
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099989409597489153/0/3230332e3137352e3133352e302f32342d3234203d3e203233383432.roa
File: 3230332e3137352e3133352e302f32342d3234203d3e203233383432.roa (raw, json)
Hash identifier: cvLyDMila5E87YiOAgD8i7fuOPnJ5FsauY2mlvB/Acs=
Subject key identifier: F7:79:C8:E9:BD:5D:36:B9:B2:50:74:EA:CC:14:62:4C:11:FB:61:28
Certificate issuer: /CN=B0D124A7DA71F1C7466EB9E0710E74680E5D3172
Certificate serial: 3E3D2B9029C44963F8EF4CB4C4D5C1F038B84D52
Authority key identifier: B0:D1:24:A7:DA:71:F1:C7:46:6E:B9:E0:71:0E:74:68:0E:5D:31:72
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/3230332e3137352e3133352e302f32342d3234203d3e203233383432.roa
Signing time: Fri 24 Apr 2026 09:50:36 +0000
ROA not before: Fri 24 Apr 2026 09:45:36 +0000
ROA not after: Fri 23 Apr 2027 09:50:36 +0000
asID: 23842
IP address blocks: 203.175.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.crl
rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:3d:2b:90:29:c4:49:63:f8:ef:4c:b4:c4:d5:c1:f0:38:b8:4d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0D124A7DA71F1C7466EB9E0710E74680E5D3172
Validity
Not Before: Apr 24 09:45:36 2026 GMT
Not After : Apr 23 09:50:36 2027 GMT
Subject: CN=F779C8E9BD5D36B9B25074EACC14624C11FB6128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a2:49:7a:f0:0d:24:3c:9e:a4:e5:0b:44:d6:
8c:f7:b5:72:f8:cc:a5:c9:08:f2:7f:9c:7a:f7:a1:
f0:5f:65:45:ec:e2:72:64:fc:80:28:2b:bb:b4:11:
f4:3d:ff:9c:f9:28:a9:64:56:19:32:68:5d:5d:c4:
f5:10:b7:69:b2:37:91:26:b4:05:3a:12:f1:b4:9c:
81:80:46:be:2b:0f:a8:6e:0e:f5:c8:b5:ed:ce:af:
94:5c:ab:a2:2a:e5:e9:88:33:a2:aa:1d:0c:6c:4a:
0a:41:db:5f:5b:5a:1d:63:fe:87:8d:81:99:8c:75:
41:fe:d2:3b:97:82:c9:f5:82:cd:f6:a7:5f:4b:0f:
c2:5a:f7:58:04:b6:49:c9:10:ce:88:9d:bb:0d:95:
fc:df:1a:b8:30:ff:41:f7:2f:15:41:aa:13:92:4d:
5f:93:d2:25:2b:19:5f:3b:06:0a:83:a5:bb:c1:c9:
44:41:2a:a4:42:0d:8a:25:04:76:50:1d:f3:04:fb:
0b:ae:49:f3:93:af:9d:42:06:5b:fc:be:cd:f9:18:
cb:60:1e:81:c8:a0:61:e2:b8:ed:5a:7a:6d:33:e5:
3d:87:84:fe:35:52:11:70:e3:44:4e:e6:ca:52:4a:
12:ac:82:7e:fe:d3:a2:ac:23:9f:56:b5:bc:0b:97:
f2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:79:C8:E9:BD:5D:36:B9:B2:50:74:EA:CC:14:62:4C:11:FB:61:28
X509v3 Authority Key Identifier:
keyid:B0:D1:24:A7:DA:71:F1:C7:46:6E:B9:E0:71:0E:74:68:0E:5D:31:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/3230332e3137352e3133352e302f32342d3234203d3e203233383432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.175.135.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:a7:7b:3b:36:66:97:27:52:f4:6a:11:75:41:58:b7:e2:e7:
a3:4d:4f:1c:e0:6d:40:8d:b9:57:e2:c9:ba:9c:a8:a8:92:d0:
69:17:33:bc:25:c1:33:e7:dc:47:9b:b1:1c:4f:8c:b7:16:7a:
1f:b8:81:53:b6:8c:f8:e8:2c:b8:ef:df:40:b3:55:10:8b:7d:
62:12:b8:ca:1f:56:7f:d6:d8:89:b6:eb:f1:20:4d:0f:41:7a:
ee:e4:df:ff:51:cf:d4:be:d3:f1:e5:de:c4:2b:e5:6f:25:35:
ce:a4:f7:fd:c7:bd:27:b9:a9:9d:8a:a7:15:8f:a2:f4:b4:d4:
4f:f5:d5:ed:f5:1e:ce:ea:a6:c5:98:c1:7e:77:4d:72:f8:3d:
37:bc:af:9e:91:dc:5f:7b:1c:27:e0:78:e8:ce:c2:60:20:30:
80:df:a2:e1:fb:16:77:e4:82:0e:56:89:49:57:bb:f1:95:f1:
a2:b8:51:4e:4c:5e:19:d7:0b:cf:9f:90:df:0f:30:0c:62:dd:
7b:9b:b5:5e:e5:a8:fd:ec:f1:77:b4:52:3c:e9:91:c2:89:88:
a6:f9:8f:c2:c5:de:b1:69:c2:1c:cc:a5:fb:cd:6f:2a:4b:7f:
92:46:d3:ff:79:5d:88:f1:61:b6:53:7c:6e:55:b7:ce:81:0e:
3e:9f:42:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:34:47 2026 by rpki-client