
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106489019321024529/0/3132322e3131352e302e302f32302d3230203d3e203233373234.roa
File: 3132322e3131352e302e302f32302d3230203d3e203233373234.roa (raw, json)
Hash identifier: DI1kyNXEr04OL+sHpbhHy+X6wizP6k5iogstAkRv4Ro=
Subject key identifier: 6C:8D:55:88:EA:34:E7:9C:FD:68:D1:19:79:AA:71:06:11:D6:C6:AF
Certificate issuer: /CN=BD26FB8F2F9D7A4F51682070766EBD8D2306733B
Certificate serial: 2A85CC50B8BA1BB9EFDEBB3484BE7622F5742173
Authority key identifier: BD:26:FB:8F:2F:9D:7A:4F:51:68:20:70:76:6E:BD:8D:23:06:73:3B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/3132322e3131352e302e302f32302d3230203d3e203233373234.roa
Signing time: Tue 12 May 2026 08:34:54 +0000
ROA not before: Tue 12 May 2026 08:29:54 +0000
ROA not after: Tue 11 May 2027 08:34:54 +0000
asID: 23724
IP address blocks: 122.115.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl
rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:85:cc:50:b8:ba:1b:b9:ef:de:bb:34:84:be:76:22:f5:74:21:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD26FB8F2F9D7A4F51682070766EBD8D2306733B
Validity
Not Before: May 12 08:29:54 2026 GMT
Not After : May 11 08:34:54 2027 GMT
Subject: CN=6C8D5588EA34E79CFD68D11979AA710611D6C6AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:83:56:77:05:54:05:55:cb:fd:e0:f1:3e:1d:
43:b2:2a:30:74:b6:52:90:65:7c:dc:87:f6:b2:9e:
84:2e:14:c3:32:02:cb:2a:2b:60:cf:eb:4a:69:3c:
8f:77:a7:e6:42:01:cd:7c:eb:40:e4:bc:0c:fe:2b:
f9:8b:d6:9c:14:53:eb:71:4d:67:2e:12:a2:68:9c:
13:65:53:80:e3:6b:8e:c1:4f:97:fe:83:54:8a:ed:
94:cc:b5:37:d2:b0:26:dd:76:7b:47:a5:d2:56:f3:
9d:c3:6d:71:01:07:b6:4b:d6:88:21:5e:2a:6a:89:
3e:ed:80:df:c6:0f:62:4a:2c:7d:1c:25:c6:da:83:
45:7a:eb:b2:c0:de:a8:f8:8b:be:73:24:08:d6:a2:
7e:86:ed:65:d0:ca:f3:fa:9e:b3:9d:3e:5a:7a:72:
83:d3:c7:18:28:d5:2e:06:f8:a9:16:7e:4f:2f:15:
c8:37:ca:5f:33:c0:5d:10:36:81:73:12:83:92:e0:
13:94:29:ba:e2:30:33:28:9e:e0:a1:a3:16:4b:2d:
30:26:fd:73:59:df:d9:44:d0:bd:43:61:0c:ff:32:
fd:bb:98:73:41:07:53:6c:95:31:80:b3:7e:5d:14:
4c:51:a5:cc:25:91:af:f2:82:36:f5:da:e2:17:43:
e0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8D:55:88:EA:34:E7:9C:FD:68:D1:19:79:AA:71:06:11:D6:C6:AF
X509v3 Authority Key Identifier:
keyid:BD:26:FB:8F:2F:9D:7A:4F:51:68:20:70:76:6E:BD:8D:23:06:73:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/3132322e3131352e302e302f32302d3230203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.115.0.0/20
Signature Algorithm: sha256WithRSAEncryption
8e:83:86:e7:4f:d8:5e:60:21:29:98:79:3c:99:e3:64:1d:fd:
83:71:b5:bb:25:15:ff:e8:4e:5a:a5:0a:32:2f:c7:cd:5b:7f:
a9:51:8a:14:25:9f:5c:fb:aa:b4:c8:a5:ab:85:b1:38:3f:33:
ef:72:a7:95:3b:cc:96:bf:ec:b9:f3:2e:16:15:09:9f:f0:59:
e1:50:fd:de:fc:82:37:7c:b5:e6:2c:44:4d:71:9b:e2:19:f0:
6e:5e:e3:8e:a2:15:be:d7:4e:43:8f:77:80:e8:70:4b:85:15:
ee:b8:03:d0:8c:e8:88:f2:85:78:a6:c2:d1:96:1d:f5:1c:f0:
67:2a:1d:5c:c4:73:a2:3b:fd:f8:85:5d:c1:87:11:62:31:2d:
0c:bc:b9:ac:e9:ff:86:00:4e:f5:0d:e9:bc:4a:6c:0b:9e:13:
21:e2:18:7d:e2:49:54:e7:c3:88:f1:94:30:7e:e6:06:78:33:
17:64:90:63:b9:8d:5e:10:d2:e9:f0:ae:97:e7:bb:d1:71:2f:
90:92:39:ba:0a:df:87:dd:14:6a:08:2e:72:c7:27:88:fd:8c:
44:60:1d:da:87:68:57:95:12:5b:5c:48:c1:1b:4f:8b:d8:89:
a1:2a:58:19:e1:a8:39:bd:77:22:72:8c:00:77:aa:6b:31:5f:
2f:53:43:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:48:47 2026 by rpki-client