
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3230332e3139322e342e302f32342d3234203d3e2034363131.roa
File: 3230332e3139322e342e302f32342d3234203d3e2034363131.roa (raw, json)
Hash identifier: 17kgFGc3cSe7uHyaAKqp7oAC5dXyj9elPuMYbCDiwxE=
Subject key identifier: E9:16:7E:7B:E8:A7:41:E6:48:5F:4C:34:D7:A5:C5:40:EA:A0:6B:2C
Certificate issuer: /CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB
Certificate serial: 39A6574AFDF7574E8A0B02BA64CA52D8E2FB75C6
Authority key identifier: 4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3230332e3139322e342e302f32342d3234203d3e2034363131.roa
Signing time: Tue 12 May 2026 01:56:23 +0000
ROA not before: Tue 12 May 2026 01:51:23 +0000
ROA not after: Tue 11 May 2027 01:56:23 +0000
asID: 4611
IP address blocks: 203.192.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl
rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:a6:57:4a:fd:f7:57:4e:8a:0b:02:ba:64:ca:52:d8:e2:fb:75:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB
Validity
Not Before: May 12 01:51:23 2026 GMT
Not After : May 11 01:56:23 2027 GMT
Subject: CN=E9167E7BE8A741E6485F4C34D7A5C540EAA06B2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e9:58:91:9a:63:ef:ef:4f:a1:0b:a8:7e:7f:
7c:01:26:aa:8d:f9:96:64:6e:5e:76:7e:12:fe:6f:
b0:b2:2b:db:21:05:67:76:db:44:75:77:8c:a7:8d:
c9:b9:40:cc:f3:7c:1f:66:cc:42:d2:15:8c:21:c3:
ae:bb:54:bf:63:67:15:7c:be:98:e7:ee:9f:86:b4:
0a:a4:99:8e:b7:c4:3c:d9:ee:ec:fc:24:f2:5c:f2:
50:b8:2f:66:8d:a8:e6:f5:fe:2e:20:ec:a2:7e:cd:
7a:e4:c2:ab:9d:e3:02:95:d4:e2:00:aa:a5:89:a6:
a5:4c:da:3c:80:1d:0c:f3:8c:93:9d:7c:c2:8f:b4:
ef:32:06:f2:7e:41:ca:fb:72:88:f4:9e:03:b4:1f:
1d:3e:8d:ca:f3:e8:e3:9f:ed:8f:91:f3:cc:7a:1c:
f5:6a:1b:06:9a:e1:3e:10:81:1b:90:8b:04:fe:84:
bf:ad:ed:f0:58:aa:5f:5a:23:8b:0a:b6:35:ae:43:
6e:51:6a:0b:a7:e5:6f:98:df:dc:92:cc:da:e7:5e:
8d:e6:0b:73:ea:42:a9:8a:0e:6c:3a:7a:79:49:42:
cc:b0:56:39:dd:41:52:1d:5e:3a:54:3d:f2:f0:47:
e7:85:98:88:63:b9:13:91:4b:af:10:4e:42:65:13:
29:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:16:7E:7B:E8:A7:41:E6:48:5F:4C:34:D7:A5:C5:40:EA:A0:6B:2C
X509v3 Authority Key Identifier:
keyid:4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3230332e3139322e342e302f32342d3234203d3e2034363131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.192.4.0/24
Signature Algorithm: sha256WithRSAEncryption
93:11:1a:0b:c8:4f:1e:1c:02:57:c0:8a:b5:29:96:0f:ca:8d:
73:c7:0b:15:1c:38:06:ea:17:2b:88:e0:e1:92:9a:7f:07:d2:
