
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230322e3137322e372e302f32342d3234203d3e20313531323531.roa
File: 3230322e3137322e372e302f32342d3234203d3e20313531323531.roa (raw, json)
Hash identifier: XU32qEfDo85EorqSryLTBLXpsTPsVSeLnNoBf3B27Fc=
Subject key identifier: C0:6F:E9:D4:1A:28:9C:FD:B2:33:13:B6:1D:B3:14:4C:88:27:4E:DE
Certificate issuer: /CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
Certificate serial: 5894FC8E8F0F7BC5403A2E57335DEFAB309954B6
Authority key identifier: 13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230322e3137322e372e302f32342d3234203d3e20313531323531.roa
Signing time: Tue 26 May 2026 08:57:12 +0000
ROA not before: Tue 26 May 2026 08:52:12 +0000
ROA not after: Tue 25 May 2027 08:57:12 +0000
asID: 151251
IP address blocks: 202.172.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 07:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:94:fc:8e:8f:0f:7b:c5:40:3a:2e:57:33:5d:ef:ab:30:99:54:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
Validity
Not Before: May 26 08:52:12 2026 GMT
Not After : May 25 08:57:12 2027 GMT
Subject: CN=C06FE9D41A289CFDB23313B61DB3144C88274EDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:26:7d:44:b4:5c:d0:37:7f:eb:7b:a1:9c:9a:
b0:f8:da:79:24:de:48:8b:17:4f:99:7c:66:e2:eb:
a3:96:da:e6:1d:83:d2:cf:5c:7d:17:00:7a:19:86:
b9:6d:06:47:45:d3:ae:21:bf:bf:dd:1b:09:d7:0f:
42:99:c5:4c:4f:d7:fd:0b:1d:95:a0:03:c9:ae:04:
a5:06:66:44:33:ef:41:62:14:99:9a:91:3c:57:2a:
c5:5a:77:f7:74:dd:62:eb:25:1a:eb:6d:b4:af:f4:
7d:60:ec:96:ab:51:e2:bb:93:35:42:c2:91:e2:52:
c2:6a:5b:77:23:bd:c5:9a:59:8e:69:47:f1:62:89:
2f:5a:04:c9:f3:ff:17:08:af:c3:2d:68:ec:6e:c8:
e1:90:29:65:ce:7b:4c:9e:03:17:8d:81:53:74:3c:
94:9a:28:e6:20:4e:12:f6:6b:e4:f2:83:31:f1:15:
f8:1c:09:5c:6a:d8:85:6e:ef:9a:ce:0e:1c:a7:e5:
9d:cd:79:7d:2a:e7:3e:f7:9a:f2:c5:d5:91:a8:9e:
b8:8d:15:fe:80:3d:2d:9a:03:d3:03:48:f9:7c:49:
a1:d9:ac:cd:24:d6:f4:f7:f4:6d:fe:40:71:f8:c5:
0f:47:43:26:50:8f:12:73:a7:59:a3:91:42:0a:ea:
2e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6F:E9:D4:1A:28:9C:FD:B2:33:13:B6:1D:B3:14:4C:88:27:4E:DE
X509v3 Authority Key Identifier:
keyid:13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230322e3137322e372e302f32342d3234203d3e20313531323531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.172.7.0/24
Signature Algorithm: sha256WithRSAEncryption
87:03:56:e6:24:4c:3d:b3:d7:45:e5:d1:11:3f:c6:15:a8:f8:
7b:42:38:a1:36:1a:17:7e:10:0b:a1:a4:03:bf:ed:7a:03:a6:
c6:e3:c4:c2:a9:98:ce:e4:b9:85:32:1e:1d:e6:90:a6:5d:47:
6f:4d:be:25:4d:e2:c1:8c:56:87:5e:00:ab:6c:cb:07:e2:16:
3d:2d:49:cc:70:d9:e5:24:a9:5a:b2:b9:f6:f0:4a:19:31:ed:
a4:c5:d7:1b:03:43:e3:1f:94:ac:1b:08:28:5b:00:be:96:86:
df:a1:1d:0e:67:d7:5a:be:bb:de:fd:7a:c9:7e:5b:ba:c0:5c:
d4:fa:66:8a:48:3d:4d:2d:0e:e4:4d:2b:4d:55:d4:99:9a:11:
f5:0a:5e:cc:2b:8a:c4:4a:fa:a8:33:03:f4:73:74:25:8b:65:
25:97:db:c9:e7:86:49:4f:4b:46:4c:63:9d:e9:a9:61:04:82:
fb:bb:78:fe:d9:50:bf:13:9d:7f:d0:8c:17:52:58:0d:dd:86:
99:ac:1d:43:79:38:3c:74:9f:74:d5:fa:91:c5:86:f8:46:78:
81:f3:7b:14:f1:24:8a:2d:4d:24:8a:43:f3:4c:02:53:d1:f7:
0a:8a:3d:bd:b2:3a:de:ca:bd:eb:0c:ff:95:ec:85:6f:77:5b:
f1:2f:60:dc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:56:56 2026 by rpki-client