
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3230332e3139322e392e302f32342d3234203d3e2034363131.roa
File: 3230332e3139322e392e302f32342d3234203d3e2034363131.roa (raw, json)
Hash identifier: Uy+BapU0I48WC0bWQ2ZydXi48JznYrjW62PXNe53HUM=
Subject key identifier: 6C:87:00:8C:AA:C7:FD:6A:E0:2B:29:9C:39:CF:97:04:AD:F9:8D:AB
Certificate issuer: /CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB
Certificate serial: 1F33D107D8FBF93539B7E62DD077469EB0700E7C
Authority key identifier: 4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3230332e3139322e392e302f32342d3234203d3e2034363131.roa
Signing time: Tue 12 May 2026 01:56:22 +0000
ROA not before: Tue 12 May 2026 01:51:22 +0000
ROA not after: Tue 11 May 2027 01:56:22 +0000
asID: 4611
IP address blocks: 203.192.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl
rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:33:d1:07:d8:fb:f9:35:39:b7:e6:2d:d0:77:46:9e:b0:70:0e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB
Validity
Not Before: May 12 01:51:22 2026 GMT
Not After : May 11 01:56:22 2027 GMT
Subject: CN=6C87008CAAC7FD6AE02B299C39CF9704ADF98DAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8a:6e:c9:9e:c7:eb:3c:3f:ba:75:aa:79:04:
0a:56:5b:c2:f5:e1:1d:cd:cf:8b:89:56:dd:27:c9:
0f:b6:50:ee:d6:61:3d:3b:bc:5a:6a:17:4d:33:60:
42:48:cd:c9:37:0e:c4:2e:9c:8a:39:15:46:c5:c1:
23:09:2a:48:b6:74:5c:6e:63:10:1d:62:ff:83:9d:
a6:fc:2e:7e:57:cb:bc:78:00:8b:16:7d:3d:94:79:
02:0b:0c:21:b2:7e:ab:8e:ab:c5:ae:e1:85:66:32:
48:e6:09:34:6b:5b:01:c9:fe:0b:bd:f6:44:ee:dc:
4b:a1:eb:a2:15:7e:f1:e4:e2:c0:a2:88:d8:56:9f:
da:9e:12:34:77:41:21:52:7c:54:80:9c:e0:f7:87:
a6:82:f8:75:3f:c2:ab:a9:a4:f2:1e:b4:31:b7:58:
77:28:5c:74:f2:93:ac:98:5b:17:87:cc:a1:70:95:
af:3f:56:fe:7b:c5:c5:ae:f8:b0:fb:7a:d5:18:0c:
fd:21:05:33:07:83:9f:e9:8c:b4:0e:8b:c6:33:bc:
b2:b0:fe:3f:ed:71:3f:8d:c5:3d:0f:ac:91:33:ef:
8c:ff:15:5b:81:4b:6d:fe:3c:c4:04:80:ee:2a:5f:
de:ec:10:fe:ca:73:6f:27:40:2e:cb:27:ca:7f:eb:
cb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:87:00:8C:AA:C7:FD:6A:E0:2B:29:9C:39:CF:97:04:AD:F9:8D:AB
X509v3 Authority Key Identifier:
keyid:4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3230332e3139322e392e302f32342d3234203d3e2034363131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.192.9.0/24
Signature Algorithm: sha256WithRSAEncryption
79:d3:9f:8f:67:e3:fa:e3:f2:ae:75:af:c8:6b:4d:92:1a:e4:
0a:2f:2b:ac:70:ef:68:34:e3:c4:2e:e9:49:c5:d0:ae:f2:59:
7b:7c:7e:2a:ee:b8:0c:05:c0:ec:f5:5e:f2:14:fd:ef:30:f4:
13:b2:e9:2f:2a:b2:2c:af:8b:a4:a9:8a:38:86:ca:f2:f3:9c:
a7:2f:17:b5:32:97:55:06:75:dd:6f:7e:09:aa:c4:ff:e5:ce:
53:c9:6a:3e:57:03:8b:a8:59:a9:99:34:4f:dc:54:ea:05:cf:
78:a6:40:b8:1c:65:77:32:23:04:76:c6:56:18:83:f6:d4:73:
0f:37:a3:e0:ef:2f:82:77:9a:82:7f:01:cb:0a:16:e4:09:a5:
1a:5a:ff:22:c9:2d:b1:20:d3:3f:c1:22:15:74:2a:b4:39:ef:
87:4c:e8:82:89:5d:42:03:56:1c:61:50:2b:cb:5e:6b:5e:71:
0e:39:ff:35:a8:5a:9b:b0:23:98:c6:47:b6:65:2c:95:1c:40:
f4:68:11:da:e4:58:2a:00:0a:99:06:c1:8d:37:b2:2c:67:ae:
55:a6:13:97:f3:68:f8:89:29:c5:c2:d7:27:e9:aa:5c:aa:c4:
52:57:cd:21:47:66:c1:21:b5:ff:09:11:ca:cf:7b:64:2e:fe:
cf:54:12:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:31:37 2026 by rpki-client