72:18:e3:45:9b:86:22:
cf:02:42:2a:2f:5c:1f:16:f4:e7:ab:e8:cb:56:bf:
8c:be:f5:d0:d6:19:0e:df:71:2a:2a:ea:e7:26:45:
e4:c2:3d:68:3c:9d:04:c0:9f:dd:7c:5f:b0:6b:b3:
2c:58:9b:49:a9:40:c4:c1:9b:68:e5:8b:83:a9:b1:
87:60:a4:6e:59:a3:d9:77:61:90:3a:29:53:cb:1b:
46:96:42:9e:04:d4:d2:48:d2:03:a9:2b:7d:f0:11:
12:80:f4:99:97:b9:62:cc:cd:7f:58:f5:8a:59:01:
d9:8b:69:b3:b1:58:ca:71:6d:f2:22:61:ee:b0:f4:
e0:1e:e3:00:58:0e:c9:ad:ad:48:07:fc:1f:c8:1b:
ef:30:76:88:5a:e5:c2:ab:c1:b2:35:c3:71:b0:5f:
7f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D4:9A:B4:A8:C3:AE:18:7A:E0:59:84:0A:BA:4B:E6:F0:C6:D7:55
X509v3 Authority Key Identifier:
keyid:AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a653030303a3a2f33362d3336203d3e203234313339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:6100:e000::/36
Signature Algorithm: sha256WithRSAEncryption
30:e4:34:24:ce:a9:d8:fc:61:d3:a2:61:d2:3d:d5:8b:91:90:
68:f6:79:30:e2:d7:a4:41:bc:e8:26:80:04:47:28:7c:61:1f:
75:01:d6:fd:85:70:a7:74:0e:09:88:bb:6e:d9:c5:c7:01:3f:
e8:20:2e:21:da:82:b6:f5:64:a4:e8:c9:57:f6:22:8d:b8:f3:
fa:e6:99:c3:5e:a4:28:b0:36:b3:34:3c:4e:89:de:68:94:67:
5c:7f:f8:b7:55:55:79:38:51:f8:ca:0d:94:45:d9:cb:de:17:
29:4a:38:68:1a:98:ed:13:66:ce:79:f2:02:c6:51:f9:a9:6e:
f7:a6:46:82:18:2a:8b:8f:ba:5b:bf:cd:af:c8:cd:ab:f3:c7:
65:47:3e:40:5a:a3:05:f2:0f:04:f2:c6:4f:cb:9a:cc:87:c5:
45:1b:f8:10:94:38:3e:86:98:e8:22:22:99:0e:12:ae:f7:7e:
64:80:5e:2a:be:bc:4d:79:88:72:26:61:dc:f0:e4:d5:a0:a1:
c9:04:35:4a:9e:13:40:16:5e:2c:c4:df:77:17:ac:bc:49:db:
90:d7:7a:8d:4c:c7:40:c0:27:2e:2c:aa:7c:19:c6:1b:ee:b0:
36:1a:3b:80:bf:a5:76:07:c4:b9:2f:fc:0f:cc:5f:70:ce:bb:
df:1e:91:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:41:23 2026 by rpki-client