
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111882915819552787/0/3230332e37392e302e302f32302d3233203d3e2034383337.roa
File: 3230332e37392e302e302f32302d3233203d3e2034383337.roa (raw, json)
Hash identifier: iZk0qBKAsJdjY7IihKFZpnUxC226AAiytnSm3L2t6F8=
Subject key identifier: 0B:20:84:29:29:E2:C9:71:D2:25:7F:A6:4A:17:13:A0:D0:6A:AF:58
Certificate issuer: /CN=CCB400245E6C2E159A469D4699195E08ECCE5250
Certificate serial: 596A948E5C632A3605E39A2EF3DA85EF6D89D178
Authority key identifier: CC:B4:00:24:5E:6C:2E:15:9A:46:9D:46:99:19:5E:08:EC:CE:52:50
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCB400245E6C2E159A469D4699195E08ECCE5250.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/3230332e37392e302e302f32302d3233203d3e2034383337.roa
Signing time: Mon 29 Jun 2026 08:54:30 +0000
ROA not before: Mon 29 Jun 2026 08:49:30 +0000
ROA not after: Mon 28 Jun 2027 08:54:30 +0000
asID: 4837
IP address blocks: 203.79.0.0/20 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.crl
rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCB400245E6C2E159A469D4699195E08ECCE5250.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 10:32:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:6a:94:8e:5c:63:2a:36:05:e3:9a:2e:f3:da:85:ef:6d:89:d1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCB400245E6C2E159A469D4699195E08ECCE5250
Validity
Not Before: Jun 29 08:49:30 2026 GMT
Not After : Jun 28 08:54:30 2027 GMT
Subject: CN=0B20842929E2C971D2257FA64A1713A0D06AAF58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:83:44:a4:70:8e:df:27:8c:4f:90:89:8b:e9:
03:db:d9:28:02:0e:60:8f:35:d6:48:0a:0c:26:40:
cd:a5:b4:e9:49:86:78:8f:63:ba:4f:71:98:ba:8d:
ee:e3:89:b3:d0:3d:9c:9a:31:e3:7d:f6:77:83:89:
b7:ad:4f:a9:2e:d5:de:c4:8d:c3:27:87:23:c5:61:
94:57:ed:49:d6:7f:df:49:a0:f9:7e:3f:15:98:27:
ff:c9:f2:73:e4:05:6e:20:3d:b7:9b:ec:01:da:9a:
41:44:1a:f5:01:46:72:68:99:0e:30:13:1a:ab:4e:
76:b6:18:16:a7:be:2f:59:7e:06:1d:57:e0:37:12:
2c:7c:b2:1e:54:9e:35:46:9b:19:68:df:06:2f:a6:
cf:f0:93:ba:c1:e4:63:c4:4f:71:24:f2:b3:28:39:
2d:ac:c9:a9:0b:f8:fa:bb:04:81:c3:27:24:ce:f6:
20:61:49:83:7b:f0:7a:55:0d:67:7f:36:f3:f6:89:
e0:a1:3e:a7:3f:1e:ee:f2:3c:26:fe:e0:19:94:2f:
88:1b:6f:68:01:cf:a6:b0:1e:f0:42:5f:c1:c2:87:
a4:3d:fd:64:99:58:1c:30:e0:dc:42:15:db:aa:b6:
c7:35:1b:86:5f:e9:bc:e3:03:9d:62:de:65:f2:4d:
d9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:20:84:29:29:E2:C9:71:D2:25:7F:A6:4A:17:13:A0:D0:6A:AF:58
X509v3 Authority Key Identifier:
keyid:CC:B4:00:24:5E:6C:2E:15:9A:46:9D:46:99:19:5E:08:EC:CE:52:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCB400245E6C2E159A469D4699195E08ECCE5250.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/3230332e37392e302e302f32302d3233203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.79.0.0/20
Signature Algorithm: sha256WithRSAEncryption
81:8c:a1:9e:47:49:48:97:1f:b8:62:05:46:3c:19:22:47:43:
25:16:22:8f:7d:97:0a:fb:6b:c0:c9:c4:23:3d:3e:2a:e3:09:
41:1b:88:5e:f8:63:06:c1:69:f7:28:f1:24:8e:f1:90:06:d4:
ec:f6:cd:12:0c:a8:a7:f9:5f:fe:5e:85:ce:ea:57:44:af:40:
34:f8:58:6f:d3:04:3a:8d:89:27:ec:ed:5f:38:11:7d:35:38:
b0:3c:82:26:28:20:f4:42:9a:70:d1:f6:ed:64:a3:56:de:27:
97:bf:39:89:18:3e:3a:38:74:45:2f:28:f2:86:ef:11:2b:fa:
02:71:9a:a1:0f:b1:34:99:23:d8:7e:51:61:19:d4:a0:c4:e7:
f6:04:61:9f:cb:b5:70:99:e0:7c:fd:d6:e6:ae:e9:84:08:d1:
d8:d9:83:06:eb:f6:10:7f:cf:0d:42:c1:c9:70:f9:53:51:aa:
52:e4:81:a6:6f:ab:94:d8:11:8d:39:1a:e9:cf:8a:78:92:f2:
c4:07:8c:34:74:05:ba:69:73:77:82:a7:99:80:c6:5c:52:99:
ec:eb:d5:73:a1:e2:22:3b:dc:ce:f9:dd:37:a1:eb:f0:2b:cd:
00:fb:d6:5b:61:1f:ab:59:e0:c2:92:a8:9f:15:3b:fb:8a:d9:
9b:d6:65:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 21:54:30 2026 by rpki-client