6c:17:fa:8f:26:e8:d7:05:e5:22:92:45:b4:d6:bc:35:3d:1c:
d4:bb:61:48:eb:d7:ea:74:49:7d:fa:41:db:b6:fd:b2:cd:6f:
b5:fc:c6:51:54:84:cb:09:40:c1:43:aa:ad:6d:7c:7f:02:40:
5e:1b:5c:19:8e:d3:3a:80:3f:b1:1c:67:2a:99:22:c0:d1:6d:
ab:8e:6a:86:a7:65:25:f4:1a:cc:8a:4f:6f:54:60:b2:aa:42:
9c:7a:57:40:fe:e1:fc:98:2d:6d:31:c3:4c:d1:63:2b:4e:7a:
9a:51:7c:3d:04:09:de:16:75:ad:e3:1f:6f:6d:04:be:c1:bb:
ee:fd:f2:9f:e0:70:d9:7d:9c:29:64:17:56:c7:dd:a4:a8:94:
f9:83:0a:6f:8b:8f:8f:57:e4:05:9b:21:d4:9d:c8:58:fd:3a:
75:ff:87:37:54:df:3b:6a:ab:72:dc:53:18:2e:33:8f:bc:11:
8f:4e:4f:5e:be:8f:e1:92:bf:8a:6e:4c:2d:f9:82:c3:12:bc:
61:a6:aa:b6:2c:fe:74:67:3d:ce:62:15:5b:0d:48:4e:8a:6a:
72:ca:57:47
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUOaZXSv33V06KCwK6ZMpS2OL7dcYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEFGNUREOTM5OEVCQzMzRUEwQ0FFMDQxRDdGNTJFRTJD
QUREMEFGQjAeFw0yNjA1MTIwMTUxMjNaFw0yNzA1MTEwMTU2MjNaMDMxMTAvBgNV
BAMTKEU5MTY3RTdCRThBNzQxRTY0ODVGNEMzNEQ3QTVDNTQwRUFBMDZCMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY6ViRmmPv70+hC6h+f3wBJqqN
+ZZkbl52fhL+b7CyK9shBWd220R1d4ynjcm5QMzzfB9mzELSFYwhw667VL9jZxV8
vpjn7p+GtAqkmY63xDzZ7uz8JPJc8lC4L2aNqOb1/i4g7KJ+zXrkwqud4wKV1OIA
qqWJpqVM2jyAHQzzjJOdfMKPtO8yBvJ+Qcr7coj0ngO0Hx0+jcrz6OOf7Y+R88x6
HPVqGwaa4T4QgRuQiwT+hL+t7fBYql9aI4sKtjWuQ25Ragun5W+Y39ySzNrnXo3m
C3PqQqmKDmw6enlJQsywVjndQVIdXjpUPfLwR+eFmIhjuRORS68QTkJlEykLAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQU6RZ+e+inQeZIX0w016XFQOqgaywwHwYDVR0j
BBgwFoAUSvXdk5jrwz6gyuBB1/Uu4srdCvswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NjM5ODM4ODE4NzgyNDE0Ny8wLzRBRjVERDkzOThFQkMzM0VBMENBRTA0MUQ3RjUy
RUUyQ0FERDBBRkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNEFGNUREOTM5OEVCQzMzRUEwQ0FFMDQxRDdGNTJFRTJDQUREMEFGQi5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA2Mzk4Mzg4MTg3ODI0MTQ3LzAvMzIzMDMzMmUzMTM5
MzIyZTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNjMxMzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADLwAQwDQYJKoZIhvcNAQELBQADggEBAJMRGgvITx4cAlfAirUplg/KjXPHCxUc
OAbqFyuI4OGSmn8H0mwX+o8m6NcF5SKSRbTWvDU9HNS7YUjr1+p0SX36Qdu2/bLN
b7X8xlFUhMsJQMFDqq1tfH8CQF4bXBmO0zqAP7EcZyqZIsDRbauOaoanZSX0GsyK
T29UYLKqQpx6V0D+4fyYLW0xw0zRYytOeppRfD0ECd4Wda3jH29tBL7Bu+798p/g
cNl9nClkF1bH3aSolPmDCm+Lj49X5AWbIdSdyFj9OnX/hzdU3ztqq3LcUxguM4+8
EY9OT16+j+GSv4puTC35gsMSvGGmqrYs/nRnPc5iFVsNSE6KanLKV0c=
-----END CERTIFICATE-----
Generated at Wed May 13 21:31:24 2026 by rpki-client