
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114728285448699927/0/323430303a353630303a3a2f33322d3332203d3e2030.roa
File: 323430303a353630303a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier: zGb7Zsse87+3NFzLKF7yLfU1v86czgJhpYgEwog+lFc=
Subject key identifier: EE:4D:90:3F:2A:2C:75:DE:71:3A:04:12:78:BD:20:72:67:28:8F:3E
Certificate issuer: /CN=7168563389D6040E01C75892D6228B15ABD8EFB5
Certificate serial: 696C5E4AF764B7F61190E1F4F951EC257283F907
Authority key identifier: 71:68:56:33:89:D6:04:0E:01:C7:58:92:D6:22:8B:15:AB:D8:EF:B5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7168563389D6040E01C75892D6228B15ABD8EFB5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/323430303a353630303a3a2f33322d3332203d3e2030.roa
Signing time: Fri 10 Jul 2026 01:30:34 +0000
ROA not before: Fri 10 Jul 2026 01:25:34 +0000
ROA not after: Fri 09 Jul 2027 01:30:34 +0000
asID: 0
IP address blocks: 2400:5600::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.crl
rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7168563389D6040E01C75892D6228B15ABD8EFB5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:6c:5e:4a:f7:64:b7:f6:11:90:e1:f4:f9:51:ec:25:72:83:f9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7168563389D6040E01C75892D6228B15ABD8EFB5
Validity
Not Before: Jul 10 01:25:34 2026 GMT
Not After : Jul 9 01:30:34 2027 GMT
Subject: CN=EE4D903F2A2C75DE713A041278BD207267288F3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:de:b6:30:14:c2:ee:26:ec:0d:76:ea:b5:6f:
b1:f9:84:ea:86:71:5b:7a:8e:b1:04:49:ba:cc:c9:
f5:43:4a:0a:ce:42:12:c9:e2:f8:a6:51:e7:f0:e5:
87:3d:71:13:63:fb:e9:8a:be:67:c4:c0:aa:a2:47:
18:ff:9e:40:7d:17:a3:93:ff:3c:05:35:9e:b0:5a:
98:c9:96:43:af:55:0c:ee:14:c8:af:22:54:9f:2e:
06:47:da:21:88:ad:39:b6:4b:05:38:a2:03:5a:87:
3f:4b:33:2c:46:dd:cb:ea:e0:a2:d8:50:8b:69:f1:
ec:8e:1e:35:a0:dc:3b:6c:4f:a0:1a:73:8d:3e:5b:
77:e5:35:c9:b8:b8:72:78:55:b6:28:c7:af:cf:60:
b8:d2:0e:1d:97:fd:20:6c:10:a0:6d:21:eb:81:c7:
36:6d:fe:e9:61:85:c7:85:24:f7:50:89:93:26:e5:
37:6d:28:fb:e6:9f:ff:c8:20:97:18:d0:35:3c:a7:
5d:b9:02:c7:12:5b:75:1a:7a:e6:15:08:cf:23:0e:
12:38:03:a1:98:07:6d:31:a4:46:ab:6c:78:a4:54:
c6:9c:d4:b2:62:ff:cb:b5:db:70:12:ee:9b:3b:a2:
f6:30:c3:91:4a:71:73:46:72:ea:87:d2:a7:8e:dc:
3f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4D:90:3F:2A:2C:75:DE:71:3A:04:12:78:BD:20:72:67:28:8F:3E
X509v3 Authority Key Identifier:
keyid:71:68:56:33:89:D6:04:0E:01:C7:58:92:D6:22:8B:15:AB:D8:EF:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7168563389D6040E01C75892D6228B15ABD8EFB5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/323430303a353630303a3a2f33322d3332203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:5600::/32
Signature Algorithm: sha256WithRSAEncryption
70:60:81:83:d1:ba:9a:3e:84:8f:9b:a0:35:a4:03:76:ff:d0:
46:44:70:4b:6f:e2:ed:9e:ff:03:e2:21:6f:6f:22:16:3e:0a:
6b:7d:f4:3f:ca:8e:5c:91:8b:47:ec:d4:a9:43:72:bf:a7:9e:
cd:df:9e:ff:27:6d:96:96:4f:4a:e8:40:4b:34:22:8b:71:18:
8b:82:42:7c:fc:e7:f2:55:49:9e:80:62:48:3d:88:55:34:97:
fd:4b:da:bd:2e:f9:bf:1a:54:25:26:17:8a:16:9b:23:52:53:
1f:41:ef:66:6a:1d:57:12:9e:81:88:cd:8a:88:4a:1d:09:f0:
f3:6e:6f:7f:da:9e:72:8f:3c:7c:fc:00:a7:39:a2:28:8a:c3:
99:56:2d:25:0e:c5:49:56:a5:e5:11:16:80:2e:63:d3:6a:41:
f2:c1:ea:92:6a:a1:75:58:2c:4e:cc:92:f9:88:ef:d2:14:a4:
ae:d6:dc:35:d1:22:a4:f7:e7:c0:3a:24:ff:8c:5d:6b:aa:7d:
32:d5:b8:0f:54:3b:ae:64:b5:66:f6:39:d6:ad:a4:d7:d6:3a:
b7:00:67:ce:2d:ef:f1:b2:dd:29:22:ad:9e:7d:30:16:13:24:
a1:20:85:24:ab:8b:ad:4f:a0:57:8e:f0:86:69:fe:30:f7:49:
cd:4f:55:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:49:41 2026 by rpki-client