
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1119132680957460509/0/3230332e3139312e3134342e302f32312d3231203d3e2034313334.roa
File: 3230332e3139312e3134342e302f32312d3231203d3e2034313334.roa (raw, json)
Hash identifier: tGiD6c4OZZSCvdQK4ZpRZIKEL8iXBWQA8ghL+vZtpB4=
Subject key identifier: 24:99:5B:08:03:B5:01:83:C7:75:B4:A0:1C:AF:13:9B:98:C6:B8:6A
Certificate issuer: /CN=A911DD4C0000/serialNumber=75788E15351A624A2A528D3D451C027A72F6A7A6
Certificate serial: 507C1A0DAD1C1D09A480C213196EEA89545972F1
Authority key identifier: 75:78:8E:15:35:1A:62:4A:2A:52:8D:3D:45:1C:02:7A:72:F6:A7:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXiOFTUaYkoqUo09RRwCenL2p6Y.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1119132680957460509/0/3230332e3139312e3134342e302f32312d3231203d3e2034313334.roa
Signing time: Tue 30 Jun 2026 03:59:13 +0000
ROA not before: Tue 30 Jun 2026 03:54:13 +0000
ROA not after: Tue 29 Jun 2027 03:59:13 +0000
asID: 4134
IP address blocks: 203.191.144.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1119132680957460509/0/75788E15351A624A2A528D3D451C027A72F6A7A6.crl
rsync://rpki-rps.cnnic.cn/repo/A1119132680957460509/0/75788E15351A624A2A528D3D451C027A72F6A7A6.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXiOFTUaYkoqUo09RRwCenL2p6Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:7c:1a:0d:ad:1c:1d:09:a4:80:c2:13:19:6e:ea:89:54:59:72:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DD4C0000, serialNumber=75788E15351A624A2A528D3D451C027A72F6A7A6
Validity
Not Before: Jun 30 03:54:13 2026 GMT
Not After : Jun 29 03:59:13 2027 GMT
Subject: CN=24995B0803B50183C775B4A01CAF139B98C6B86A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fc:23:a8:70:cf:e3:0f:51:ce:de:f6:39:60:
1d:0c:57:13:e7:79:b3:09:54:15:2f:b2:c6:9d:3b:
9d:61:5a:28:9c:57:f7:f4:7f:ab:63:88:03:cb:d5:
2e:86:32:ad:f8:3c:51:e8:7b:09:10:ce:48:8b:75:
3a:c4:9c:74:a8:a8:c5:84:82:33:b2:bd:68:3f:30:
9d:3e:e5:52:cc:fc:d4:91:9d:7d:a4:3b:d4:e7:53:
a1:7c:16:0e:c3:7d:12:9b:5a:06:a4:cc:07:bd:94:
30:eb:2c:8c:eb:0e:77:3f:dd:3f:8a:ef:0a:34:af:
24:7b:e0:56:91:7a:39:01:1c:50:4c:c1:e9:1a:21:
d8:e3:00:fe:85:3d:ab:10:70:11:b1:1f:46:9a:41:
60:de:ba:83:0a:6a:e8:70:9a:6c:16:6e:31:d5:76:
64:6d:ed:b2:67:bb:93:47:bf:f3:64:8b:a3:2b:2f:
13:6d:98:47:ef:f3:3b:5a:a2:ee:43:81:0a:59:ab:
66:34:34:ac:d7:36:9d:2f:a8:9c:ad:bb:7a:c3:f9:
62:a9:84:38:e3:a4:b3:8f:1e:31:6b:e6:70:75:80:
5d:8a:f7:76:f7:bc:c7:d3:84:5f:69:74:c8:59:9c:
5e:1e:dc:65:38:d7:58:be:26:ae:12:55:7c:b4:c6:
d2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:99:5B:08:03:B5:01:83:C7:75:B4:A0:1C:AF:13:9B:98:C6:B8:6A
X509v3 Authority Key Identifier:
keyid:75:78:8E:15:35:1A:62:4A:2A:52:8D:3D:45:1C:02:7A:72:F6:A7:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1119132680957460509/0/75788E15351A624A2A528D3D451C027A72F6A7A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXiOFTUaYkoqUo09RRwCenL2p6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1119132680957460509/0/3230332e3139312e3134342e302f32312d3231203d3e2034313334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.191.144.0/21
Signature Algorithm: sha256WithRSAEncryption
69:2b:08:f4:24:b7:ce:ee:d5:a9:60:a5:1b:c3:a2:14:13:2b:
3c:45:a0:ad:c3:8c:d1:ac:54:48:82:28:c9:d5:b4:5a:25:3d:
d9:86:cb:45:4e:fd:f5:0a:7c:ed:be:15:9a:c2:ed:66:43:03:
28:ed:94:51:af:52:97:68:60:19:cf:77:19:43:bd:68:9b:dc:
d4:8b:46:81:1e:b2:e2:49:af:80:56:64:55:60:76:3b:a9:bb:
ae:f1:dc:88:e5:ed:a5:85:1b:fb:a0:eb:d3:d2:65:e1:16:e1:
5c:3b:8c:5e:fc:43:0a:63:bd:60:49:94:b1:32:d5:7d:3c:e7:
9f:f8:56:c1:19:1a:09:24:7a:16:a1:8b:9a:77:68:fb:51:59:
81:ee:aa:90:23:73:6b:8d:be:52:52:fb:81:50:44:8f:33:f9:
8c:a6:e4:ba:db:cd:2b:9b:4c:04:d0:00:3b:62:77:46:59:83:
fb:2e:b3:63:94:10:8f:9b:c2:dd:01:8d:2c:c6:a0:e8:da:9d:
a6:57:e2:dd:c8:4c:02:64:b2:f4:fd:d6:98:e5:71:66:6a:2f:
6e:2a:a1:c6:54:de:04:ed:c0:0e:59:06:3c:26:bf:2d:38:fe:
35:74:2f:05:98:b4:18:0f:a6:0e:b1:f2:18:c4:e4:c4:dc:aa:
7b:67:58:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:39:31 2026 by rpki-client