
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230332e3134322e3231392e302f32342d3234203d3e20313531323531.roa
File: 3230332e3134322e3231392e302f32342d3234203d3e20313531323531.roa (raw, json)
Hash identifier: BhfTobQuLUUFCm40O0UhVTcZ0Jym4fymlhVRNpS3frw=
Subject key identifier: 90:E7:F2:C5:DB:D9:D7:C1:DB:AD:27:67:42:2A:FF:97:42:5B:C8:87
Certificate issuer: /CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
Certificate serial: 159952F80A58D5F4174D130440BD83021E80D373
Authority key identifier: 13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230332e3134322e3231392e302f32342d3234203d3e20313531323531.roa
Signing time: Tue 26 May 2026 08:57:12 +0000
ROA not before: Tue 26 May 2026 08:52:12 +0000
ROA not after: Tue 25 May 2027 08:57:12 +0000
asID: 151251
IP address blocks: 203.142.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 07:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:99:52:f8:0a:58:d5:f4:17:4d:13:04:40:bd:83:02:1e:80:d3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
Validity
Not Before: May 26 08:52:12 2026 GMT
Not After : May 25 08:57:12 2027 GMT
Subject: CN=90E7F2C5DBD9D7C1DBAD2767422AFF97425BC887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1d:fd:09:ce:f6:e2:3a:9e:8a:3c:de:5b:e2:
b9:6f:45:14:55:db:f0:c2:5c:60:41:3d:63:7c:ca:
14:de:2c:8b:a1:2f:e6:dd:8f:2e:7c:53:14:52:f9:
86:38:0c:9f:e2:d2:a0:4b:06:e0:e9:da:ba:9b:57:
34:9c:55:4d:b5:42:5e:69:e5:fa:18:a6:35:b7:02:
d2:bd:88:82:d1:71:85:4a:19:80:c8:b8:e0:c4:13:
6f:2f:76:37:49:1c:97:72:82:19:a3:33:64:df:c6:
5a:e1:bb:db:fc:df:27:9c:d3:03:09:12:e5:bc:31:
6e:06:7e:f8:8b:c2:9c:d4:39:a2:a0:1e:3f:e3:de:
76:9b:63:44:95:57:bf:d4:7d:75:80:82:f0:b9:30:
81:60:07:07:d3:15:c3:90:f5:b1:ee:c1:92:70:bd:
1d:44:5d:09:46:d5:f2:8c:ff:2c:e9:89:88:ce:27:
61:ca:53:cf:ea:51:7a:30:eb:3a:b6:e0:51:9d:01:
6e:3b:2b:e9:00:c8:49:6f:af:1f:a8:98:0d:6e:04:
be:30:21:2c:e9:9a:9d:1d:26:22:84:e5:2e:2e:86:
e3:12:b8:c6:00:4c:82:bb:63:7b:54:18:1a:dc:fe:
ba:af:35:ce:76:bd:bd:9b:e6:c8:05:37:a8:62:3f:
fe:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E7:F2:C5:DB:D9:D7:C1:DB:AD:27:67:42:2A:FF:97:42:5B:C8:87
X509v3 Authority Key Identifier:
keyid:13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230332e3134322e3231392e302f32342d3234203d3e20313531323531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.142.219.0/24
Signature Algorithm: sha256WithRSAEncryption
95:31:35:d8:75:a3:83:cb:64:e2:84:ac:02:59:bc:88:4d:03:
98:59:c3:b7:ff:cd:3b:05:ca:d9:3e:6d:f5:3e:bf:a8:2f:0b:
c5:aa:3d:9f:ff:05:79:56:8f:0d:45:71:8a:d7:05:e9:93:3c:
d4:e5:a2:3e:4a:f4:a6:f6:c9:f0:d2:77:57:d2:ad:4c:5f:20:
05:97:00:ff:cf:18:84:31:67:1d:60:e1:cb:7f:bf:92:ff:19:
ec:6d:f3:7d:c4:84:63:bc:5d:f0:8b:af:52:7d:62:22:8d:f0:
cb:f4:54:f6:25:79:a7:08:a3:56:8e:cd:5d:6d:ac:29:82:cd:
dc:e2:aa:76:54:40:f8:ca:b7:24:98:ec:17:92:f5:53:ac:fd:
16:c1:c6:40:1e:8c:a9:4c:a7:71:b6:c7:41:76:b8:c5:7e:d5:
31:21:ff:cd:49:a9:6a:c1:dd:5e:a4:e8:b3:94:e7:ce:2d:a5:
24:3e:b6:a6:a6:ef:1f:2f:0d:96:b6:bd:af:b6:d8:9f:22:b6:
a0:dc:f5:30:a6:b6:52:7e:b7:88:60:9e:36:b3:30:27:ff:50:
74:ff:da:41:6b:8b:32:67:44:a5:82:88:31:30:79:f4:6d:84:
9b:e5:bc:7c:13:ec:37:7c:90:77:b4:a1:09:cc:ee:7f:f5:3f:
8a:bc:06:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:58:51 2026 by rpki-client