
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230332e3230312e3138312e302f32342d3234203d3e20313531323531.roa
File: 3230332e3230312e3138312e302f32342d3234203d3e20313531323531.roa (raw, json)
Hash identifier: yJ3jHnPWhAaAMRxei37IPvzElQ724dxo+7tcpvoO8fw=
Subject key identifier: 26:00:24:3A:C7:56:DC:7C:8B:60:8D:12:CB:EA:9A:97:99:AD:9A:9C
Certificate issuer: /CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
Certificate serial: 243DF28DBE2F428FF5155E04E55FAC1C562B9066
Authority key identifier: 13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230332e3230312e3138312e302f32342d3234203d3e20313531323531.roa
Signing time: Tue 26 May 2026 08:57:13 +0000
ROA not before: Tue 26 May 2026 08:52:13 +0000
ROA not after: Tue 25 May 2027 08:57:13 +0000
asID: 151251
IP address blocks: 203.201.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 07:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:3d:f2:8d:be:2f:42:8f:f5:15:5e:04:e5:5f:ac:1c:56:2b:90:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
Validity
Not Before: May 26 08:52:13 2026 GMT
Not After : May 25 08:57:13 2027 GMT
Subject: CN=2600243AC756DC7C8B608D12CBEA9A9799AD9A9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:58:36:52:ab:32:6d:da:7c:54:fd:ae:cd:92:
c8:1e:d6:f5:38:b4:87:5f:6c:ad:36:25:f9:44:8f:
98:1a:42:f1:1e:cc:f8:74:67:a4:02:f7:07:db:00:
c6:48:bf:54:60:12:87:a1:8a:8a:6e:22:6b:29:97:
4a:6b:bc:bc:4c:6a:61:f2:a4:ca:df:ce:e2:d6:e8:
2c:ca:59:44:8a:27:64:37:f5:f4:da:04:78:05:99:
5d:66:78:72:2d:50:30:3a:d8:9b:1e:df:7f:98:f4:
7b:75:24:4b:c4:51:36:2e:1d:2f:fe:45:96:39:77:
4a:fc:35:57:51:17:e4:e7:13:47:81:72:ba:70:06:
6d:2f:ef:c7:5b:6e:d1:ec:73:7b:24:ed:07:94:6a:
0f:3e:77:5a:f8:a2:57:c8:d2:e1:d1:8a:18:7c:53:
cd:a9:72:b3:60:35:87:ef:e5:1a:d4:80:46:e9:e5:
dd:2c:fe:26:d8:fa:be:ee:03:cf:99:01:70:5e:7f:
83:ce:2b:32:bd:c9:58:9a:8b:ec:a4:cf:87:d2:6d:
36:8c:4c:95:a9:b3:0d:45:a2:fc:e9:f9:1f:c5:41:
53:c3:d9:8a:50:85:65:17:d4:6c:09:0e:5b:89:8d:
2c:5a:f0:bd:53:c7:a9:d1:95:b1:0f:8c:f9:9e:14:
43:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:00:24:3A:C7:56:DC:7C:8B:60:8D:12:CB:EA:9A:97:99:AD:9A:9C
X509v3 Authority Key Identifier:
keyid:13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230332e3230312e3138312e302f32342d3234203d3e20313531323531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.201.181.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:6e:f4:de:75:8d:7a:c7:66:f6:e8:5a:fb:b8:ab:7d:7d:a1:
51:37:3b:85:aa:c8:14:1c:4a:0a:c2:08:2e:14:77:ef:86:bd:
ee:eb:1e:2d:63:31:f9:9e:85:91:ac:af:6e:58:ca:00:07:ac:
0c:6e:6d:4b:f5:8e:c7:59:0f:30:d6:1e:5a:ef:c7:36:3a:61:
86:2e:06:39:ee:7e:5b:51:b2:90:4f:f0:64:2c:27:57:87:21:
68:e6:59:3a:8c:78:92:7e:10:42:8b:c8:44:30:da:8f:8f:48:
f8:b4:3b:36:41:e3:7f:48:17:f8:6e:d8:38:b1:97:45:5d:58:
7e:32:51:9a:31:ab:01:39:93:fa:75:0e:63:c5:f2:c0:5a:8a:
6d:8d:28:2f:7d:64:de:4c:2a:00:23:8e:c2:80:29:16:5b:9e:
c2:59:00:ac:47:e7:bf:c0:10:72:22:82:c2:b0:77:01:4e:3d:
5d:c9:4d:93:92:b8:ea:04:db:87:3b:d8:38:10:36:4a:32:86:
96:90:eb:13:30:57:cf:83:c3:e2:81:ac:f3:c9:03:31:00:56:
17:cf:2a:8d:c4:38:89:de:64:d7:d3:a5:99:b0:4d:aa:77:77:
98:ef:ce:69:55:78:a9:ae:d9:19:25:d5:49:22:0d:0a:9b:e1:
5a:7e:38:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:58:50 2026 by rpki-client