
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230322e3231322e302f32342d3234203d3e2034383038.roa
File: 3232332e3230322e3231322e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier: g4Ya9vnZyToZ89In86AOqvvqCEH9XLt5XAhJcWjXuss=
Subject key identifier: 33:73:BC:D3:C8:73:85:27:E9:BB:34:BC:23:07:57:AB:89:59:5C:A5
Certificate issuer: /CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551
Certificate serial: 3E4B3161EFE2FB16056FCF451F90AD3B14CE64AD
Authority key identifier: 78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230322e3231322e302f32342d3234203d3e2034383038.roa
Signing time: Tue 19 May 2026 02:29:57 +0000
ROA not before: Tue 19 May 2026 02:24:57 +0000
ROA not after: Tue 18 May 2027 02:29:57 +0000
asID: 4808
IP address blocks: 223.202.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl
rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:4b:31:61:ef:e2:fb:16:05:6f:cf:45:1f:90:ad:3b:14:ce:64:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551
Validity
Not Before: May 19 02:24:57 2026 GMT
Not After : May 18 02:29:57 2027 GMT
Subject: CN=3373BCD3C8738527E9BB34BC230757AB89595CA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f9:a1:fa:54:68:67:ca:2a:b2:d5:24:cc:06:
1a:c3:f4:4f:92:56:c7:74:c3:de:b7:38:ac:74:f4:
d6:24:aa:e8:00:ea:ce:3f:a2:52:75:f1:18:95:cb:
31:bb:ec:38:f4:bf:97:4a:bb:58:b7:76:01:ee:a4:
5e:f4:9c:03:06:01:f0:ab:28:f9:f0:07:be:e7:a3:
55:a0:f9:35:91:d9:29:22:1e:51:26:d1:63:74:df:
f9:88:5e:9f:2c:e9:82:64:61:33:6d:57:b1:9a:29:
ee:03:98:35:7b:1f:98:41:4b:c9:13:45:a1:55:24:
df:4d:f3:05:b8:68:cc:27:be:8b:16:aa:29:e7:66:
d9:9c:b7:ea:8c:92:c4:19:37:ec:99:3e:c4:6a:d8:
a9:55:1a:5d:6f:48:bb:d0:ca:d3:d4:dc:03:cc:59:
0e:79:56:0a:20:e0:87:d7:87:52:12:6d:3b:6f:a5:
e0:54:4d:2b:5c:c2:69:7b:43:52:33:6d:22:d3:50:
7e:db:2b:65:4a:cb:ae:c7:bc:19:d8:6e:0b:7a:a8:
25:d5:60:2e:79:57:ca:64:0e:02:ec:26:10:9b:06:
70:66:7e:0d:89:68:37:41:77:67:6e:f4:46:21:84:
2a:88:9d:26:bd:02:40:e4:49:c8:0b:e2:76:78:38:
6b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:73:BC:D3:C8:73:85:27:E9:BB:34:BC:23:07:57:AB:89:59:5C:A5
X509v3 Authority Key Identifier:
keyid:78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230322e3231322e302f32342d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.202.212.0/24
Signature Algorithm: sha256WithRSAEncryption
24:a8:eb:80:d9:8d:03:ed:67:64:16:fc:e9:76:b6:ac:83:be:
4c:4a:8d:27:8c:3b:04:dd:8f:a2:ca:db:4e:c7:3f:f9:70:8e:
