
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106871076220043283/0/323430303a616530303a313938313a3a2f34382d3438203d3e203338333637.roa
File: 323430303a616530303a313938313a3a2f34382d3438203d3e203338333637.roa (raw, json)
Hash identifier: QKXGlT0gawntujhSrweVLVCzEtXKFPE949OqugYMNTI=
Subject key identifier: C0:53:95:A8:28:49:46:5A:EC:BF:95:90:64:B0:96:29:87:81:DB:40
Certificate issuer: /CN=644F9AE827627B0357D7972FE08D569A0CB97C31
Certificate serial: 0A91698B065D14A0D3E42F43C4E555F35A325CC3
Authority key identifier: 64:4F:9A:E8:27:62:7B:03:57:D7:97:2F:E0:8D:56:9A:0C:B9:7C:31
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/323430303a616530303a313938313a3a2f34382d3438203d3e203338333637.roa
Signing time: Wed 13 May 2026 09:14:26 +0000
ROA not before: Wed 13 May 2026 09:09:26 +0000
ROA not after: Wed 12 May 2027 09:14:26 +0000
asID: 38367
IP address blocks: 2400:ae00:1981::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.crl
rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:91:69:8b:06:5d:14:a0:d3:e4:2f:43:c4:e5:55:f3:5a:32:5c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644F9AE827627B0357D7972FE08D569A0CB97C31
Validity
Not Before: May 13 09:09:26 2026 GMT
Not After : May 12 09:14:26 2027 GMT
Subject: CN=C05395A82849465AECBF959064B096298781DB40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:57:58:af:a5:a4:4c:6c:d1:5e:ee:00:9f:62:
e5:62:96:06:ef:5e:b5:4a:8a:d9:9e:fa:38:2c:e7:
e3:ad:3d:1e:09:a2:e5:d2:96:a6:ce:f6:09:83:02:
58:a8:ae:d4:a2:37:5e:f4:6b:95:d9:82:f6:19:d0:
f0:3c:aa:15:ed:f0:8a:d7:69:cb:d0:a2:ca:00:6b:
17:a8:74:97:10:77:59:08:3f:f4:c3:a0:9e:23:64:
72:f2:6d:cd:f2:36:bc:7f:cf:66:db:e6:2a:77:c4:
07:b9:15:87:45:19:20:30:18:ad:a1:cd:13:0c:c7:
82:16:3b:40:1c:15:7f:5c:93:8d:dc:1d:c1:05:fd:
5f:10:77:a9:f1:f4:c0:2c:62:26:86:dc:b0:63:24:
dc:ef:ae:d7:4f:d3:ef:23:4b:dd:c2:53:82:41:6f:
3f:ed:7f:79:ce:be:45:9a:c0:c0:4e:7e:b9:5e:db:
fc:10:25:b8:ab:1a:84:4e:ba:4f:1e:b9:1d:26:03:
cd:12:3c:ef:91:b7:03:04:4c:8f:92:2a:d8:64:0f:
63:91:a7:b4:a2:94:cb:db:18:6a:3c:b5:46:88:73:
f2:f4:fc:d4:84:52:ea:8c:a2:d5:f9:b0:7f:ad:ed:
cd:e7:6c:82:6d:43:a1:c4:92:ee:3f:53:e8:88:a8:
ca:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:53:95:A8:28:49:46:5A:EC:BF:95:90:64:B0:96:29:87:81:DB:40
X509v3 Authority Key Identifier:
keyid:64:4F:9A:E8:27:62:7B:03:57:D7:97:2F:E0:8D:56:9A:0C:B9:7C:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/323430303a616530303a313938313a3a2f34382d3438203d3e203338333637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:ae00:1981::/48
Signature Algorithm: sha256WithRSAEncryption
