
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230332e3139312e372e302f32342d3234203d3e20313531323531.roa
File: 3230332e3139312e372e302f32342d3234203d3e20313531323531.roa (raw, json)
Hash identifier: zSnSXFOuavokFDJ0LSAvvl1QDzFRGSxODkOT+pQTD7k=
Subject key identifier: AA:87:DD:88:7E:0F:B9:4E:EA:9C:E8:3D:8D:FA:DC:0F:16:9E:1A:2D
Certificate issuer: /CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
Certificate serial: 0C66CBB1B20D6A73C43E818BC52A57B6D80112F8
Authority key identifier: 13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230332e3139312e372e302f32342d3234203d3e20313531323531.roa
Signing time: Tue 26 May 2026 08:57:12 +0000
ROA not before: Tue 26 May 2026 08:52:12 +0000
ROA not after: Tue 25 May 2027 08:57:12 +0000
asID: 151251
IP address blocks: 203.191.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 07:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:66:cb:b1:b2:0d:6a:73:c4:3e:81:8b:c5:2a:57:b6:d8:01:12:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
Validity
Not Before: May 26 08:52:12 2026 GMT
Not After : May 25 08:57:12 2027 GMT
Subject: CN=AA87DD887E0FB94EEA9CE83D8DFADC0F169E1A2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:57:19:60:4e:06:f8:39:7a:df:b3:21:40:eb:
fb:f1:96:8d:db:c4:98:81:ab:6a:b8:91:3f:f6:54:
c3:1b:99:a9:e3:f4:d0:cb:13:f1:fc:0e:46:ad:c1:
62:f0:72:e2:c2:fe:38:6e:bd:b4:4d:c4:a1:99:20:
a7:2a:25:62:03:73:8e:b9:2b:aa:f3:39:e4:7c:62:
bf:d8:b9:41:04:01:82:58:50:4b:47:7a:ae:d9:91:
1c:51:01:70:bb:d3:46:8c:8e:9d:b6:4c:f9:ef:e9:
cc:a5:8f:5e:e8:a4:5d:74:51:17:7a:a6:8e:9f:bd:
31:21:49:c9:51:bb:37:50:6b:27:13:a9:4a:cc:d2:
a7:40:95:ce:3f:4b:a6:64:77:49:f1:99:01:2a:c0:
fc:3c:83:4d:01:5b:27:0e:e5:6d:71:58:e8:7f:fd:
e2:10:31:8d:4a:88:31:1f:bd:15:b6:3e:72:df:ef:
5e:e9:77:80:fa:46:c1:9f:a7:39:1c:d7:e4:84:47:
7d:b8:9c:4a:c4:1e:60:ce:85:5b:67:81:6e:d7:fe:
f8:44:f3:b3:f9:1b:e9:93:99:08:99:8a:10:61:9e:
70:22:be:62:22:eb:51:36:f3:bd:ea:fe:5e:4e:48:
e4:95:cd:79:f7:f4:ec:76:d0:ae:e8:37:77:bd:84:
6a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:87:DD:88:7E:0F:B9:4E:EA:9C:E8:3D:8D:FA:DC:0F:16:9E:1A:2D
X509v3 Authority Key Identifier:
keyid:13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230332e3139312e372e302f32342d3234203d3e20313531323531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.191.7.0/24
Signature Algorithm: sha256WithRSAEncryption
42:6f:35:c3:5e:ec:e5:be:cc:98:40:8e:a7:4b:b8:b4:ac:b2:
d0:e9:9d:83:39:b5:84:e5:c2:56:ea:57:3d:31:86:eb:55:6f:
e7:83:ee:a6:fb:75:10:8e:5b:1f:1c:b2:e7:43:d4:d5:bd:5e:
28:e5:c0:45:53:c4:8a:95:f8:5e:a6:49:49:3d:80:3b:40:8d:
7b:1a:37:2c:2b:fd:3d:f7:16:99:e2:e7:e4:71:64:2d:00:84:
63:a0:bd:cc:30:5e:80:38:e3:cc:3c:88:1b:70:65:a5:6b:5e:
78:75:c9:f0:57:a0:94:c4:d8:98:3c:e9:d9:9f:98:5d:d9:03:
b7:be:8c:2b:a1:bc:40:78:87:41:da:62:44:5f:c4:2d:5a:0d:
f7:77:b8:2e:42:e1:9c:e8:9c:c1:ed:d0:d1:ab:39:e7:69:bf:
ab:b2:ee:47:ec:c3:65:7e:78:4e:39:18:be:7c:8f:4f:96:f3:
d9:dc:9f:4f:82:0f:94:45:d7:62:e2:81:8d:6d:18:aa:2e:27:
cd:c0:b5:30:ca:1b:f9:5c:e0:0f:29:82:77:01:6a:4d:4d:d7:
35:2b:64:f4:4b:74:1f:45:b9:f9:ad:a3:17:e8:dd:4f:e0:9d:
d8:99:e5:9c:0f:0f:7c:54:0b:fe:8b:9a:b7:fa:f8:30:d9:d4:
1d:cc:c5:03
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:38 2026 by rpki-client