
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3230322e37352e3231362e302f32322d3232203d3e2034313334.roa
File: 3230322e37352e3231362e302f32322d3232203d3e2034313334.roa (raw, json)
Hash identifier: zHhMiD48K6uJfrzAak9pIOBtn/nJ4uu96wZ1uk2WLXA=
Subject key identifier: 3B:9A:CB:9C:6A:9E:AA:11:5B:FD:65:BA:AE:D7:6E:55:B0:49:7A:D4
Certificate issuer: /CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3
Certificate serial: 6AF2600F116BD88476A850D06F2E07314B799C32
Authority key identifier: EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3230322e37352e3231362e302f32322d3232203d3e2034313334.roa
Signing time: Thu 28 May 2026 05:16:00 +0000
ROA not before: Thu 28 May 2026 05:11:00 +0000
ROA not after: Thu 27 May 2027 05:16:00 +0000
asID: 4134
IP address blocks: 202.75.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl
rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:f2:60:0f:11:6b:d8:84:76:a8:50:d0:6f:2e:07:31:4b:79:9c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3
Validity
Not Before: May 28 05:11:00 2026 GMT
Not After : May 27 05:16:00 2027 GMT
Subject: CN=3B9ACB9C6A9EAA115BFD65BAAED76E55B0497AD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ed:3f:12:6c:4f:1f:27:69:ef:95:4b:14:e9:
57:e2:0f:50:3b:6b:c0:d0:61:50:dc:e0:de:6a:f6:
08:e9:63:96:3e:10:78:2f:8c:57:98:a7:af:bf:02:
46:9a:b4:33:bd:40:d3:61:7c:85:40:f8:30:06:86:
df:56:66:74:37:1d:84:58:b8:50:ec:87:8d:a9:33:
8d:bb:9e:99:88:7c:e4:a0:a7:a4:bc:40:dc:22:fe:
64:2d:62:8a:42:6d:83:a6:7a:b8:20:eb:58:f6:7d:
14:ca:b3:b4:82:0b:e0:2b:f7:f2:32:e6:1c:a3:97:
5b:47:e5:be:4d:88:02:33:46:b9:d4:c6:8b:d3:14:
4c:dc:ac:06:05:a1:9f:f8:35:92:ef:44:cd:22:0b:
54:06:28:c1:66:c5:e1:e7:f3:2e:e6:f8:b4:d5:74:
cc:94:99:08:f5:86:d6:40:48:e4:4b:bc:62:df:28:
4b:bb:09:a7:7c:04:c6:89:ed:6a:a4:8c:11:c8:29:
42:27:c6:ab:71:7a:ff:b1:7e:24:2d:55:df:8f:52:
5b:e5:83:b1:60:26:7d:94:2b:f2:34:d9:e0:fb:bc:
a9:57:fd:99:cf:6e:b6:2f:dd:9b:c3:21:c5:83:83:
d4:10:a7:fc:5a:bc:73:f8:ab:4e:b6:ec:00:08:58:
37:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9A:CB:9C:6A:9E:AA:11:5B:FD:65:BA:AE:D7:6E:55:B0:49:7A:D4
X509v3 Authority Key Identifier:
keyid:EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3230322e37352e3231362e302f32322d3232203d3e2034313334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.75.216.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:b9:53:87:f2:6b:88:a8:9d:35:23:cc:fb:69:e7:68:fa:01:
7d:7c:ec:84:38:68:f5:ee:bd:b3:f5:07:0d:d5:1d:4d:19:0c:
