
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106489019321024529/0/3132322e3131352e3232342e302f32312d3231203d3e203233373234.roa
File: 3132322e3131352e3232342e302f32312d3231203d3e203233373234.roa (raw, json)
Hash identifier: XKCCKHOJXdoTfyJSt90L9RE9US1lrhykFNrY4HPiUNA=
Subject key identifier: 67:47:21:64:E5:D9:65:86:6F:02:E5:D6:95:40:20:8C:3B:D2:21:09
Certificate issuer: /CN=BD26FB8F2F9D7A4F51682070766EBD8D2306733B
Certificate serial: 16D0E32B400A6962469290421AF7DBA410FA58A9
Authority key identifier: BD:26:FB:8F:2F:9D:7A:4F:51:68:20:70:76:6E:BD:8D:23:06:73:3B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/3132322e3131352e3232342e302f32312d3231203d3e203233373234.roa
Signing time: Tue 12 May 2026 08:34:54 +0000
ROA not before: Tue 12 May 2026 08:29:54 +0000
ROA not after: Tue 11 May 2027 08:34:54 +0000
asID: 23724
IP address blocks: 122.115.224.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl
rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:d0:e3:2b:40:0a:69:62:46:92:90:42:1a:f7:db:a4:10:fa:58:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD26FB8F2F9D7A4F51682070766EBD8D2306733B
Validity
Not Before: May 12 08:29:54 2026 GMT
Not After : May 11 08:34:54 2027 GMT
Subject: CN=67472164E5D965866F02E5D69540208C3BD22109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c3:72:8e:a8:77:b7:2a:a8:9f:a2:34:cb:2f:
bd:73:bf:7e:f1:8b:6f:0c:20:68:bb:50:d1:5e:34:
3a:aa:3a:01:26:5a:f5:79:17:41:41:fd:36:9f:37:
7d:43:18:39:0f:3e:66:a4:d3:01:bf:c5:83:0a:21:
f9:17:a9:a4:2c:2a:7c:c0:ba:58:22:21:2c:65:0d:
68:e1:f2:56:53:6f:e0:ea:dc:55:6f:2f:66:90:e2:
f4:b2:3a:1f:48:f5:bc:39:27:e9:97:b9:5b:5e:58:
b4:1e:51:7e:eb:ed:2f:a4:32:0f:df:14:c7:ee:89:
0f:6a:f9:58:77:62:1a:a1:61:9d:bf:e8:1a:9c:a1:
7a:ff:4d:1f:7f:02:37:22:96:8e:ee:65:c5:86:19:
72:4b:5a:fb:c9:cb:23:82:83:2c:73:27:a6:d0:f0:
5c:07:e6:df:b2:aa:14:5d:f2:ab:45:42:94:69:9d:
e6:26:6a:e7:09:8e:5e:ee:37:cc:e0:53:23:8d:a4:
e7:01:60:5b:64:6c:6b:0b:07:f4:fc:ec:05:ea:8c:
5f:79:98:58:55:ca:60:f2:43:5e:0b:b4:9e:ee:0e:
d7:a1:17:7f:be:48:ca:07:d9:01:c9:af:70:69:cf:
2d:72:d5:03:8d:85:ac:a3:c7:9b:01:d8:b4:ae:51:
b4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:47:21:64:E5:D9:65:86:6F:02:E5:D6:95:40:20:8C:3B:D2:21:09
X509v3 Authority Key Identifier:
keyid:BD:26:FB:8F:2F:9D:7A:4F:51:68:20:70:76:6E:BD:8D:23:06:73:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/3132322e3131352e3232342e302f32312d3231203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.115.224.0/21
Signature Algorithm: sha256WithRSAEncryption
