
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230332e3130302e302f32342d3234203d3e2034383437.roa
File: 3232332e3230332e3130302e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier: 91tJfHt2ClT6HktbCIbcu+iEy7jUU/kzHpl6oAUbZ5k=
Subject key identifier: BC:41:84:16:ED:13:6D:9F:DD:1F:02:83:58:AE:9B:27:68:EB:FC:09
Certificate issuer: /CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551
Certificate serial: 4D9F994704AB88BF0ACEAFAB96BA81099C07E72F
Authority key identifier: 78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230332e3130302e302f32342d3234203d3e2034383437.roa
Signing time: Tue 19 May 2026 05:36:38 +0000
ROA not before: Tue 19 May 2026 05:31:38 +0000
ROA not after: Tue 18 May 2027 05:36:38 +0000
asID: 4847
IP address blocks: 223.203.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl
rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:9f:99:47:04:ab:88:bf:0a:ce:af:ab:96:ba:81:09:9c:07:e7:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551
Validity
Not Before: May 19 05:31:38 2026 GMT
Not After : May 18 05:36:38 2027 GMT
Subject: CN=BC418416ED136D9FDD1F028358AE9B2768EBFC09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:47:98:c6:16:49:9d:5f:cc:9d:f1:9d:f2:de:
88:69:d1:36:7b:44:c8:65:e8:c0:7d:8c:3a:51:8f:
58:b3:0b:af:b2:fa:f1:59:d9:9a:c8:78:bf:11:92:
87:32:59:af:67:e7:9e:2e:88:6b:63:86:dc:fc:02:
83:2f:57:4f:6a:54:a1:ce:18:1a:d1:19:46:f7:55:
75:5d:53:15:78:7b:a8:7c:48:8e:c5:56:53:f3:95:
1e:8d:ab:2f:78:56:80:5e:21:81:a1:c7:85:dc:53:
4f:01:f2:02:67:b7:f8:d0:6a:a6:0b:a3:f6:a3:40:
6b:7b:ba:51:0f:83:3b:10:0e:da:fe:a7:e1:ea:e6:
0b:df:9e:60:b2:b7:49:b7:d8:a5:2a:97:02:fb:9d:
c2:d9:f0:69:73:eb:ad:23:ec:34:51:05:eb:e8:1f:
e2:a2:36:ae:5b:74:47:d9:57:8f:93:8e:1d:91:a1:
5a:b9:8d:c6:8c:b7:57:39:6f:9c:fe:6e:8d:01:92:
1b:d9:4e:8a:2c:e9:64:46:85:c4:12:6b:e7:18:d1:
af:b4:8b:45:a3:6e:ed:ac:78:e8:70:17:59:df:03:
41:e7:9b:3e:d2:c8:e9:07:4c:38:e5:f2:19:e0:0c:
f2:6b:dc:a1:b0:e4:dd:0b:3d:ef:98:ad:ea:8a:51:
3d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:41:84:16:ED:13:6D:9F:DD:1F:02:83:58:AE:9B:27:68:EB:FC:09
X509v3 Authority Key Identifier:
keyid:78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230332e3130302e302f32342d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.203.100.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:26:d9:02:1b:d7:30:2f:bc:ad:d0:7e:96:37:6a:04:09:f6:
8c:fb:65:37:49:00:4d:47:cd:38:21:8e:9e:bc:d8:6c:36:64:
a5:e5:0d:59:ee:16:18:e3:91:1f:dd:2a:ea:be:d8:31:fe:82:
20:d7:a9:c6:f5:c6:07:fd:0d:b5:af:e6:00:08:df:16:a2:49:
33:60:75:87:4c:ee:f3:33:46:8c:00:79:3c:6d:78:44:e5:54:
3d:ee:61:97:78:b6:ba:20:86:de:03:98:84:b3:a6:3f:89:1d:
b0:c0:b6:12:fd:1f:a4:95:05:c9:4b:b7:9e:7a:5c:0e:9a:5a:
55:df:07:bf:ec:af:37:85:2f:ab:4b:c3:f4:9c:cc:7a:03:80:
6c:a9:3f:31:9b:64:4a:eb:62:c5:31:e8:ff:e2:ee:1d:fc:29:
05:ab:ee:91:c9:36:78:56:38:78:ac:a0:2f:49:02:f1:0d:de:
f6:2d:a9:34:44:29:60:87:b1:32:a9:b2:45:66:34:50:52:45:
aa:71:98:fd:bf:fd:ce:19:25:22:f7:2a:8c:04:db:01:23:10:
96:c1:5d:97:74:9e:d9:b4:5a:f8:8d:96:3d:a7:a9:c3:99:f3:
5c:a9:20:b7:64:fb:66:8e:af:ec:90:ca:2d:bf:c5:75:07:e4:
6a:d2:ce:e9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:53:08 2026 by rpki-client