
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230322e3231312e302f32342d3234203d3e2034383038.roa
File: 3232332e3230322e3231312e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier: TLHe7pNpps3WRdknLR3hcGF7occ3pbrgIr/XvpERZSc=
Subject key identifier: 98:92:B4:25:3A:20:6D:16:6E:3D:59:31:8D:C7:69:98:21:67:3D:0D
Certificate issuer: /CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551
Certificate serial: 6EE5178F62EE476B3E2EFED5CD87F20E7575D634
Authority key identifier: 78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230322e3231312e302f32342d3234203d3e2034383038.roa
Signing time: Tue 19 May 2026 02:29:57 +0000
ROA not before: Tue 19 May 2026 02:24:57 +0000
ROA not after: Tue 18 May 2027 02:29:57 +0000
asID: 4808
IP address blocks: 223.202.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl
rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:e5:17:8f:62:ee:47:6b:3e:2e:fe:d5:cd:87:f2:0e:75:75:d6:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551
Validity
Not Before: May 19 02:24:57 2026 GMT
Not After : May 18 02:29:57 2027 GMT
Subject: CN=9892B4253A206D166E3D59318DC7699821673D0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:79:77:c8:db:34:17:a1:da:c4:ce:a2:a1:38:
f1:da:79:ab:73:ef:39:7b:75:ab:b0:70:0d:ae:2e:
81:0f:a1:ef:ee:54:28:f3:11:51:73:aa:43:3c:a9:
20:3c:c8:e9:d1:20:e9:8c:e9:7c:13:cb:ea:5d:ee:
e5:1a:49:e0:88:74:99:75:29:96:ce:35:ea:b9:44:
61:c6:ec:aa:e2:69:e6:0c:17:b1:f1:a0:75:e0:cc:
33:23:a1:4e:d8:77:a1:21:c6:3e:b3:56:eb:ee:73:
56:6c:1a:bc:b4:42:ed:9d:af:92:13:45:1f:30:7f:
5a:4d:38:04:3e:fb:40:59:d9:2a:16:04:01:d2:2f:
d0:48:e7:7f:7e:51:9f:86:2a:7d:1a:8a:09:a5:28:
e3:9e:f9:8a:e9:72:31:4d:79:ab:f0:c6:7a:54:03:
73:5c:2c:1a:d8:df:e4:de:e8:9f:fc:c3:1b:d1:0e:
8f:0a:51:4c:ef:a6:fc:8f:ce:69:74:53:93:54:e0:
1e:1b:4a:bf:86:89:18:d9:df:c9:fc:32:e5:fb:01:
94:71:bd:1e:38:17:7e:68:21:aa:cc:21:fa:a9:55:
b7:3c:12:67:f2:5c:2c:45:94:03:b1:0d:db:2a:66:
0d:f5:b7:10:00:59:38:0a:58:8d:2a:55:5f:cf:7d:
8f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:92:B4:25:3A:20:6D:16:6E:3D:59:31:8D:C7:69:98:21:67:3D:0D
X509v3 Authority Key Identifier:
keyid:78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230322e3231312e302f32342d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.202.211.0/24
Signature Algorithm: sha256WithRSAEncryption
68:93:34:5f:b5:65:7f:6d:8f:5c:c4:6a:14:b2:e9:f6:46:e8:
03:97:1a:3b:01:55:6e:9a:ed:7d:0f:fc:cb:ea:68:98:3c:54:
5b:4b:5f:67:33:79:a6:f5:bc:96:59:1e:80:d7:cd:2f:ac:c4:
96:53:3f:dd:db:48:55:c2:69:2b:13:22:5c:dd:c1:d7:68:24:
21:7b:45:08:d1:38:0e:2d:fd:87:7d:04:7f:19:de:42:bb:f4:
5e:8f:c2:37:13:8d:b0:b0:93:e9:5e:91:5c:41:eb:14:af:59:
34:55:67:29:af:4a:3c:f7:86:f9:ec:39:5a:d4:51:13:00:34:
e0:06:aa:4e:e1:98:53:80:ba:29:98:9b:86:5d:10:13:bf:71:
8c:9c:f1:c4:4e:60:29:ce:85:d6:86:39:e9:bf:33:f1:2c:84:
28:c9:30:c0:33:18:14:41:84:75:fd:5c:88:91:9e:68:1a:7c:
aa:a9:13:91:c3:c6:b7:43:4f:9f:5f:f9:a5:d7:2b:e0:f6:cf:
19:ad:6d:9e:17:95:43:a8:6f:79:fe:7d:63:79:aa:ba:c9:f8:
f1:f9:1e:71:c7:e2:7d:d5:4e:6d:05:99:e5:6b:22:6b:b8:9f:
39:bb:5c:ab:12:93:49:c0:b8:bb:f3:11:cf:dc:7b:92:b3:de:
3a:2f:fe:97
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUbuUXj2LuR2s+Lv7VzYfyDnV11jQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzgxRDYyQkQ1MzZGMDNBMkY4MkZBQzNGNzE5REU1QjNC
NUYxOTU1MTAeFw0yNjA1MTkwMjI0NTdaFw0yNzA1MTgwMjI5NTdaMDMxMTAvBgNV
BAMTKDk4OTJCNDI1M0EyMDZEMTY2RTNENTkzMThEQzc2OTk4MjE2NzNEMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLeXfI2zQXodrEzqKhOPHaeatz
7zl7dauwcA2uLoEPoe/uVCjzEVFzqkM8qSA8yOnRIOmM6XwTy+pd7uUaSeCIdJl1
KZbONeq5RGHG7KriaeYMF7HxoHXgzDMjoU7Yd6Ehxj6zVuvuc1ZsGry0Qu2dr5IT
RR8wf1pNOAQ++0BZ2SoWBAHSL9BI539+UZ+GKn0aigmlKOOe+YrpcjFNeavwxnpU
A3NcLBrY3+Te6J/8wxvRDo8KUUzvpvyPzml0U5NU4B4bSr+GiRjZ38n8MuX7AZRx
vR44F35oIarMIfqpVbc8EmfyXCxFlAOxDdsqZg31txAAWTgKWI0qVV/PfY8dAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUmJK0JTogbRZuPVkxjcdpmCFnPQ0wHwYDVR0j
BBgwFoAUeB1ivVNvA6L4L6w/cZ3ls7XxlVEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzA1NTM5NjA0MTg1MDg4MS8wLzc4MUQ2MkJENTM2RjAzQTJGODJGQUMzRjcxOURF
NUIzQjVGMTk1NTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzgxRDYyQkQ1MzZGMDNBMkY4MkZBQzNGNzE5REU1QjNCNUYxOTU1MS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NzA1NTM5NjA0MTg1MDg4MS8wLzMyMzIzMzJlMzIz
MDMyMmUzMjMxMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzAzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAN/K0zANBgkqhkiG9w0BAQsFAAOCAQEAaJM0X7Vlf22PXMRqFLLp9kbo
A5caOwFVbprtfQ/8y+pomDxUW0tfZzN5pvW8llkegNfNL6zEllM/3dtIVcJpKxMi
XN3B12gkIXtFCNE4Di39h30EfxneQrv0Xo/CNxONsLCT6V6RXEHrFK9ZNFVnKa9K
PPeG+ew5WtRREwA04AaqTuGYU4C6KZibhl0QE79xjJzxxE5gKc6F1oY56b8z8SyE
KMkwwDMYFEGEdf1ciJGeaBp8qqkTkcPGt0NPn1/5pdcr4PbPGa1tnheVQ6hvef59
Y3mqusn48fkeccfifdVObQWZ5Wsia7ifObtcqxKTScC4u/MRz9x7krPeOi/+lw==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:09 2026 by rpki-client