
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101394207139954693/0/3232332e3232332e3137362e302f32312d3332203d3e2034383437.roa
File: 3232332e3232332e3137362e302f32312d3332203d3e2034383437.roa (raw, json)
Hash identifier: fmfSNWGAZFf4hrKdJewDLV2ySp/ClIQ4cBJapshZ3nM=
Subject key identifier: C3:49:69:E2:16:AB:C7:A8:EA:CB:54:93:96:D5:7F:2F:F9:B1:23:32
Certificate issuer: /CN=334B93F76F5BCAAA2030E5BDD8CEF220A61CE061
Certificate serial: 6D9199803CDADDB94B0E8EB8E1FE004AC56A10EE
Authority key identifier: 33:4B:93:F7:6F:5B:CA:AA:20:30:E5:BD:D8:CE:F2:20:A6:1C:E0:61
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/3232332e3232332e3137362e302f32312d3332203d3e2034383437.roa
Signing time: Tue 28 Apr 2026 06:51:16 +0000
ROA not before: Tue 28 Apr 2026 06:46:16 +0000
ROA not after: Tue 27 Apr 2027 06:51:16 +0000
asID: 4847
IP address blocks: 223.223.176.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.crl
rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:54:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:91:99:80:3c:da:dd:b9:4b:0e:8e:b8:e1:fe:00:4a:c5:6a:10:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334B93F76F5BCAAA2030E5BDD8CEF220A61CE061
Validity
Not Before: Apr 28 06:46:16 2026 GMT
Not After : Apr 27 06:51:16 2027 GMT
Subject: CN=C34969E216ABC7A8EACB549396D57F2FF9B12332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:71:73:10:b2:39:b5:80:9e:ff:87:07:8e:cb:
d0:c2:bf:a7:45:c2:33:3f:27:a0:6d:e1:a4:2f:44:
8d:84:40:5b:46:3c:51:a5:2d:7b:9e:bd:32:c5:2d:
ed:d3:44:dc:7a:b3:d0:48:6b:67:35:5b:c4:eb:ae:
fa:ee:bb:78:32:0b:cd:5e:0d:11:81:86:b1:08:48:
b1:5d:e1:94:66:04:bd:7f:5d:d4:68:20:e7:07:02:
74:d2:fb:cd:2f:b5:cc:ac:82:65:8f:f1:83:1b:45:
50:31:71:8c:61:e0:48:4b:8b:ac:4f:88:55:4d:48:
1e:f4:9c:82:52:fb:c8:53:c1:81:e7:99:59:92:bf:
bf:b2:a9:b5:4a:49:ba:be:57:3f:81:92:07:37:75:
3f:f7:9d:62:0c:ca:d2:31:30:38:95:56:ed:0f:30:
b3:c1:41:0d:2a:94:75:2d:8b:94:63:f8:21:b4:18:
7f:b6:e9:db:7f:d1:73:c2:05:85:ee:58:8a:d6:f4:
5f:70:ce:81:6b:34:f6:0e:2c:ac:3d:c0:36:d3:21:
cb:8a:25:b7:4d:cc:a5:0b:42:c6:a1:31:cb:74:af:
90:30:5e:f2:6f:3b:8d:36:44:db:0d:93:a6:d2:cc:
e4:1c:55:07:7b:7e:5c:03:b4:e8:dd:3c:6e:c1:82:
82:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:49:69:E2:16:AB:C7:A8:EA:CB:54:93:96:D5:7F:2F:F9:B1:23:32
X509v3 Authority Key Identifier:
keyid:33:4B:93:F7:6F:5B:CA:AA:20:30:E5:BD:D8:CE:F2:20:A6:1C:E0:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/3232332e3232332e3137362e302f32312d3332203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.223.176.0/21
Signature Algorithm: sha256WithRSAEncryption
13:4f:ca:ea:28:d9:6a:ee:56:92:d8:b6:61:d8:5f:6e:c6:a2:
21:a6:5b:85:6b:ab:de:8e:1f:37:ad:ff:a4:1d:1a:c8:69:a2:
83:ce:b1:8f:6a:28:c7:4f:1d:1a:36:50:77:0c:1a:92:92:ac:
49:a2:5b:b0:ab:18:be:3f:fa:a0:d3:9e:0a:40:ac:21:db:00:
23:e0:b4:2b:a7:a0:b7:b4:50:ab:f4:c2:69:5b:58:32:e4:ab:
a5:08:45:09:bc:27:6b:63:cf:4f:0c:c0:70:12:c1:0c:ea:ee:
a0:ed:de:d4:a7:65:0d:3c:e9:d3:5c:56:70:b5:8d:82:bd:bc:
94:e8:5e:40:7a:8e:f7:7f:c6:2b:d5:d0:3d:ea:a1:31:fe:ea:
a5:42:fb:6e:a5:14:02:c3:4e:a2:55:00:80:ce:df:73:eb:da:
09:89:5f:5f:d6:ca:a8:c7:99:12:3e:ba:a0:83:91:20:13:55:
f0:46:7d:68:2b:fd:b0:d5:27:79:78:e6:90:2b:ea:61:9f:a9:
29:5c:93:89:fa:4b:e6:0c:f2:db:5c:28:9b:b3:d1:90:f6:d1:
6f:12:3a:fd:e0:54:de:76:e2:b1:d7:dc:e2:d0:90:85:3c:76:
d8:40:cf:97:a1:77:cb:2d:8f:bf:cd:84:c6:1d:04:52:4e:89:
29:cc:d2:e1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 16:19:30 2026 by rpki-client