
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230322e3133342e302f32342d3234203d3e2034383437.roa
File: 3232332e3230322e3133342e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier: x0xvuDEzEgqVda4oxGFv7/xiHEKITJRufUHQoXxEcBo=
Subject key identifier: F8:E5:3A:52:24:50:FC:16:9E:F0:FE:37:44:05:E3:E5:56:19:A7:53
Certificate issuer: /CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551
Certificate serial: 7B1C87E4B5CF4B5A9415416E331D91F979CDD2B0
Authority key identifier: 78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230322e3133342e302f32342d3234203d3e2034383437.roa
Signing time: Tue 19 May 2026 05:36:38 +0000
ROA not before: Tue 19 May 2026 05:31:38 +0000
ROA not after: Tue 18 May 2027 05:36:38 +0000
asID: 4847
IP address blocks: 223.202.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl
rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:1c:87:e4:b5:cf:4b:5a:94:15:41:6e:33:1d:91:f9:79:cd:d2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551
Validity
Not Before: May 19 05:31:38 2026 GMT
Not After : May 18 05:36:38 2027 GMT
Subject: CN=F8E53A522450FC169EF0FE374405E3E55619A753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:59:1f:33:13:3a:1f:d3:77:9d:07:24:32:61:
22:5e:a0:37:d8:ef:7f:c3:98:d5:fc:a7:cd:a4:c2:
2b:69:ee:c3:d4:60:56:0c:d1:9c:3f:8b:ec:7d:e3:
43:dd:9b:6b:3e:50:24:ed:72:c1:a3:36:e0:3c:ea:
1b:22:47:ac:88:d9:ab:61:c2:a1:39:7b:8e:86:8f:
83:65:5b:33:8f:ce:4d:97:92:be:51:7c:f5:28:fe:
4e:f8:65:0e:e2:77:06:4f:12:bc:8b:c5:67:32:91:
36:f4:a7:08:de:ed:c5:2c:31:3f:30:34:06:0c:c0:
1a:d0:46:2a:f8:43:6f:f6:f8:71:85:9a:be:4a:dc:
dc:89:84:6b:1f:fd:dc:3b:f6:46:b4:bb:b0:93:c4:
82:2c:24:32:23:57:c2:1c:b8:f3:36:fd:b8:ad:51:
ea:94:aa:55:23:d4:36:c0:55:98:cd:a6:65:ea:99:
e1:f6:1d:e4:db:94:a8:83:e9:9a:27:e3:28:70:3c:
91:2e:d1:cf:fb:59:0d:9f:1c:b5:fd:a2:5c:3f:68:
8b:5a:fb:c0:96:8c:1e:9b:de:63:47:63:81:bb:22:
61:83:c1:de:cb:52:82:e4:13:87:a6:66:67:80:9e:
dc:49:8e:d6:80:d6:e9:6d:08:62:a1:c7:4c:aa:68:
8d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E5:3A:52:24:50:FC:16:9E:F0:FE:37:44:05:E3:E5:56:19:A7:53
X509v3 Authority Key Identifier:
keyid:78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230322e3133342e302f32342d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.202.134.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:5a:f3:64:ba:7f:d1:2a:9d:93:25:b9:f6:f0:96:04:16:a5:
9c:f4:58:f0:3b:53:ef:9f:b0:1c:a7:06:9b:46:ac:9e:aa:46:
2c:8f:b9:fb:ee:26:c2:d4:bd:35:8f:b5:9d:24:ee:69:c2:93:
5c:2c:f7:19:86:76:23:7a:96:0e:5c:74:2a:0e:c0:ea:b4:2a:
52:73:a8:e0:15:f2:23:72:b9:b9:e1:97:b3:43:a7:e1:8b:bd:
0e:04:09:b7:7d:32:0b:8e:6e:34:c4:6f:b1:f1:51:f8:db:6a:
5f:b6:b4:c9:bc:46:9a:89:bc:45:63:0c:8f:36:34:83:86:e0:
e0:bd:47:c1:b7:36:f0:c2:7c:0c:c8:0f:66:43:ff:cc:eb:df:
89:40:46:c4:3c:7e:e1:5d:9d:f4:be:7d:e2:76:9c:87:d2:fc:
7a:3e:87:23:c0:16:30:2d:13:09:2f:6e:b0:37:3e:1d:14:25:
b7:3f:49:b3:12:a0:85:06:35:12:af:c3:8c:ea:1e:ff:7a:6f:
c0:9b:7d:55:64:29:f0:b1:00:db:f9:fb:64:0b:eb:9e:41:96:
a1:0e:12:d9:36:22:db:63:82:59:19:18:f1:9a:a9:bc:73:10:
10:20:35:71:01:8c:03:04:3b:61:17:9b:15:49:eb:e0:f4:c1:
fe:15:08:6c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:56:38 2026 by rpki-client