
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230332e392e302f32342d3234203d3e2034383437.roa
File: 3232332e3230332e392e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier: +lrB+nYMhKLeeWMuwOElfk8jZEgFTyJ7nQ+TfhZhw+E=
Subject key identifier: 30:E8:91:B0:85:E8:DA:85:CF:D7:F3:60:E8:A6:C3:16:33:6D:2C:7A
Certificate issuer: /CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551
Certificate serial: 1C74709E60FF86B339EB26F258BDA154BD7E17A7
Authority key identifier: 78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230332e392e302f32342d3234203d3e2034383437.roa
Signing time: Tue 19 May 2026 05:36:38 +0000
ROA not before: Tue 19 May 2026 05:31:38 +0000
ROA not after: Tue 18 May 2027 05:36:38 +0000
asID: 4847
IP address blocks: 223.203.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl
rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:74:70:9e:60:ff:86:b3:39:eb:26:f2:58:bd:a1:54:bd:7e:17:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551
Validity
Not Before: May 19 05:31:38 2026 GMT
Not After : May 18 05:36:38 2027 GMT
Subject: CN=30E891B085E8DA85CFD7F360E8A6C316336D2C7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:03:06:36:d9:a5:3d:33:36:0d:39:d4:f3:c9:
09:9d:f6:6f:71:48:df:36:8d:02:7d:15:99:79:1a:
6a:2c:5d:97:05:82:c0:85:23:4a:72:c5:69:d2:cf:
f7:f8:32:97:7d:5c:a1:b1:27:5e:80:2f:e3:e3:72:
bf:67:c0:8a:c0:5e:22:57:af:c7:3b:bb:4b:6b:4d:
3e:24:d1:97:92:60:fe:a8:5f:20:56:1f:c4:1a:0c:
1c:09:10:63:87:f7:46:e5:3e:05:5b:0c:f9:18:6e:
de:e3:f4:35:d5:6f:48:9a:13:ad:ca:26:a4:ae:a5:
33:62:4e:a1:23:f5:6c:5b:6e:b5:1a:8c:f4:ea:e6:
5c:3a:d4:e5:9b:9f:35:88:25:18:c5:fc:ca:d3:c4:
eb:12:eb:25:07:38:59:9e:9a:57:f3:79:24:04:ab:
6f:e8:44:35:36:8f:f0:b6:be:32:28:b7:57:f9:6b:
20:98:8e:93:00:a0:7d:2b:9d:4c:d0:89:05:3c:f4:
20:e1:0b:9a:ed:4c:1f:52:77:25:ca:da:60:ff:05:
3a:57:63:68:57:fe:19:8b:18:63:91:f5:4b:c0:26:
ee:9c:17:cf:bd:ff:a0:fe:9c:a6:ea:fa:29:59:72:
0c:55:05:a7:96:3e:3a:e2:aa:51:5f:58:7c:bd:2b:
e5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E8:91:B0:85:E8:DA:85:CF:D7:F3:60:E8:A6:C3:16:33:6D:2C:7A
X509v3 Authority Key Identifier:
keyid:78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230332e392e302f32342d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.203.9.0/24
Signature Algorithm: sha256WithRSAEncryption
74:45:a6:51:fa:ea:97:91:16:6a:c7:09:ec:c5:3c:62:b8:d8:
0f:bd:39:21:0a:5a:47:7a:65:3f:83:6d:1d:8c:e4:85:f6:f7:
7a:98:e2:ea:81:91:96:65:5e:b1:26:1e:d7:e8:82:8e:c4:49:
02:e6:17:81:76:1e:4f:c0:32:20:a0:1e:83:29:7f:ce:c4:a8:
39:46:5c:f4:d3:41:76:ba:7b:03:34:8c:c2:ed:24:30:87:05:
38:83:a0:2f:7d:f0:2f:26:66:fa:93:ea:a0:04:77:b6:d6:a8:
19:8c:8a:52:99:b5:6d:aa:f4:68:20:eb:f9:86:ff:b5:46:6c:
45:50:34:9f:2e:60:a2:80:5e:a8:8c:57:a9:5e:68:8c:04:ca:
89:5a:aa:46:9c:d1:b2:1e:3c:79:2b:d6:60:d7:38:db:a4:a0:
8b:00:d1:55:df:3c:d9:1f:ce:34:90:66:a9:66:e9:aa:47:e3:
ec:73:10:14:42:7d:eb:8d:63:26:fd:3f:42:25:5c:4d:ac:9b:
08:1f:03:50:6a:71:42:85:76:ab:50:43:ab:80:6f:09:a3:81:
26:a7:f2:52:fb:ac:29:6b:4b:56:32:99:25:78:3f:e9:dc:11:
44:02:9a:04:1b:5f:7f:7b:fb:c2:60:69:17:03:04:b1:6e:51:
41:b3:52:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:31 2026 by rpki-client