
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3230332e3139322e31302e302f32342d3234203d3e2034363131.roa
File: 3230332e3139322e31302e302f32342d3234203d3e2034363131.roa (raw, json)
Hash identifier: B5g+2JRh5TgR/UTOSPrdbR+qCyH6GJDVipqqxDIoaCk=
Subject key identifier: 62:2A:9B:10:D0:60:7C:56:D6:A3:4F:BE:A8:9E:5C:6D:C3:E6:68:E6
Certificate issuer: /CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB
Certificate serial: 7876C87932ECA7B58516CC77A9C3B39E56D31642
Authority key identifier: 4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3230332e3139322e31302e302f32342d3234203d3e2034363131.roa
Signing time: Tue 12 May 2026 01:56:22 +0000
ROA not before: Tue 12 May 2026 01:51:22 +0000
ROA not after: Tue 11 May 2027 01:56:22 +0000
asID: 4611
IP address blocks: 203.192.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl
rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:76:c8:79:32:ec:a7:b5:85:16:cc:77:a9:c3:b3:9e:56:d3:16:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB
Validity
Not Before: May 12 01:51:22 2026 GMT
Not After : May 11 01:56:22 2027 GMT
Subject: CN=622A9B10D0607C56D6A34FBEA89E5C6DC3E668E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:24:65:e5:34:4a:21:50:a4:dd:51:d0:ea:a0:
d2:8e:9f:86:a3:bc:ca:b4:a0:36:bf:c4:30:e4:07:
c2:2d:e5:99:a5:c6:71:96:73:d1:4b:f4:47:32:7c:
15:80:1c:07:9f:ec:62:d3:b4:cc:8c:69:41:5d:83:
96:ae:db:55:5e:7f:5e:d7:be:e6:d8:df:41:70:f0:
0c:6c:bd:b6:24:3f:44:16:aa:41:6c:6b:90:85:8e:
5a:3d:c1:a4:54:e1:74:5c:a7:aa:ec:11:43:64:a4:
7d:67:17:02:8c:6b:ea:b3:dc:4d:8e:58:d3:52:56:
78:63:1f:5c:85:f6:19:a6:e4:12:81:96:e2:97:69:
53:e3:cf:27:de:aa:cc:5a:18:37:ef:cb:22:f5:56:
46:10:14:5f:3f:c3:01:27:71:83:84:7d:54:7b:47:
72:0f:1c:1e:14:6a:1d:55:14:22:2c:d7:83:9f:86:
88:05:55:7a:90:38:4d:60:fb:e2:63:7e:cd:d9:26:
f9:fd:88:ab:d8:1d:b9:a6:07:11:f6:e0:3b:d4:75:
a1:7d:2c:9c:91:da:1f:f7:0d:e9:01:39:b9:58:25:
c3:00:f4:61:35:b2:c5:0f:12:e8:4d:96:01:c5:95:
3d:70:1e:b0:fe:72:fe:e6:b4:3c:50:3e:df:d4:c8:
65:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2A:9B:10:D0:60:7C:56:D6:A3:4F:BE:A8:9E:5C:6D:C3:E6:68:E6
X509v3 Authority Key Identifier:
keyid:4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3230332e3139322e31302e302f32342d3234203d3e2034363131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.192.10.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:9e:60:6a:ed:bf:d5:62:9f:5d:cf:de:70:32:bb:8b:47:99:
0c:24:fa:77:55:68:e3:42:98:b9:8d:40:dc:8a:fb:8a:91:9b:
e8:0b:74:e2:29:b5:07:93:59:ef:bc:9a:0a:71:96:16:50:63:
93:b9:19:63:66:0d:74:10:2f:16:04:91:6d:11:72:bb:06:95:
7e:03:8c:37:33:93:9f:ad:92:9f:68:e7:74:17:66:90:ce:11:
86:3f:f2:3b:34:23:cd:71:25:8b:f7:93:ea:c2:fe:88:60:e2:
67:97:d2:3e:52:4b:21:93:df:d6:8b:76:3d:cf:68:a2:31:3d:
ba:10:08:7b:9f:37:be:07:af:e3:37:04:56:6d:fd:9d:7e:f6:
1a:1a:da:2e:c5:70:49:5e:2f:a5:9a:0b:a9:a6:ff:ee:5d:7b:
23:bb:a3:3e:a8:01:a5:09:b0:a5:44:d5:7f:34:cd:2a:07:f2:
d5:99:25:ff:83:0a:ee:5c:43:c6:27:54:9f:a0:b4:6a:62:61:
d4:8f:c2:29:dc:c0:94:da:d9:6c:5f:c5:40:5c:ee:3d:a5:0a:
2d:98:d2:6f:eb:d2:5a:30:d5:7a:4a:bd:46:f2:e4:85:17:fc:
b0:cf:5f:4a:0a:11:09:b0:96:5d:9e:df:a0:b6:e9:19:40:b1:
8d:a8:f3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:31:35 2026 by rpki-client