
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101394207139954693/0/3230322e38352e3230382e302f32302d3332203d3e203435303634.roa
File: 3230322e38352e3230382e302f32302d3332203d3e203435303634.roa (raw, json)
Hash identifier: 6J0dc+5h7gXq8vT8WI01axh8CDzV/x/iba3YNgZSOWQ=
Subject key identifier: 54:CC:0E:51:F4:27:53:FE:4D:C0:07:2C:F6:D7:A3:F5:2A:98:3D:EA
Certificate issuer: /CN=334B93F76F5BCAAA2030E5BDD8CEF220A61CE061
Certificate serial: 720EE86A499278B5E5092F50F0DE0DA7716AD27D
Authority key identifier: 33:4B:93:F7:6F:5B:CA:AA:20:30:E5:BD:D8:CE:F2:20:A6:1C:E0:61
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/3230322e38352e3230382e302f32302d3332203d3e203435303634.roa
Signing time: Tue 28 Apr 2026 06:49:12 +0000
ROA not before: Tue 28 Apr 2026 06:44:12 +0000
ROA not after: Tue 27 Apr 2027 06:49:12 +0000
asID: 45064
IP address blocks: 202.85.208.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.crl
rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:54:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:0e:e8:6a:49:92:78:b5:e5:09:2f:50:f0:de:0d:a7:71:6a:d2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334B93F76F5BCAAA2030E5BDD8CEF220A61CE061
Validity
Not Before: Apr 28 06:44:12 2026 GMT
Not After : Apr 27 06:49:12 2027 GMT
Subject: CN=54CC0E51F42753FE4DC0072CF6D7A3F52A983DEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9e:cc:82:86:c3:ec:4d:c1:5f:81:50:2b:3a:
e1:fe:d9:1f:e9:8e:ae:10:a4:7b:f5:4b:4f:09:e4:
a4:f4:30:28:2e:d8:e5:6d:0b:5a:7d:9e:04:16:e8:
03:c1:01:7e:b9:d9:ba:96:20:8e:83:2a:27:dc:05:
05:70:a3:83:6d:f1:6f:c3:79:99:06:f4:93:9f:08:
7a:f2:6f:12:cd:3e:67:c8:c4:c6:64:25:76:9c:79:
60:e9:e1:1c:c4:50:bd:e1:df:0c:12:cd:a4:e9:2a:
12:fa:1d:31:b4:6e:8a:94:a6:00:d2:63:a5:ef:03:
19:55:e9:12:9b:0c:b1:5a:10:d9:1a:4c:e5:fb:6f:
02:3d:51:32:a2:79:86:cd:98:3f:a4:d6:a1:31:c3:
86:9b:52:ee:e1:d0:55:cf:99:2d:5b:17:45:b5:be:
89:42:6d:f4:ec:a2:cc:32:c6:d8:83:51:06:91:c0:
6e:6b:1d:fd:21:7f:ee:66:11:88:3e:0c:c0:15:47:
18:c2:4e:7d:65:11:d8:27:bb:98:54:40:83:cb:fa:
4c:8d:11:0a:f3:e9:b9:a8:c0:ec:65:cf:d9:fb:cb:
2c:a4:c6:11:a7:91:9f:bb:fc:bd:9d:8d:20:eb:d4:
a7:5c:03:3a:b3:04:ca:49:58:b9:e3:6e:38:52:d0:
b6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CC:0E:51:F4:27:53:FE:4D:C0:07:2C:F6:D7:A3:F5:2A:98:3D:EA
X509v3 Authority Key Identifier:
keyid:33:4B:93:F7:6F:5B:CA:AA:20:30:E5:BD:D8:CE:F2:20:A6:1C:E0:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/3230322e38352e3230382e302f32302d3332203d3e203435303634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.85.208.0/20
Signature Algorithm: sha256WithRSAEncryption
5b:93:ad:df:f1:71:df:63:8f:24:1b:c4:1f:5c:9d:7d:f3:8e:
be:83:70:eb:b9:c6:36:c6:a7:0c:a0:87:f8:e1:25:33:50:b6:
79:85:51:24:c4:f4:6b:d6:c8:8d:7e:d0:e5:88:b1:f2:f9:86:
bf:95:2d:4e:6c:ae:9b:f3:b0:f9:f3:99:e1:58:61:81:2b:5d:
a9:ee:ff:dc:d7:c4:17:66:a2:5a:bd:cc:2e:ba:c4:08:04:f7:
2c:98:f8:0a:ea:9b:d8:10:42:c9:d1:2a:2a:f1:72:de:90:d6:
0d:80:e1:3d:86:11:14:0e:c1:66:ad:08:c1:4f:0b:94:03:c4:
ea:69:25:31:43:7b:f7:a9:8b:93:b2:5a:38:ba:33:41:ea:20:
7e:21:d3:fe:06:1a:b8:cc:83:e7:e5:8e:0e:e5:99:44:43:49:
b2:19:f9:8c:13:03:6d:92:88:62:dc:28:11:75:77:5b:42:32:
cf:7c:f7:76:ad:a5:b8:ac:44:95:16:4b:ba:a1:ea:37:b8:63:
e2:8f:68:60:77:98:37:b1:74:03:63:40:20:c9:ca:2b:96:f8:
1c:f9:6b:a1:5e:97:69:64:69:e9:27:d2:95:ad:f7:d1:34:fc:
0d:5c:8e:58:46:79:5f:b5:d9:94:7b:3d:2a:cd:54:92:77:b0:
14:ac:19:1b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 14:34:25 2026 by rpki-client