
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230322e3137332e362e302f32342d3234203d3e20313531323531.roa
File: 3230322e3137332e362e302f32342d3234203d3e20313531323531.roa (raw, json)
Hash identifier: CWFmQv65CxvUZcuHEzxOtvNzP1xhd2hPja2Ei26zyso=
Subject key identifier: 66:76:76:59:2B:9D:27:75:94:57:CF:B4:27:D2:7E:3A:E2:41:48:13
Certificate issuer: /CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
Certificate serial: 09B048BA3AEF5EFD0C6172678D7B205649BF2942
Authority key identifier: 13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230322e3137332e362e302f32342d3234203d3e20313531323531.roa
Signing time: Tue 26 May 2026 08:57:12 +0000
ROA not before: Tue 26 May 2026 08:52:12 +0000
ROA not after: Tue 25 May 2027 08:57:12 +0000
asID: 151251
IP address blocks: 202.173.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 07:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:b0:48:ba:3a:ef:5e:fd:0c:61:72:67:8d:7b:20:56:49:bf:29:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
Validity
Not Before: May 26 08:52:12 2026 GMT
Not After : May 25 08:57:12 2027 GMT
Subject: CN=667676592B9D27759457CFB427D27E3AE2414813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a2:51:8d:18:04:47:ce:f0:fe:e4:eb:b9:f9:
4a:17:d1:98:31:e5:fa:1d:54:11:10:5c:fd:72:70:
c1:c7:92:f3:19:7e:4d:aa:88:e9:61:41:02:3a:53:
52:42:b1:95:e2:63:ed:44:3d:8d:8a:56:08:47:17:
e8:01:d8:7b:b9:ca:94:f4:90:24:7b:46:64:78:0e:
8b:34:79:be:87:98:f7:41:87:f1:8e:35:ad:c2:da:
0b:85:67:1b:5b:42:83:c6:f8:53:bc:ae:a4:81:e4:
69:27:eb:69:71:a6:68:2e:41:bc:c8:9f:29:1f:0f:
b3:17:05:ea:5d:c7:ff:cd:54:a1:2c:2e:7a:73:f1:
01:71:01:ee:92:7b:4e:b9:fb:33:48:d7:d3:66:51:
33:b3:83:21:7d:7e:ff:02:aa:fb:80:da:db:7e:4f:
5f:51:54:82:c3:95:7e:08:82:93:af:0f:c9:7e:d2:
48:11:a7:40:3c:34:1a:60:89:95:70:9d:b1:ae:d1:
94:90:f1:dd:af:28:b3:46:b7:21:87:c3:5e:05:f0:
81:ff:cc:d7:f6:74:5a:b5:72:ca:72:a1:5f:4f:6a:
0c:a7:e0:8a:d5:4e:1c:59:b2:b7:cb:eb:ec:df:f4:
43:aa:60:63:8a:75:d3:a8:fb:b7:42:ef:50:0a:76:
4a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:76:76:59:2B:9D:27:75:94:57:CF:B4:27:D2:7E:3A:E2:41:48:13
X509v3 Authority Key Identifier:
keyid:13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230322e3137332e362e302f32342d3234203d3e20313531323531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.173.6.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:11:73:ae:61:cf:3a:f4:90:05:df:72:d5:ce:17:5c:32:f6:
47:53:b0:d3:90:54:8e:8e:ba:93:c4:11:4a:dd:38:04:19:b8:
f8:9d:1f:8c:0b:7e:85:90:97:b1:00:82:57:1b:46:9c:74:61:
7d:39:c8:0d:13:ca:f1:a6:72:5b:90:b8:1a:86:03:e5:52:22:
f6:59:cf:c3:a8:c4:f5:b7:1c:79:fd:8e:53:a8:c3:d0:10:55:
0a:13:52:bb:1f:8d:55:e5:33:69:cb:6c:da:56:1a:85:d1:df:
53:14:a5:5f:95:01:3d:29:03:86:ca:20:57:d1:ad:46:1c:c5:
59:ea:27:27:82:a5:09:13:a0:e2:df:a6:c4:56:54:b5:1d:7a:
8e:3f:75:c7:e9:51:f7:96:63:4c:37:f0:74:ab:96:00:2e:7c:
11:b2:ba:3a:b1:06:7e:fc:86:9c:cb:9a:6f:84:82:83:18:e4:
16:87:0f:c0:74:50:c3:62:5f:e5:f0:92:1d:73:f7:7e:46:b4:
fc:b0:e8:57:ea:7e:6e:62:6e:33:c2:41:da:fd:00:9b:56:57:
73:6c:c0:10:d2:e0:1b:83:d2:11:9d:b8:b6:f3:f7:f5:eb:8c:
7d:3c:a8:cb:5c:a7:2a:e3:5c:93:46:3a:b1:6f:c2:d5:73:64:
cc:63:ec:0c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:58:54 2026 by rpki-client