
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1135050512157114409/0/323430373a396263303a3a2f33322d3332203d3e203539303734.roa
File: 323430373a396263303a3a2f33322d3332203d3e203539303734.roa (raw, json)
Hash identifier: 0pw/Avjlv0JZ+GRAb03h4Z1CFfbUDynRCBE0Zi80CPE=
Subject key identifier: 2D:9B:D8:6B:C1:F2:FD:F9:6F:E0:1D:41:67:AF:49:75:3A:DC:62:67
Certificate issuer: /CN=185BC8F795FC60E163D641A01BAA510BF953C375
Certificate serial: 1270510AA4074BF6A2CBC04D84E49AC16F2594DF
Authority key identifier: 18:5B:C8:F7:95:FC:60:E1:63:D6:41:A0:1B:AA:51:0B:F9:53:C3:75
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/185BC8F795FC60E163D641A01BAA510BF953C375.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1135050512157114409/0/323430373a396263303a3a2f33322d3332203d3e203539303734.roa
Signing time: Tue 08 Sep 2026 04:05:24 +0000
ROA not before: Tue 08 Sep 2026 04:00:24 +0000
ROA not after: Tue 07 Sep 2027 04:05:24 +0000
asID: 59074
IP address blocks: 2407:9bc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1135050512157114409/0/185BC8F795FC60E163D641A01BAA510BF953C375.crl
rsync://rpki-rps.cnnic.cn/repo/A1135050512157114409/0/185BC8F795FC60E163D641A01BAA510BF953C375.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/185BC8F795FC60E163D641A01BAA510BF953C375.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 13:20:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:70:51:0a:a4:07:4b:f6:a2:cb:c0:4d:84:e4:9a:c1:6f:25:94:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185BC8F795FC60E163D641A01BAA510BF953C375
Validity
Not Before: Sep 8 04:00:24 2026 GMT
Not After : Sep 7 04:05:24 2027 GMT
Subject: CN=2D9BD86BC1F2FDF96FE01D4167AF49753ADC6267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:00:41:72:c9:c6:b9:39:1c:68:1d:5d:ab:e2:
15:0e:7d:7c:4b:86:7e:41:56:62:a4:e7:81:f7:1a:
53:c4:4c:3e:78:51:e7:45:0d:fc:cc:0f:3b:d5:59:
bf:d4:6d:c3:fd:1d:3d:8b:ab:a3:a4:6a:8a:7c:32:
8c:f5:0d:60:8d:34:0c:8a:aa:45:20:da:a6:3e:6f:
11:12:01:dd:b5:c8:f0:0f:ba:7a:69:c7:0b:95:2e:
b5:db:0a:4f:5d:84:c7:3c:ea:60:02:bc:63:0a:71:
df:c5:68:b8:ec:a1:aa:f4:12:6d:ec:9e:24:7e:19:
11:23:ed:bf:d6:08:eb:94:0b:0c:7c:28:21:93:16:
e7:c2:56:a4:11:d9:74:59:4a:56:c9:35:0f:c0:5f:
fe:10:0b:eb:a3:8a:8f:87:43:19:c1:7e:08:7a:54:
dc:a2:ff:28:b0:13:9e:32:ca:34:7f:b7:ad:4b:68:
c8:19:31:a2:1b:54:25:59:24:b6:8a:ec:05:4a:45:
45:d3:86:94:d2:30:b1:99:19:4b:41:f8:72:77:94:
34:32:6b:e9:cf:1c:33:c7:88:03:ea:33:25:bb:1f:
38:6a:03:96:5d:f5:c6:8e:1c:49:f8:f1:37:3f:57:
eb:a0:82:2f:b8:8e:bb:51:5f:48:35:aa:29:d1:6e:
f4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9B:D8:6B:C1:F2:FD:F9:6F:E0:1D:41:67:AF:49:75:3A:DC:62:67
X509v3 Authority Key Identifier:
keyid:18:5B:C8:F7:95:FC:60:E1:63:D6:41:A0:1B:AA:51:0B:F9:53:C3:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1135050512157114409/0/185BC8F795FC60E163D641A01BAA510BF953C375.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/185BC8F795FC60E163D641A01BAA510BF953C375.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1135050512157114409/0/323430373a396263303a3a2f33322d3332203d3e203539303734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2407:9bc0::/32
Signature Algorithm: sha256WithRSAEncryption
5c:0e:97:1d:5f:c3:e1:fd:20:7a:03:cd:ab:e2:e1:58:75:27:
c0:80:5b:d3:52:8f:bc:4a:a5:d4:49:09:75:22:b4:fb:a7:02:
80:ae:cc:50:49:33:7a:c5:e1:30:8d:bd:ba:3c:01:e0:90:38:
6b:cf:2a:08:e1:77:48:23:44:23:48:c8:e1:75:ce:a6:91:07:
d0:e3:c6:3c:23:b3:97:e7:ba:75:cd:39:d7:b8:63:3e:da:aa:
30:ea:ab:8d:50:1a:f4:43:b7:f6:e9:09:94:63:17:8f:90:d0:
c5:0b:eb:48:67:17:d2:ec:03:6b:e1:11:32:f1:54:f7:d9:ec:
ed:d6:ba:bf:a9:0a:09:82:49:ef:93:fa:26:71:08:de:ee:15:
9d:fe:4c:fe:0e:7e:ee:d4:f6:2e:9d:ed:be:dc:5c:c7:81:07:
29:0a:e6:3b:ae:21:34:90:5a:20:b0:a6:68:33:aa:17:7b:75:
cb:b9:25:bf:1c:6b:77:98:3c:c3:91:8a:69:7d:fc:5b:d9:d0:
78:42:aa:53:03:3f:b9:84:3b:e8:c7:df:24:35:1d:73:79:ed:
ea:bd:48:f9:45:0b:56:1b:50:75:37:1f:65:76:f6:68:a0:95:
4a:af:ab:19:d6:6f:b0:a5:76:ce:3f:86:11:c4:52:90:5f:fa:
69:40:0a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:38:29 2026 by rpki-client