
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714749953/0/3230332e38362e32342e302f32312d3231203d3e20313334373734.roa
File: 3230332e38362e32342e302f32312d3231203d3e20313334373734.roa (raw, json)
Hash identifier: Gx0RF4MR/MTf1oA626SK7F8XMwdk+bgKPzRfU9BS5w0=
Subject key identifier: 3A:86:1D:D0:B7:20:BE:22:1C:E2:BE:E4:EF:97:32:3E:F9:F0:B4:E4
Certificate issuer: /CN=9B87DFEBDCCDA813116988D4421B088404578168
Certificate serial: 693F84B5522CBCF8DFC35673C52F44AFE279F56A
Authority key identifier: 9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/3230332e38362e32342e302f32312d3231203d3e20313334373734.roa
Signing time: Thu 09 Apr 2026 08:13:33 +0000
ROA not before: Thu 09 Apr 2026 08:08:33 +0000
ROA not after: Thu 08 Apr 2027 08:13:33 +0000
asID: 134774
IP address blocks: 203.86.24.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 02:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:3f:84:b5:52:2c:bc:f8:df:c3:56:73:c5:2f:44:af:e2:79:f5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B87DFEBDCCDA813116988D4421B088404578168
Validity
Not Before: Apr 9 08:08:33 2026 GMT
Not After : Apr 8 08:13:33 2027 GMT
Subject: CN=3A861DD0B720BE221CE2BEE4EF97323EF9F0B4E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:8a:e6:58:58:7d:fe:e6:88:6c:b8:14:f5:
c3:85:dc:71:ee:a8:84:08:17:c4:e4:3b:86:6e:85:
44:69:78:bd:fc:82:9a:b2:f0:aa:10:9a:94:b1:5d:
a0:60:ae:86:68:38:86:47:b5:23:b1:ad:40:8d:93:
28:54:b7:5d:53:c0:b5:93:c0:87:69:1c:10:1e:f3:
9f:b7:59:d6:c6:7e:e1:b3:99:eb:34:04:a6:33:04:
cb:b5:85:46:24:75:7c:e1:d2:62:27:eb:34:bf:74:
0c:c4:df:2e:b9:91:79:29:df:4a:83:f5:ba:80:60:
59:fc:7b:83:ad:ef:6a:98:8c:f4:83:a7:94:bd:65:
3b:69:cf:cb:5e:f5:b6:cc:28:f0:ba:05:fa:bc:52:
99:46:4b:9a:2e:cd:a4:86:5e:82:16:93:e4:cc:4c:
c4:45:cc:ab:b3:8a:93:2e:d2:43:02:78:4a:7c:91:
1f:80:87:ed:f7:a5:07:b5:e3:43:39:ff:81:df:3f:
20:9f:a7:fd:c3:84:7d:f5:60:80:96:9d:0b:48:84:
60:20:94:31:47:4f:0f:9e:95:63:9d:42:e0:36:50:
c6:57:8b:c9:b5:b5:18:86:c8:d9:1e:fa:43:d4:db:
9a:85:41:bf:73:38:39:8d:c9:71:a2:1d:d5:65:19:
f5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:86:1D:D0:B7:20:BE:22:1C:E2:BE:E4:EF:97:32:3E:F9:F0:B4:E4
X509v3 Authority Key Identifier:
keyid:9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/3230332e38362e32342e302f32312d3231203d3e20313334373734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.86.24.0/21
Signature Algorithm: sha256WithRSAEncryption
83:cc:54:d5:44:0c:c9:83:04:55:f6:b6:6b:a8:b1:d8:56:f5:
5f:99:3b:ff:33:f2:66:40:90:e2:f4:b2:07:35:fc:31:4d:2a:
6d:75:8b:36:9c:88:07:9b:b6:17:0a:2c:68:e3:f4:96:78:f0:
eb:69:e8:e7:83:6e:eb:a6:fa:c0:4e:01:d1:02:95:fa:d9:bd:
45:f5:94:66:53:d6:a9:96:31:21:d8:a1:56:ff:9d:58:04:97:
fe:ef:24:2d:2f:26:c9:ac:f2:cb:cf:53:84:ca:ce:31:5e:a4:
d3:0e:e8:2b:04:b8:09:3a:c5:67:5e:a9:7b:44:8b:c1:98:7f:
12:92:2f:46:fd:58:9f:99:ee:4b:ed:1f:76:1c:64:8a:10:3e:
65:ed:d5:a9:e6:51:a7:9f:4b:fb:3c:7c:23:b4:f6:0a:38:03:
c9:2c:da:47:24:3b:40:9c:56:7d:25:69:8b:e1:c0:75:8d:af:
09:6b:20:61:b9:aa:ab:71:bb:79:cb:94:f2:a3:ca:1a:a1:e5:
cf:23:53:35:ed:34:9f:83:1f:0d:a0:af:8e:9d:21:0d:b1:ee:
85:bb:f4:33:e9:f8:f1:7a:6d:75:58:69:40:9c:8d:0e:d4:99:
54:06:63:f6:08:b9:76:d5:9c:8e:8a:8e:fb:71:9f:df:fd:fe:
5e:d7:eb:53
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:30:50 2026 by rpki-client