c1:eb:78:ed:4c:db:9c:81:d4:87:2a:89:e4:66:c1:a4:34:54:
82:f0:1d:5c:38:bf:79:56:ee:d1:50:21:13:9e:bf:0e:13:23:
9e:3d:48:d6:32:36:fa:d9:37:92:8b:b9:b4:c7:20:d6:0e:be:
7d:9c:0a:1e:9d:a6:83:3e:a3:83:92:02:10:f9:e0:18:95:63:
93:32:9b:f7:34:4c:96:89:7c:5c:e0:7d:46:2f:93:5c:83:2d:
2a:34:13:8c:72:3b:0a:93:c6:4e:95:51:aa:11:c3:b0:02:19:
12:7a:81:5a:1b:f3:73:5b:79:8f:c3:55:71:b4:48:f8:6a:19:
43:f4:6c:da:ba:00:0b:57:43:99:3e:20:3c:08:49:4c:75:c8:
4e:42:47:99:36:29:d2:29:2b:9a:36:ff:4c:ba:b4:15:a4:5f:
da:0f:9c:33:41:65:be:ec:77:f4:e5:6e:ca:95:e7:b8:2c:e3:
33:f3:6c:f0:9f:45:fe:c2:ca:97:71:61:47:ab:05:e5:ed:02:
55:41:c8:9f:ee:e7:6e:43:fd:80:4c:22:f6:99:39:82:dd:5e:
4c:e5:c7:9c
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUavJgDxFr2IR2qFDQby4HMUt5nDIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM2RkIxNDI1QjJFQ0Q4OTZBODFEN0E0RTFDQUJCRDhF
RTU4QkJEMzAeFw0yNjA1MjgwNTExMDBaFw0yNzA1MjcwNTE2MDBaMDMxMTAvBgNV
BAMTKDNCOUFDQjlDNkE5RUFBMTE1QkZENjVCQUFFRDc2RTU1QjA0OTdBRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw7T8SbE8fJ2nvlUsU6VfiD1A7
a8DQYVDc4N5q9gjpY5Y+EHgvjFeYp6+/AkaatDO9QNNhfIVA+DAGht9WZnQ3HYRY
uFDsh42pM427npmIfOSgp6S8QNwi/mQtYopCbYOmergg61j2fRTKs7SCC+Ar9/Iy
5hyjl1tH5b5NiAIzRrnUxovTFEzcrAYFoZ/4NZLvRM0iC1QGKMFmxeHn8y7m+LTV
dMyUmQj1htZASORLvGLfKEu7Cad8BMaJ7WqkjBHIKUInxqtxev+xfiQtVd+PUlvl
g7FgJn2UK/I02eD7vKlX/ZnPbrYv3ZvDIcWDg9QQp/xavHP4q0627AAIWDf3AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUO5rLnGqeqhFb/WW6rtduVbBJetQwHwYDVR0j
BBgwFoAU7G+xQlsuzYlqgdek4cq72O5Yu9MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjYyNjkzNDcyNjUyNDkzMC8wL0VDNkZCMTQyNUIyRUNEODk2QTgxRDdBNEUxQ0FC
QkQ4RUU1OEJCRDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRUM2RkIxNDI1QjJFQ0Q4OTZBODFEN0E0RTFDQUJCRDhFRTU4QkJEMy5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2NjI2OTM0NzI2NTI0OTMwLzAvMzIzMDMyMmUzNzM1
MmUzMjMxMzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDMxMzMzNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAspL2DANBgkqhkiG9w0BAQsFAAOCAQEAOrlTh/JriKidNSPM+2nnaPoBfXzs
hDho9e69s/UHDdUdTRkMwet47UzbnIHUhyqJ5GbBpDRUgvAdXDi/eVbu0VAhE56/
DhMjnj1I1jI2+tk3kou5tMcg1g6+fZwKHp2mgz6jg5ICEPngGJVjkzKb9zRMlol8
XOB9Ri+TXIMtKjQTjHI7CpPGTpVRqhHDsAIZEnqBWhvzc1t5j8NVcbRI+GoZQ/Rs
2roAC1dDmT4gPAhJTHXITkJHmTYp0ikrmjb/TLq0FaRf2g+cM0Flvux39OVuypXn
uCzjM/Ns8J9F/sLKl3FhR6sF5e0CVUHIn+7nbkP9gEwi9pk5gt1eTOXHnA==
-----END CERTIFICATE-----
Generated at Fri May 29 22:56:50 2026 by rpki-client