
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101394207139954693/0/3232332e3232332e3137362e302f32312d3332203d3e2034383038.roa
File: 3232332e3232332e3137362e302f32312d3332203d3e2034383038.roa (raw, json)
Hash identifier: 4Uz5ofAGU0XMAvu0rT2o7KD3G9YUu7de3HEiFoWPu3k=
Subject key identifier: C1:12:45:CD:56:F2:6F:14:6B:63:18:69:73:0C:C7:E8:31:CD:E7:61
Certificate issuer: /CN=334B93F76F5BCAAA2030E5BDD8CEF220A61CE061
Certificate serial: 4D451C136176C74F3F21841A1682B7179CDD7F83
Authority key identifier: 33:4B:93:F7:6F:5B:CA:AA:20:30:E5:BD:D8:CE:F2:20:A6:1C:E0:61
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/3232332e3232332e3137362e302f32312d3332203d3e2034383038.roa
Signing time: Tue 28 Apr 2026 06:51:16 +0000
ROA not before: Tue 28 Apr 2026 06:46:16 +0000
ROA not after: Tue 27 Apr 2027 06:51:16 +0000
asID: 4808
IP address blocks: 223.223.176.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.crl
rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:54:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:45:1c:13:61:76:c7:4f:3f:21:84:1a:16:82:b7:17:9c:dd:7f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334B93F76F5BCAAA2030E5BDD8CEF220A61CE061
Validity
Not Before: Apr 28 06:46:16 2026 GMT
Not After : Apr 27 06:51:16 2027 GMT
Subject: CN=C11245CD56F26F146B631869730CC7E831CDE761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f5:f3:c2:91:87:99:71:a3:d9:7d:43:b1:ce:
6b:b3:dd:c5:db:a7:e7:35:d3:1d:f1:26:68:b7:a5:
5c:c5:a0:9b:21:b2:c9:a3:94:90:ec:03:3b:a4:67:
fe:58:79:8e:40:ed:04:5f:8f:8f:41:13:58:0b:7a:
e7:28:8d:06:43:d0:77:e4:3f:17:5b:37:e8:72:0a:
35:20:63:5d:a6:67:c0:2d:b1:d5:6f:8d:9b:d4:4a:
3a:76:a3:95:ac:fd:49:fb:04:14:c7:50:37:8d:8f:
31:c1:ee:c9:0f:2c:6c:00:99:e4:6d:3a:13:25:e0:
0e:3d:92:bf:01:2d:de:29:9e:b5:8e:37:5c:0a:77:
e8:f8:7c:d1:7a:44:c4:05:3e:f9:ac:5f:28:67:ab:
df:2e:db:0b:a0:28:4d:5d:8b:78:b1:f8:53:a6:29:
ed:01:f6:76:8b:fb:9a:3f:64:84:7f:05:fc:9a:85:
eb:e8:fe:4c:85:02:d4:45:d3:36:34:af:be:20:d5:
0d:82:8f:a6:ad:23:b0:e9:5e:e0:4c:90:dc:17:43:
bb:d3:3d:ff:24:5f:53:19:73:8f:85:02:c7:02:8f:
5f:68:e9:e3:b7:ba:62:1f:cb:41:9e:64:6b:19:78:
ed:a3:09:65:36:d7:2a:17:bf:25:28:a1:3d:25:af:
b6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:12:45:CD:56:F2:6F:14:6B:63:18:69:73:0C:C7:E8:31:CD:E7:61
X509v3 Authority Key Identifier:
keyid:33:4B:93:F7:6F:5B:CA:AA:20:30:E5:BD:D8:CE:F2:20:A6:1C:E0:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/3232332e3232332e3137362e302f32312d3332203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.223.176.0/21
Signature Algorithm: sha256WithRSAEncryption
78:22:90:bc:26:91:3f:bd:65:0a:fc:95:d1:d3:56:88:f5:1d:
b3:01:83:d3:a1:60:31:7f:e7:64:3d:f8:dc:4b:35:89:d7:44:
c9:50:cd:e1:84:25:b6:70:a2:ab:8f:c9:57:a4:c5:a5:81:6d:
e9:79:ba:38:92:7f:ae:cb:51:ad:af:ba:e7:26:0f:9f:46:f3:
dd:b6:e5:ed:12:53:6e:f0:7c:fc:98:7d:03:cf:61:d6:47:c0:
ee:83:73:91:76:1a:3b:c6:22:17:dd:b2:19:d7:e6:45:1e:46:
46:3c:9b:d6:01:2d:ae:29:08:ad:49:fd:6e:b0:02:43:c5:2e:
1c:57:8e:e4:ed:7a:68:a6:74:91:e4:a3:c9:fd:de:77:6b:bf:
ed:07:a2:2b:d1:ce:03:fb:68:c9:5f:9f:b2:91:5f:1d:1b:04:
4e:14:70:50:3f:fc:de:a2:91:bc:f3:99:9c:8a:a6:7f:e4:7d:
86:0f:99:d5:02:4c:68:cc:96:33:12:f9:82:42:b2:02:17:88:
12:3b:63:50:43:96:a2:92:ff:6c:7a:c1:6b:76:4b:7a:ae:3c:
9c:3b:ad:71:bd:29:51:b1:6b:05:5c:0e:05:6e:1b:29:be:32:
22:67:4b:9f:1c:9a:2d:0d:68:76:99:2e:ef:30:b6:12:75:f0:
4c:c1:55:c1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 16:19:57 2026 by rpki-client