83:6e:a5:e1:cb:96:62:94:80:1e:9a:25:3c:0a:d3:f0:db:18:
ad:c5:a9:e3:1c:6f:c9:fc:e7:d1:0a:18:66:00:26:40:50:82:
e1:aa:dd:48:2d:b1:b8:e0:c4:75:e0:79:48:28:f9:a6:a0:c9:
04:a5:ff:3d:d8:a0:8e:48:b8:25:fb:74:78:df:e9:3d:aa:fb:
fc:7d:22:51:d3:1b:1b:28:90:53:c9:b7:86:da:34:82:28:5d:
99:7c:95:98:f5:49:c0:9e:5a:c4:86:a7:b9:d7:3e:de:14:dc:
8c:7a:89:b8:a6:84:67:db:d8:73:d2:53:ba:51:d9:f5:d6:64:
85:a7:6a:b6:ac:83:2c:1c:cd:1b:e7:cc:30:cb:63:0b:9c:a2:
79:fc:56:a6:74:99:72:5a:84:30:ae:42:df:67:b9:c3:a9:25:
da:f6:ef:86:14:7a:77:75:cb:e4:2a:4b:45:7c:ad:47:11:74:
d2:de:78:21:2a:06:ad:c9:3b:61:61:40:03:f2:11:b0:ee:fd:
78:03:b0:28:f4:ea:88:03:52:03:3d:ef:61:ec:8f:7a:dc:94:
12:43:e3:31:0b:66:77:49:db:46:5a:e0:ce:d1:bf:2c:ce:be:
e1:7f:c3:98:95:eb:82:70:3d:a4:ab:b9:e8:a0:98:89:42:d0:
e3:a5:e3:01
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUFtDjK0AKaWJGkpBCGvfbpBD6WKkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQyNkZCOEYyRjlEN0E0RjUxNjgyMDcwNzY2RUJEOEQy
MzA2NzMzQjAeFw0yNjA1MTIwODI5NTRaFw0yNzA1MTEwODM0NTRaMDMxMTAvBgNV
BAMTKDY3NDcyMTY0RTVEOTY1ODY2RjAyRTVENjk1NDAyMDhDM0JEMjIxMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzw3KOqHe3KqifojTLL71zv37x
i28MIGi7UNFeNDqqOgEmWvV5F0FB/TafN31DGDkPPmak0wG/xYMKIfkXqaQsKnzA
ulgiISxlDWjh8lZTb+Dq3FVvL2aQ4vSyOh9I9bw5J+mXuVteWLQeUX7r7S+kMg/f
FMfuiQ9q+Vh3YhqhYZ2/6BqcoXr/TR9/Ajcilo7uZcWGGXJLWvvJyyOCgyxzJ6bQ
8FwH5t+yqhRd8qtFQpRpneYmaucJjl7uN8zgUyONpOcBYFtkbGsLB/T87AXqjF95
mFhVymDyQ14LtJ7uDtehF3++SMoH2QHJr3Bpzy1y1QONhayjx5sB2LSuUbR7AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUZ0chZOXZZYZvAuXWlUAgjDvSIQkwHwYDVR0j
BBgwFoAUvSb7jy+dek9RaCBwdm69jSMGczswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NjQ4OTAxOTMyMTAyNDUyOS8wL0JEMjZGQjhGMkY5RDdBNEY1MTY4MjA3MDc2NkVC
RDhEMjMwNjczM0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQkQyNkZCOEYyRjlEN0E0RjUxNjgyMDcwNzY2RUJEOEQyMzA2NzMzQi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMDY0ODkwMTkzMjEwMjQ1MjkvMC8zMTMyMzIyZTMx
MzEzNTJlMzIzMjM0MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzMzM3MzIzNC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEA3pz4DANBgkqhkiG9w0BAQsFAAOCAQEAg26l4cuWYpSAHpolPArT
8NsYrcWp4xxvyfzn0QoYZgAmQFCC4ardSC2xuODEdeB5SCj5pqDJBKX/Pdigjki4
Jft0eN/pPar7/H0iUdMbGyiQU8m3hto0gihdmXyVmPVJwJ5axIanudc+3hTcjHqJ
uKaEZ9vYc9JTulHZ9dZkhadqtqyDLBzNG+fMMMtjC5yiefxWpnSZclqEMK5C32e5
w6kl2vbvhhR6d3XL5CpLRXytRxF00t54ISoGrck7YWFAA/IRsO79eAOwKPTqiANS
Az3vYeyPetyUEkPjMQtmd0nbRlrgztG/LM6+4X/DmJXrgnA9pKu56KCYiULQ46Xj
AQ==
-----END CERTIFICATE-----
Generated at Wed May 13 09:57:40 2026 by rpki-client