
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3230322e39312e3234382e302f32322d3232203d3e2034313334.roa
File: 3230322e39312e3234382e302f32322d3232203d3e2034313334.roa (raw, json)
Hash identifier: acecX4+DX3uhPhsPJCGqi9GLyz23PjxFgOQWsBgruG4=
Subject key identifier: 42:16:40:5F:6F:E0:15:2A:39:08:B9:43:F9:0C:9B:5E:3F:4F:8B:76
Certificate issuer: /CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3
Certificate serial: 12CA5179025C0F03511ADFC5FE3FF58573724CE7
Authority key identifier: EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3230322e39312e3234382e302f32322d3232203d3e2034313334.roa
Signing time: Thu 28 May 2026 05:31:37 +0000
ROA not before: Thu 28 May 2026 05:26:37 +0000
ROA not after: Thu 27 May 2027 05:31:37 +0000
asID: 4134
IP address blocks: 202.91.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl
rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:ca:51:79:02:5c:0f:03:51:1a:df:c5:fe:3f:f5:85:73:72:4c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3
Validity
Not Before: May 28 05:26:37 2026 GMT
Not After : May 27 05:31:37 2027 GMT
Subject: CN=4216405F6FE0152A3908B943F90C9B5E3F4F8B76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5c:8d:c5:33:41:8a:cc:e4:a4:3c:cc:d4:fb:
35:82:31:c6:ec:3f:87:44:1e:16:17:16:7e:62:fa:
09:49:22:21:33:2c:d3:d4:25:a0:07:e6:21:55:37:
14:12:2e:2e:15:58:c7:26:bd:d0:22:62:3b:4f:1d:
b3:c8:a5:1f:56:bc:4e:bc:5b:65:a5:8a:37:ad:06:
19:37:2b:c5:5f:cb:eb:e2:00:37:d5:da:47:4f:b1:
a4:19:e9:07:ce:22:a5:80:14:9f:f7:a6:52:4c:f5:
21:51:8b:e9:88:aa:10:e5:15:68:81:3f:7d:12:ae:
f9:65:bd:f7:7a:cb:0d:0a:94:47:0c:b5:7c:76:a6:
ce:79:0d:c2:77:e5:5b:73:c6:23:70:81:1a:9d:ea:
22:be:9d:51:4f:71:2d:43:82:bc:bc:04:1e:56:eb:
da:86:ce:fb:20:f9:b3:39:ad:b0:d3:a2:95:a6:d9:
fc:26:2e:dd:91:32:cb:01:42:bf:cf:e0:5a:bd:96:
9b:f8:82:9e:cd:a0:73:ba:d8:f1:ca:6d:c1:c4:b8:
36:48:54:90:12:f5:37:f4:f7:c8:e1:7f:c9:43:4a:
81:05:4a:37:d0:a8:3b:6d:e3:86:db:83:c0:0b:7d:
db:7a:06:37:0c:9f:a6:d4:8e:5f:5b:60:9a:21:3b:
3c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:16:40:5F:6F:E0:15:2A:39:08:B9:43:F9:0C:9B:5E:3F:4F:8B:76
X509v3 Authority Key Identifier:
keyid:EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3230322e39312e3234382e302f32322d3232203d3e2034313334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.91.248.0/22
Signature Algorithm: sha256WithRSAEncryption
66:26:4f:53:5f:3a:47:32:0d:90:67:37:32:95:26:f4:4d:c4:
8b:cf:a0:50:ba:67:11:70:80:6f:7d:1a:c0:e9:46:ff:cf:62:
ee:d7:ff:8d:5e:a7:f4:10:b5:3d:e8:c5:7e:21:52:ab:d9:06:
6b:04:13:15:f8:22:d8:7a:81:20:8e:6f:71:6e:41:76:69:a8:
53:be:ee:90:46:38:13:1d:68:9b:da:64:55:88:45:b5:fc:35:
d1:8d:76:00:60:56:53:6e:47:15:be:63:b5:f5:b9:4f:67:04:
94:09:c1:70:67:84:08:41:7d:b9:86:49:65:43:3f:0e:cb:b5:
7f:68:cc:dd:b6:ce:41:7d:ee:a5:3a:f5:d6:1c:57:fc:e5:c4:
a2:ce:7b:da:5d:e8:ef:2a:e7:3b:a6:21:63:62:2c:47:ef:24:
f9:70:e6:72:c7:8b:eb:75:f5:e7:a0:73:01:c1:92:04:8f:d2:
61:9e:08:37:49:6e:fc:07:e2:37:c0:f1:ae:a2:8b:1f:b6:ad:
81:84:51:f4:cf:1c:06:93:df:f3:e4:9c:4a:34:08:48:af:c3:
a5:94:4b:7a:f0:e6:54:5b:03:c5:de:88:23:32:5c:9e:f4:cb:
b6:83:22:95:c6:f8:dd:7a:5a:08:bb:e2:e7:ca:07:19:0f:b8:
e9:e8:74:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:57:12 2026 by rpki-client