
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3230322e31302e37322e302f32342d3234203d3e203234343236.roa
File: 3230322e31302e37322e302f32342d3234203d3e203234343236.roa (raw, json)
Hash identifier: lmYpSKzBFWig36FtDYJCQZnS4T5/caFwTyGbvmvkZA4=
Subject key identifier: DE:F9:1F:FF:51:21:27:1B:74:E3:F2:FB:0D:1C:B1:FB:7F:F3:67:ED
Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial: 75E0C90D815B1B4BF73097DACD09FEC24B03E5A9
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3230322e31302e37322e302f32342d3234203d3e203234343236.roa
Signing time: Sat 09 May 2026 02:26:39 +0000
ROA not before: Sat 09 May 2026 02:21:39 +0000
ROA not after: Sat 08 May 2027 02:26:39 +0000
asID: 24426
IP address blocks: 202.10.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:e0:c9:0d:81:5b:1b:4b:f7:30:97:da:cd:09:fe:c2:4b:03:e5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Validity
Not Before: May 9 02:21:39 2026 GMT
Not After : May 8 02:26:39 2027 GMT
Subject: CN=DEF91FFF5121271B74E3F2FB0D1CB1FB7FF367ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bf:fe:74:9c:ff:ef:93:e1:e0:eb:c6:3f:75:
72:72:84:90:82:0e:89:bb:32:84:87:74:ef:28:54:
0a:77:6f:6d:e7:d2:eb:a0:26:1f:a0:ac:5b:7d:c1:
53:c4:2d:85:34:0a:f7:80:d8:43:ee:41:4f:62:ab:
75:f3:1b:e9:c4:f8:02:87:f2:27:22:ce:f2:01:00:
e0:e8:33:fe:0a:15:6c:f2:b1:6f:b1:e0:99:a7:57:
3d:ae:27:d7:77:48:e0:cb:e3:d0:07:9e:9d:28:57:
f6:1f:da:1f:e1:f3:c5:60:ac:a1:65:49:ee:af:45:
2f:95:61:62:a6:5e:7b:0d:c6:9e:51:f2:84:99:75:
27:40:e4:f0:cc:a7:dd:94:f1:11:e7:b1:a7:a0:8d:
09:77:5f:5c:5f:2d:d3:7b:e4:f7:60:14:6f:b7:f3:
07:fc:96:fe:72:7c:8a:44:c4:c6:14:71:05:b2:69:
ab:79:da:57:6b:9a:94:ec:b2:b5:94:57:24:e2:e2:
eb:5d:a1:5c:e2:a0:ae:6b:cf:2a:14:25:fc:7b:86:
f5:ab:32:69:b2:72:9f:89:89:f4:55:30:85:b2:ab:
4e:7b:7d:cd:af:dd:7e:f0:c0:6e:b6:94:91:60:06:
85:82:a0:29:39:00:c7:1b:90:5c:34:55:d4:22:0a:
0c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F9:1F:FF:51:21:27:1B:74:E3:F2:FB:0D:1C:B1:FB:7F:F3:67:ED
X509v3 Authority Key Identifier:
keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3230322e31302e37322e302f32342d3234203d3e203234343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.10.72.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:51:7c:16:90:ce:7f:51:16:98:fa:b1:3e:53:93:bf:85:19:
63:c3:45:e8:e4:17:6e:7f:07:cb:1a:96:af:f5:1f:19:3d:dc:
61:6e:32:b7:5a:80:bf:d5:4f:7f:9d:5d:c9:1c:98:bc:93:42:
c3:b3:c5:1a:b8:7f:db:d9:87:62:44:dd:4f:6b:92:b6:62:49:
d6:4b:ee:d7:ad:a6:61:c6:b1:24:90:00:fc:70:43:4a:a6:88:
6b:75:b6:ab:63:5a:3b:ee:ec:92:30:81:eb:80:b6:63:01:b8:
c8:bd:e3:96:1b:96:ad:4d:5d:40:21:24:3a:f2:70:fd:07:23:
d1:fa:f4:87:d7:7d:08:0a:84:3d:7f:94:09:33:c1:a3:7d:01:
63:be:67:48:bb:18:31:88:32:d8:94:47:7b:77:85:4d:44:41:
a5:fd:91:fe:04:a4:5c:94:25:81:d1:8d:b9:20:71:50:5c:0f:
cc:5a:f7:e4:7e:02:96:2c:2c:80:0c:0f:dd:37:58:d0:da:bd:
41:6a:ee:97:b4:2d:fc:51:8b:d6:6e:65:81:23:a1:0f:60:2a:
64:70:3a:b7:2b:f1:19:c5:f4:2e:45:22:b4:29:28:49:54:92:
98:bc:29:e2:bb:5f:63:56:b2:8e:81:8b:4c:44:5f:2a:e5:7f:
92:a6:81:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:20:32 2026 by rpki-client