
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230332e3139322e31332e302f32342d3234203d3e203137373831.roa
File: 3230332e3139322e31332e302f32342d3234203d3e203137373831.roa (raw, json)
Hash identifier: bq7zzFwnBzqyn7Gg9JxzkYCqrRUYNIitvDRYqPRHld0=
Subject key identifier: 9F:02:F9:89:A4:EA:15:17:7F:02:A9:E0:AD:E9:DD:C8:16:BC:73:1C
Certificate issuer: /CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D
Certificate serial: 37CB73C8A71A5F773926A982A0ED40E852E23110
Authority key identifier: 24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230332e3139322e31332e302f32342d3234203d3e203137373831.roa
Signing time: Fri 29 May 2026 08:44:00 +0000
ROA not before: Fri 29 May 2026 08:39:00 +0000
ROA not after: Fri 28 May 2027 08:44:00 +0000
asID: 17781
IP address blocks: 203.192.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl
rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 08:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:cb:73:c8:a7:1a:5f:77:39:26:a9:82:a0:ed:40:e8:52:e2:31:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D
Validity
Not Before: May 29 08:39:00 2026 GMT
Not After : May 28 08:44:00 2027 GMT
Subject: CN=9F02F989A4EA15177F02A9E0ADE9DDC816BC731C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:eb:0a:34:28:ae:cc:1d:cc:53:7b:7c:48:8f:
15:e2:d3:97:5c:90:92:30:71:eb:76:11:51:c7:02:
47:48:35:70:c3:00:e0:2a:2f:f9:2b:38:0c:7f:25:
e3:d5:bb:ee:4c:6c:e5:fa:5e:4a:c0:0a:40:a9:8d:
0e:d4:6d:b0:34:0f:8c:ca:17:d0:37:f5:ec:2e:6b:
7e:40:7c:cf:5c:58:d8:60:01:27:23:ae:72:e7:fe:
3e:95:53:db:1f:08:fb:dd:79:38:a9:c3:88:cb:83:
69:6e:43:5e:3a:6e:97:79:9b:20:4f:09:55:a9:25:
6e:c0:58:20:a6:73:30:6b:ab:60:bc:b4:83:13:27:
f6:26:6b:e5:bc:de:65:e2:e0:b6:a7:06:c8:f5:5a:
6f:23:85:0c:4e:d8:b1:bb:c1:03:d3:7b:34:a2:d9:
76:1c:c4:24:d9:1c:b7:e6:d2:fa:19:f5:2d:ee:b8:
0b:af:46:3e:09:80:f2:2c:58:6d:c7:f0:02:cc:c9:
92:32:67:f9:2f:90:bd:e3:6a:74:6f:d3:1e:43:73:
f4:48:bc:45:ac:b3:be:99:ec:60:f1:56:23:53:bf:
6e:c6:66:95:a1:20:32:c7:ee:7c:e3:3b:5e:63:80:
b1:32:e1:a7:9d:95:6a:27:80:c4:ab:48:8e:bc:a2:
e0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:02:F9:89:A4:EA:15:17:7F:02:A9:E0:AD:E9:DD:C8:16:BC:73:1C
X509v3 Authority Key Identifier:
keyid:24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230332e3139322e31332e302f32342d3234203d3e203137373831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.192.13.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:41:64:ab:13:56:e0:87:98:06:d2:80:30:1d:2f:de:36:9d:
bc:55:af:42:03:65:6a:48:c3:86:e3:80:2a:9d:06:28:b2:f9:
80:c1:33:3a:9b:31:e4:2a:e4:85:33:9a:17:32:bf:7e:a8:f6:
cf:e0:6d:b6:e1:94:cb:19:c4:14:0a:fc:99:f8:19:07:07:14:
08:e4:6c:b3:20:ce:80:9f:cf:1a:ad:17:45:3e:60:18:9f:59:
7d:5c:74:76:99:0c:27:2c:51:17:d6:08:56:7e:9e:f6:11:e6:
d4:f4:cb:1a:49:86:63:21:2c:cb:bd:3f:ab:35:6b:2f:f3:30:
d6:68:07:f6:a4:5c:ed:33:f0:59:c8:be:94:a1:4b:e6:f4:51:
b5:ca:da:7b:90:3f:05:f7:dd:1d:77:b1:74:79:d3:46:60:3f:
f4:db:8b:22:81:cf:9c:ce:4a:28:39:a1:b4:04:e0:1b:95:e4:
a5:bf:62:a7:52:eb:52:ef:6c:3c:c9:51:5b:e2:0e:df:1f:bf:
7a:d5:3d:2b:e6:15:34:f0:00:d0:d7:7c:97:4e:4b:10:17:46:
bb:97:7b:a0:1a:22:30:84:8d:92:25:83:57:de:d6:58:35:86:
7d:4c:03:a4:e6:13:69:88:84:b8:58:c1:88:e8:1f:e7:95:66:
72:5e:74:2e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:27 2026 by rpki-client