
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230332e3139322e31342e302f32342d3234203d3e203137373831.roa
File: 3230332e3139322e31342e302f32342d3234203d3e203137373831.roa (raw, json)
Hash identifier: C7pQnRLENNKawwBs1x742C4NQfWK3wR/8M1J5WHfE0I=
Subject key identifier: 89:DA:46:05:FC:8F:BC:24:F7:E3:0B:C3:B5:CD:1F:B2:29:6D:A6:5D
Certificate issuer: /CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D
Certificate serial: 1C800F43973263C81649F6920DFDF8532764EB31
Authority key identifier: 24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230332e3139322e31342e302f32342d3234203d3e203137373831.roa
Signing time: Fri 29 May 2026 08:43:59 +0000
ROA not before: Fri 29 May 2026 08:38:59 +0000
ROA not after: Fri 28 May 2027 08:43:59 +0000
asID: 17781
IP address blocks: 203.192.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl
rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 08:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:80:0f:43:97:32:63:c8:16:49:f6:92:0d:fd:f8:53:27:64:eb:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D
Validity
Not Before: May 29 08:38:59 2026 GMT
Not After : May 28 08:43:59 2027 GMT
Subject: CN=89DA4605FC8FBC24F7E30BC3B5CD1FB2296DA65D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f7:13:aa:86:32:c5:b3:af:27:4e:cc:aa:be:
61:34:03:e2:6c:4e:81:ce:0e:84:b0:41:6f:41:ef:
ec:53:cc:03:fb:0c:15:4b:77:07:43:bf:09:6c:66:
60:c0:ca:45:6f:0a:06:ea:8d:c0:e2:ab:de:e4:64:
e5:a5:d1:0b:a6:05:6e:66:d8:a2:c5:2e:d1:dd:d2:
20:29:b0:f8:2a:f6:1c:d3:cd:09:f1:12:f7:60:dc:
a6:8c:20:b5:c2:6e:39:0f:e2:89:c7:0c:2f:c5:ea:
de:01:fc:c5:7a:57:22:40:b8:b5:52:f9:2f:50:d7:
9c:d4:e4:88:b8:bc:db:70:21:2b:cc:d2:5e:9b:8a:
d2:4e:47:30:fe:94:c1:0c:bd:b4:de:4f:1a:bb:f7:
c2:c3:df:fb:2a:ac:04:2b:44:38:22:ed:1b:eb:93:
0a:a6:ad:07:c5:3e:ef:61:55:1b:ea:81:40:d7:85:
21:86:33:db:c6:df:3e:40:fc:a6:0e:a9:05:a7:7c:
31:53:ae:e4:43:d6:12:d3:0f:f2:a3:5a:f2:13:1d:
c6:e7:ec:eb:d3:54:1b:e9:e8:81:d6:a8:7c:e2:b9:
79:87:68:62:e9:98:e6:fc:96:5c:46:80:96:96:52:
40:b4:e7:ba:c5:07:70:a1:82:a7:c4:25:5f:79:8a:
47:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DA:46:05:FC:8F:BC:24:F7:E3:0B:C3:B5:CD:1F:B2:29:6D:A6:5D
X509v3 Authority Key Identifier:
keyid:24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230332e3139322e31342e302f32342d3234203d3e203137373831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.192.14.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:a8:79:6a:d3:7a:81:62:e6:56:d7:b9:33:97:09:1e:00:85:
c5:9b:7d:e1:02:01:78:9b:35:c5:8b:b7:00:b1:d5:4c:b9:2a:
3d:a9:3f:ec:dc:cf:10:49:c2:3c:f6:b9:99:9a:52:9d:d8:17:
eb:f1:b4:30:5e:11:15:8a:24:3d:b9:cf:a9:64:e8:4c:7a:d7:
b7:3f:ed:ba:11:8c:0d:bd:1b:18:e8:3f:55:35:a3:49:df:03:
e1:ba:35:7e:eb:42:28:34:d3:70:af:62:1b:76:f3:e5:21:71:
9b:9e:68:08:a4:9c:c1:ac:be:17:9e:24:41:34:5c:62:0b:bd:
e9:a8:36:06:6c:93:72:08:48:0c:0e:50:7d:b5:aa:7f:32:42:
2f:41:ef:d9:62:fd:eb:30:16:20:c0:7b:6e:10:1f:7b:00:eb:
a6:c8:cb:a3:2f:3e:b1:c2:ca:32:bb:8c:7a:8a:d7:6c:99:cc:
25:4f:d0:17:70:14:b4:06:0d:10:96:66:a2:0e:45:65:14:55:
f9:62:f0:c0:50:46:a7:27:0f:c5:20:84:66:5b:e5:14:fc:a3:
66:79:7d:68:d4:19:ee:f3:b6:71:b2:4e:0b:00:a8:b0:54:46:
7a:bd:b3:22:12:25:f5:63:ac:83:36:a5:52:b1:ae:ab:e8:40:
20:16:bb:88
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUHIAPQ5cyY8gWSfaSDf34Uydk6zEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQzMDJFM0ZFMUVDQUJCQ0JDQUU1MkZDODVGMkE5QjQ2
OTgxNTIzRDAeFw0yNjA1MjkwODM4NTlaFw0yNzA1MjgwODQzNTlaMDMxMTAvBgNV
BAMTKDg5REE0NjA1RkM4RkJDMjRGN0UzMEJDM0I1Q0QxRkIyMjk2REE2NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn9xOqhjLFs68nTsyqvmE0A+Js
ToHODoSwQW9B7+xTzAP7DBVLdwdDvwlsZmDAykVvCgbqjcDiq97kZOWl0QumBW5m
2KLFLtHd0iApsPgq9hzTzQnxEvdg3KaMILXCbjkP4onHDC/F6t4B/MV6VyJAuLVS
+S9Q15zU5Ii4vNtwISvM0l6bitJORzD+lMEMvbTeTxq798LD3/sqrAQrRDgi7Rvr
kwqmrQfFPu9hVRvqgUDXhSGGM9vG3z5A/KYOqQWnfDFTruRD1hLTD/KjWvITHcbn
7OvTVBvp6IHWqHziuXmHaGLpmOb8llxGgJaWUkC057rFB3ChgqfEJV95ikclAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUidpGBfyPvCT34wvDtc0fsiltpl0wHwYDVR0j
BBgwFoAUJDAuP+Hsq7y8rlL8hfKptGmBUj0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MjY1ODY5MzM5ODI2NTg3NS8wLzI0MzAyRTNGRTFFQ0FCQkNCQ0FFNTJGQzg1RjJB
OUI0Njk4MTUyM0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMjQzMDJFM0ZFMUVDQUJCQ0JDQUU1MkZDODVGMkE5QjQ2OTgxNTIzRC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTExMjY1ODY5MzM5ODI2NTg3NS8wLzMyMzAzMzJlMzEz
OTMyMmUzMTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM3MzgzMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAMvADjANBgkqhkiG9w0BAQsFAAOCAQEAqKh5atN6gWLmVte5M5cJHgCF
xZt94QIBeJs1xYu3ALHVTLkqPak/7NzPEEnCPPa5mZpSndgX6/G0MF4RFYokPbnP
qWToTHrXtz/tuhGMDb0bGOg/VTWjSd8D4bo1futCKDTTcK9iG3bz5SFxm55oCKSc
way+F54kQTRcYgu96ag2BmyTcghIDA5QfbWqfzJCL0Hv2WL96zAWIMB7bhAfewDr
psjLoy8+scLKMruMeorXbJnMJU/QF3AUtAYNEJZmog5FZRRV+WLwwFBGpycPxSCE
ZlvlFPyjZnl9aNQZ7vO2cbJOCwCosFRGer2zIhIl9WOsgzalUrGuq+hAIBa7iA==
-----END CERTIFICATE-----
Generated at Fri May 29 23:51:21 2026 by rpki-client