cd:3b:4b:b1:8f:f1:64:eb:48:b3:27:88:77:95:24:fa:f4:9e:
f9:0c:4c:e3:0d:d6:24:de:64:17:28:f4:c8:a2:17:d8:89:8a:
ef:69:b5:d8:b6:f7:69:19:eb:de:12:cc:12:29:b3:4c:f4:dc:
71:b4:ba:8d:40:33:c1:8b:a1:e7:c0:06:c4:ba:52:3a:35:8b:
54:3a:ae:4c:b0:15:b9:97:88:9d:80:5e:24:d9:b2:af:d9:d7:
70:50:00:26:3c:21:e0:79:6b:06:1f:11:40:40:ef:94:f1:3c:
0b:75:53:1a:65:70:6f:e9:fd:ae:89:f6:bb:3c:c0:9f:d0:e3:
f8:78:27:c9:2c:28:52:0e:da:06:61:d9:e9:f7:49:3d:95:ae:
99:03:1b:32:eb:e8:88:7c:91:c3:fd:84:49:27:5c:a0:47:b7:
d1:99:7d:32:7e:89:d9:6b:25:e0:b3:e4:ac:11:b1:4b:2f:c8:
0a:ba:03:d2:14:a0:96:c6:d7:71:4e:9f:60:81:54:7f:3e:6d:
a0:5f:38:88:8a:3e:cc:80:ed:b4:c2:be:d4:25:d4:ae:8a:4f:
f6:57:c6:21
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUPksxYe/i+xYFb89FH5CtOxTOZK0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzgxRDYyQkQ1MzZGMDNBMkY4MkZBQzNGNzE5REU1QjNC
NUYxOTU1MTAeFw0yNjA1MTkwMjI0NTdaFw0yNzA1MTgwMjI5NTdaMDMxMTAvBgNV
BAMTKDMzNzNCQ0QzQzg3Mzg1MjdFOUJCMzRCQzIzMDc1N0FCODk1OTVDQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa+aH6VGhnyiqy1STMBhrD9E+S
Vsd0w963OKx09NYkqugA6s4/olJ18RiVyzG77Dj0v5dKu1i3dgHupF70nAMGAfCr
KPnwB77no1Wg+TWR2SkiHlEm0WN03/mIXp8s6YJkYTNtV7GaKe4DmDV7H5hBS8kT
RaFVJN9N8wW4aMwnvosWqinnZtmct+qMksQZN+yZPsRq2KlVGl1vSLvQytPU3APM
WQ55Vgog4IfXh1ISbTtvpeBUTStcwml7Q1IzbSLTUH7bK2VKy67HvBnYbgt6qCXV
YC55V8pkDgLsJhCbBnBmfg2JaDdBd2du9EYhhCqInSa9AkDkScgL4nZ4OGsBAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUM3O808hzhSfpuzS8IwdXq4lZXKUwHwYDVR0j
BBgwFoAUeB1ivVNvA6L4L6w/cZ3ls7XxlVEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzA1NTM5NjA0MTg1MDg4MS8wLzc4MUQ2MkJENTM2RjAzQTJGODJGQUMzRjcxOURF
NUIzQjVGMTk1NTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzgxRDYyQkQ1MzZGMDNBMkY4MkZBQzNGNzE5REU1QjNCNUYxOTU1MS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NzA1NTM5NjA0MTg1MDg4MS8wLzMyMzIzMzJlMzIz
MDMyMmUzMjMxMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzAzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAN/K1DANBgkqhkiG9w0BAQsFAAOCAQEAJKjrgNmNA+1nZBb86Xa2rIO+
TEqNJ4w7BN2PosrbTsc/+XCOzTtLsY/xZOtIsyeId5Uk+vSe+QxM4w3WJN5kFyj0
yKIX2ImK72m12Lb3aRnr3hLMEimzTPTccbS6jUAzwYuh58AGxLpSOjWLVDquTLAV
uZeInYBeJNmyr9nXcFAAJjwh4HlrBh8RQEDvlPE8C3VTGmVwb+n9ron2uzzAn9Dj
+HgnySwoUg7aBmHZ6fdJPZWumQMbMuvoiHyRw/2ESSdcoEe30Zl9Mn6J2Wsl4LPk
rBGxSy/ICroD0hSglsbXcU6fYIFUfz5toF84iIo+zIDttMK+1CXUropP9lfGIQ==
-----END CERTIFICATE-----
Generated at Fri May 29 23:54:28 2026 by rpki-client