a9:68:aa:10:aa:7e:42:96:9f:f4:db:50:1e:89:c2:cf:95:86:
5d:b6:85:15:40:54:53:a5:e3:70:32:e8:03:52:93:da:7f:1b:
cd:61:37:4e:db:0e:f3:26:22:7d:d8:aa:8c:c7:61:71:b8:a8:
66:ea:c9:80:b3:36:46:54:7a:b6:9d:ce:33:3a:35:74:52:e0:
7e:2e:eb:56:c9:ac:f5:20:32:ec:5e:aa:f4:84:c7:2e:6b:06:
23:73:f2:c8:b0:b1:d9:08:51:12:0c:93:7d:f7:33:c9:9b:37:
57:0b:2e:3c:84:2c:98:fb:84:99:a5:4f:60:1d:06:02:11:c7:
1f:08:c8:e3:49:e6:fa:0d:d5:20:76:70:71:2a:fd:e0:29:0d:
31:c8:eb:63:46:ca:51:d1:e5:53:31:0a:84:c0:92:fa:1e:b1:
bf:a4:79:6d:da:28:bf:76:fa:69:fd:52:7d:d8:b3:c7:26:b9:
23:87:5c:ef:e2:92:f1:cf:e5:5f:0b:04:aa:ec:f5:bc:76:1d:
62:21:c8:33:47:10:5f:95:ba:16:5d:58:e3:a7:c6:b5:b7:bd:
c6:8d:f1:cb:3e:7c:2f:69:32:16:62:a1:77:67:46:41:e6:4f:
e6:f8:aa:cc:ea:27:47:86:02:b2:8d:b7:56:3b:5f:d1:d2:c0:
af:cc:32:23
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUCpFpiwZdFKDT5C9DxOVV81oyXMMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ0RjlBRTgyNzYyN0IwMzU3RDc5NzJGRTA4RDU2OUEw
Q0I5N0MzMTAeFw0yNjA1MTMwOTA5MjZaFw0yNzA1MTIwOTE0MjZaMDMxMTAvBgNV
BAMTKEMwNTM5NUE4Mjg0OTQ2NUFFQ0JGOTU5MDY0QjA5NjI5ODc4MURCNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCV1ivpaRMbNFe7gCfYuVilgbv
XrVKitme+jgs5+OtPR4JouXSlqbO9gmDAliortSiN170a5XZgvYZ0PA8qhXt8IrX
acvQosoAaxeodJcQd1kIP/TDoJ4jZHLybc3yNrx/z2bb5ip3xAe5FYdFGSAwGK2h
zRMMx4IWO0AcFX9ck43cHcEF/V8Qd6nx9MAsYiaG3LBjJNzvrtdP0+8jS93CU4JB
bz/tf3nOvkWawMBOfrle2/wQJbirGoROuk8euR0mA80SPO+RtwMETI+SKthkD2OR
p7SilMvbGGo8tUaIc/L0/NSEUuqMotX5sH+t7c3nbIJtQ6HEku4/U+iIqMoXAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQUwFOVqChJRlrsv5WQZLCWKYeB20AwHwYDVR0j
BBgwFoAUZE+a6CdiewNX15cv4I1Wmgy5fDEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
Njg3MTA3NjIyMDA0MzI4My8wLzY0NEY5QUU4Mjc2MjdCMDM1N0Q3OTcyRkUwOEQ1
NjlBMENCOTdDMzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNjQ0RjlBRTgyNzYyN0IwMzU3RDc5NzJGRTA4RDU2OUEwQ0I5N0MzMS5jZXIw
gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMTA2ODcxMDc2MjIwMDQzMjgzLzAvMzIzNDMwMzAz
YTYxNjUzMDMwM2EzMTM5MzgzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMzMzgz
MzM2Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB
Af8EEzARMA8EAgACMAkDBwAkAK4AGYEwDQYJKoZIhvcNAQELBQADggEBAKloqhCq
fkKWn/TbUB6Jws+Vhl22hRVAVFOl43Ay6ANSk9p/G81hN07bDvMmIn3YqozHYXG4
qGbqyYCzNkZUeradzjM6NXRS4H4u61bJrPUgMuxeqvSExy5rBiNz8siwsdkIURIM
k333M8mbN1cLLjyELJj7hJmlT2AdBgIRxx8IyONJ5voN1SB2cHEq/eApDTHI62NG
ylHR5VMxCoTAkvoesb+keW3aKL92+mn9Un3Ys8cmuSOHXO/ikvHP5V8LBKrs9bx2
HWIhyDNHEF+VuhZdWOOnxrW3vcaN8cs+fC9pMhZioXdnRkHmT+b4qszqJ0eGArKN
t1Y7X9HSwK/MMiM=
-----END CERTIFICATE-----
Generated at Wed May 13 21:32:19 2026 by rpki-client