
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106476310596681747/0/3230322e3136382e38302e302f32322d3232203d3e2030.roa
File: 3230322e3136382e38302e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier: IqqBQckHO5E/yVvuNZgJNvWULCHHlM9yFYbXo6IS9E8=
Subject key identifier: 27:1D:70:35:3B:7D:C3:77:CC:25:ED:43:66:FC:E9:33:3B:0B:B2:8F
Certificate issuer: /CN=C82C40F45E62C70EAF5B663FC69919FEE497C232
Certificate serial: 112A89B2338B88A9CD2ACC6E96F190E89E5C000D
Authority key identifier: C8:2C:40:F4:5E:62:C7:0E:AF:5B:66:3F:C6:99:19:FE:E4:97:C2:32
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82C40F45E62C70EAF5B663FC69919FEE497C232.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106476310596681747/0/3230322e3136382e38302e302f32322d3232203d3e2030.roa
Signing time: Wed 13 May 2026 01:20:45 +0000
ROA not before: Wed 13 May 2026 01:15:45 +0000
ROA not after: Wed 12 May 2027 01:20:45 +0000
asID: 0
IP address blocks: 202.168.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106476310596681747/0/C82C40F45E62C70EAF5B663FC69919FEE497C232.crl
rsync://rpki-rps.cnnic.cn/repo/A1106476310596681747/0/C82C40F45E62C70EAF5B663FC69919FEE497C232.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82C40F45E62C70EAF5B663FC69919FEE497C232.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:37:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:2a:89:b2:33:8b:88:a9:cd:2a:cc:6e:96:f1:90:e8:9e:5c:00:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C82C40F45E62C70EAF5B663FC69919FEE497C232
Validity
Not Before: May 13 01:15:45 2026 GMT
Not After : May 12 01:20:45 2027 GMT
Subject: CN=271D70353B7DC377CC25ED4366FCE9333B0BB28F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a9:87:08:ba:f3:f4:61:a2:65:e1:6b:62:59:
95:88:3d:71:c2:6c:3f:35:71:b9:0b:b0:81:4d:c9:
58:11:da:23:c3:1f:28:cf:a1:61:c0:7e:69:45:aa:
b8:98:d4:68:90:a9:70:e3:9c:53:a9:3b:f0:31:4c:
3c:2b:65:20:96:77:3b:3d:49:b5:19:aa:99:e9:4d:
02:82:25:6a:cf:0d:cf:40:fd:5d:a8:53:12:62:50:
8a:3d:e3:91:16:1f:ba:fa:07:76:d3:be:12:28:f1:
b2:90:a5:fe:e1:00:c2:64:7e:14:83:f4:28:42:1a:
3b:58:9d:26:df:e7:fe:12:75:39:73:e6:c7:7a:63:
18:9a:6c:9e:60:92:5c:91:b1:3d:58:df:d5:21:54:
31:76:b3:18:3b:58:5a:97:ef:2c:7f:5b:fc:b2:b9:
70:9d:c9:81:ec:c7:4f:66:6c:ee:af:04:60:fe:26:
59:37:2d:2f:d6:dd:a0:67:51:d3:ed:c2:23:72:a2:
6d:42:9b:e8:ef:3c:9c:cb:88:5d:5e:e0:69:ee:ed:
66:42:14:86:be:e6:2d:43:44:19:a7:cf:30:ab:f6:
b9:f3:24:cb:e8:db:44:1d:3b:fc:1a:14:81:14:3d:
a6:51:4b:f9:57:be:b6:48:fa:6e:d0:c2:b2:1d:05:
ec:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1D:70:35:3B:7D:C3:77:CC:25:ED:43:66:FC:E9:33:3B:0B:B2:8F
X509v3 Authority Key Identifier:
keyid:C8:2C:40:F4:5E:62:C7:0E:AF:5B:66:3F:C6:99:19:FE:E4:97:C2:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106476310596681747/0/C82C40F45E62C70EAF5B663FC69919FEE497C232.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82C40F45E62C70EAF5B663FC69919FEE497C232.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106476310596681747/0/3230322e3136382e38302e302f32322d3232203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.168.80.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:b7:43:89:68:80:a5:ff:a7:72:2a:96:55:46:07:f4:d3:d0:
eb:3c:7a:34:4f:37:43:d5:d5:ff:e1:87:fe:ad:12:ba:c3:da:
27:5a:bc:5c:d1:a4:36:5d:6e:05:83:37:78:06:07:6d:4c:73:
ff:c8:92:c2:d9:e8:53:1b:44:32:0b:2f:06:ef:26:2e:73:22:
4c:e3:77:81:4e:44:a2:44:14:f5:8f:ef:ff:f6:ef:5d:ca:67:
8f:c8:d8:23:2b:10:15:d5:8b:50:8d:50:27:f1:a7:5b:06:bb:
25:6d:2a:21:05:31:de:49:75:5d:59:1b:50:39:d0:91:8c:70:
31:ad:dd:b1:e3:96:68:0d:7f:0e:c8:bc:6c:5d:74:89:0a:0c:
d6:dc:4b:97:5a:16:89:4b:f0:06:d3:94:9e:c6:0c:37:37:e8:
9f:89:18:5c:ed:b5:8b:f8:27:8a:34:a9:93:59:8b:f5:83:ea:
52:4e:80:ea:0d:00:36:96:1d:1b:83:f2:f1:b8:50:a3:0d:22:
0b:3f:a1:47:35:8a:34:73:03:f7:c0:f6:10:3e:37:56:b4:69:
bd:99:a3:de:54:0e:e7:b9:df:da:57:46:58:a1:4b:c6:6b:28:
96:f8:33:27:d2:bd:67:89:e1:57:40:c1:cc:45:cd:2a:ed:6b:
d0:5b:50:4d
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIUESqJsjOLiKnNKsxulvGQ6J5cAA0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzgyQzQwRjQ1RTYyQzcwRUFGNUI2NjNGQzY5OTE5RkVF
NDk3QzIzMjAeFw0yNjA1MTMwMTE1NDVaFw0yNzA1MTIwMTIwNDVaMDMxMTAvBgNV
BAMTKDI3MUQ3MDM1M0I3REMzNzdDQzI1RUQ0MzY2RkNFOTMzM0IwQkIyOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAqYcIuvP0YaJl4WtiWZWIPXHC
bD81cbkLsIFNyVgR2iPDHyjPoWHAfmlFqriY1GiQqXDjnFOpO/AxTDwrZSCWdzs9
SbUZqpnpTQKCJWrPDc9A/V2oUxJiUIo945EWH7r6B3bTvhIo8bKQpf7hAMJkfhSD
9ChCGjtYnSbf5/4SdTlz5sd6YxiabJ5gklyRsT1Y39UhVDF2sxg7WFqX7yx/W/yy
uXCdyYHsx09mbO6vBGD+Jlk3LS/W3aBnUdPtwiNyom1Cm+jvPJzLiF1e4Gnu7WZC
FIa+5i1DRBmnzzCr9rnzJMvo20QdO/waFIEUPaZRS/lXvrZI+m7QwrIdBeyDAgMB
AAGjggILMIICBzAdBgNVHQ4EFgQUJx1wNTt9w3fMJe1DZvzpMzsLso8wHwYDVR0j
BBgwFoAUyCxA9F5ixw6vW2Y/xpkZ/uSXwjIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NjQ3NjMxMDU5NjY4MTc0Ny8wL0M4MkM0MEY0NUU2MkM3MEVBRjVCNjYzRkM2OTkx
OUZFRTQ5N0MyMzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzgyQzQwRjQ1RTYyQzcwRUFGNUI2NjNGQzY5OTE5RkVFNDk3QzIzMi5jZXIw
gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA2NDc2MzEwNTk2NjgxNzQ3LzAvMzIzMDMyMmUzMTM2
MzgyZTM4MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsqo
UDANBgkqhkiG9w0BAQsFAAOCAQEAa7dDiWiApf+nciqWVUYH9NPQ6zx6NE83Q9XV
/+GH/q0SusPaJ1q8XNGkNl1uBYM3eAYHbUxz/8iSwtnoUxtEMgsvBu8mLnMiTON3
gU5EokQU9Y/v//bvXcpnj8jYIysQFdWLUI1QJ/GnWwa7JW0qIQUx3kl1XVkbUDnQ
kYxwMa3dseOWaA1/Dsi8bF10iQoM1txLl1oWiUvwBtOUnsYMNzfon4kYXO21i/gn
ijSpk1mL9YPqUk6A6g0ANpYdG4Py8bhQow0iCz+hRzWKNHMD98D2ED43VrRpvZmj
3lQO57nf2ldGWKFLxmsolvgzJ9K9Z4nhV0DBzEXNKu1r0FtQTQ==
-----END CERTIFICATE-----
Generated at Wed May 13 21:31:27 2026 by rpki-client