
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3230332e3139322e362e302f32342d3234203d3e2034363131.roa
File: 3230332e3139322e362e302f32342d3234203d3e2034363131.roa (raw, json)
Hash identifier: CRUJkzzmVRsaFDZOKPvn/CRKcvAx+oeYntLvx9WwCyk=
Subject key identifier: F8:97:75:46:7F:42:68:A5:CC:61:50:EA:A7:68:15:96:19:DC:BE:86
Certificate issuer: /CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB
Certificate serial: 322F4D4D6C7F61B89471D2AF6B973BD014189D50
Authority key identifier: 4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3230332e3139322e362e302f32342d3234203d3e2034363131.roa
Signing time: Tue 12 May 2026 01:56:22 +0000
ROA not before: Tue 12 May 2026 01:51:22 +0000
ROA not after: Tue 11 May 2027 01:56:22 +0000
asID: 4611
IP address blocks: 203.192.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl
rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:2f:4d:4d:6c:7f:61:b8:94:71:d2:af:6b:97:3b:d0:14:18:9d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB
Validity
Not Before: May 12 01:51:22 2026 GMT
Not After : May 11 01:56:22 2027 GMT
Subject: CN=F89775467F4268A5CC6150EAA768159619DCBE86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f9:1c:12:5b:0c:85:75:44:da:5e:ca:c9:57:
60:93:74:3d:9d:fc:b5:c8:ab:27:53:4b:b3:37:12:
d8:a6:a3:d5:c9:f0:92:74:6b:91:2f:ac:ff:1d:12:
f2:62:35:0a:69:ba:2b:a3:57:43:43:d7:90:57:81:
f5:a1:c1:31:f9:dc:f7:bc:75:ea:23:06:c4:c0:79:
3a:65:ec:16:9a:43:31:59:5e:ce:7e:8c:79:29:fd:
f3:b5:d2:78:44:e8:fd:fe:3c:78:1b:73:17:b6:b6:
7a:c8:94:ed:54:1e:3e:0e:d6:e0:ac:0a:70:3d:33:
ac:ca:f3:12:5d:a5:dd:b0:ed:df:4e:52:38:18:8d:
64:15:73:b2:27:db:48:a8:2b:41:c8:cd:ec:d3:ab:
17:35:09:71:00:6d:8b:7f:c0:5a:3d:46:3c:dd:b4:
8f:b4:e6:43:8e:48:77:4a:6f:e2:2a:48:2c:1a:c9:
6c:70:e8:d7:71:14:ce:23:f5:78:84:1f:8f:2f:76:
53:7c:1b:a4:f1:07:e9:dd:de:dc:b1:30:95:2f:31:
4c:db:8b:6f:5d:ef:f5:3e:a9:17:97:d6:a1:4f:db:
3b:f2:ae:ba:13:25:73:c5:a5:b0:c7:b5:5b:79:30:
14:9a:40:b3:1e:4b:76:76:b1:ff:b7:a9:74:c2:16:
c3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:97:75:46:7F:42:68:A5:CC:61:50:EA:A7:68:15:96:19:DC:BE:86
X509v3 Authority Key Identifier:
keyid:4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3230332e3139322e362e302f32342d3234203d3e2034363131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.192.6.0/24
Signature Algorithm: sha256WithRSAEncryption
78:25:52:a3:0b:87:2d:12:a4:7b:23:6e:12:26:de:cf:c4:a1:
46:f6:11:6d:c6:5e:de:bc:33:50:96:f1:6a:b9:f2:23:08:ae:
4a:13:44:77:fa:c5:ac:b2:12:3c:31:cd:67:fc:13:47:c5:03:
ae:5f:48:a3:26:5e:64:8f:a6:f5:2e:e0:35:bf:8f:f9:d1:30:
cb:40:4e:7b:d2:f6:83:f2:1f:f6:e6:a6:a0:9e:d0:d8:1a:2a:
4f:33:51:dd:d3:df:c5:43:1d:e0:8e:fb:aa:60:9d:24:1a:c3:
4d:fc:a2:88:b0:06:24:2a:8d:e9:44:74:14:9f:71:f4:d1:4c:
05:c1:c8:f6:bc:ce:57:12:d6:47:09:cf:b5:f8:2a:0e:be:69:
f8:84:24:a3:24:0d:36:8d:f0:49:ac:89:35:32:34:83:9d:36:
44:ab:5d:76:75:1d:35:c2:24:6d:1d:72:0a:93:88:7a:54:12:
73:b2:8f:ce:90:81:7e:be:51:14:62:50:b8:60:a2:a8:fd:c6:
ad:35:84:30:cd:f0:85:8e:8f:33:e8:91:bc:4f:60:6e:e8:43:
62:d9:fd:6c:95:ad:98:35:f2:10:c9:1f:36:a0:f3:e8:2e:df:
1f:34:1d:28:af:16:11:68:79:bb:1b:7b:41:7f:7d:c3:b0:02:
ac:8a:59:d4
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUMi9NTWx/YbiUcdKva5c70BQYnVAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEFGNUREOTM5OEVCQzMzRUEwQ0FFMDQxRDdGNTJFRTJD
QUREMEFGQjAeFw0yNjA1MTIwMTUxMjJaFw0yNzA1MTEwMTU2MjJaMDMxMTAvBgNV
BAMTKEY4OTc3NTQ2N0Y0MjY4QTVDQzYxNTBFQUE3NjgxNTk2MTlEQ0JFODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ+RwSWwyFdUTaXsrJV2CTdD2d
/LXIqydTS7M3Etimo9XJ8JJ0a5EvrP8dEvJiNQppuiujV0ND15BXgfWhwTH53Pe8
deojBsTAeTpl7BaaQzFZXs5+jHkp/fO10nhE6P3+PHgbcxe2tnrIlO1UHj4O1uCs
CnA9M6zK8xJdpd2w7d9OUjgYjWQVc7In20ioK0HIzezTqxc1CXEAbYt/wFo9Rjzd
tI+05kOOSHdKb+IqSCwayWxw6NdxFM4j9XiEH48vdlN8G6TxB+nd3tyxMJUvMUzb
i29d7/U+qReX1qFP2zvyrroTJXPFpbDHtVt5MBSaQLMeS3Z2sf+3qXTCFsMVAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQU+Jd1Rn9CaKXMYVDqp2gVlhncvoYwHwYDVR0j
BBgwFoAUSvXdk5jrwz6gyuBB1/Uu4srdCvswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NjM5ODM4ODE4NzgyNDE0Ny8wLzRBRjVERDkzOThFQkMzM0VBMENBRTA0MUQ3RjUy
RUUyQ0FERDBBRkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNEFGNUREOTM5OEVCQzMzRUEwQ0FFMDQxRDdGNTJFRTJDQUREMEFGQi5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA2Mzk4Mzg4MTg3ODI0MTQ3LzAvMzIzMDMzMmUzMTM5
MzIyZTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNjMxMzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADLwAYwDQYJKoZIhvcNAQELBQADggEBAHglUqMLhy0SpHsjbhIm3s/EoUb2EW3G
Xt68M1CW8Wq58iMIrkoTRHf6xayyEjwxzWf8E0fFA65fSKMmXmSPpvUu4DW/j/nR
MMtATnvS9oPyH/bmpqCe0NgaKk8zUd3T38VDHeCO+6pgnSQaw038ooiwBiQqjelE
dBSfcfTRTAXByPa8zlcS1kcJz7X4Kg6+afiEJKMkDTaN8EmsiTUyNIOdNkSrXXZ1
HTXCJG0dcgqTiHpUEnOyj86QgX6+URRiULhgoqj9xq01hDDN8IWOjzPokbxPYG7o
Q2LZ/WyVrZg18hDJHzag8+gu3x80HSivFhFoebsbe0F/fcOwAqyKWdQ=
-----END CERTIFICATE-----
Generated at Wed May 13 21:31:38 2026 by rpki-client