
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230332e3139322e31362e302f32342d3234203d3e203137373831.roa
File: 3230332e3139322e31362e302f32342d3234203d3e203137373831.roa (raw, json)
Hash identifier: o1cwMuKJtWT+7Uff4dbGVEK93EucJkFrdoxPX5tQr2M=
Subject key identifier: 8B:15:79:0B:76:B2:D3:C8:66:C7:E0:92:E8:B3:37:73:42:17:00:D0
Certificate issuer: /CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D
Certificate serial: 556DE1418C7F6AA9427637D425A716F6B85A8DF9
Authority key identifier: 24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230332e3139322e31362e302f32342d3234203d3e203137373831.roa
Signing time: Fri 29 May 2026 08:43:58 +0000
ROA not before: Fri 29 May 2026 08:38:58 +0000
ROA not after: Fri 28 May 2027 08:43:58 +0000
asID: 17781
IP address blocks: 203.192.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl
rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 08:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:6d:e1:41:8c:7f:6a:a9:42:76:37:d4:25:a7:16:f6:b8:5a:8d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D
Validity
Not Before: May 29 08:38:58 2026 GMT
Not After : May 28 08:43:58 2027 GMT
Subject: CN=8B15790B76B2D3C866C7E092E8B33773421700D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b5:ef:1a:55:8a:c2:b5:06:6d:26:4b:9f:21:
26:30:a7:1a:82:55:fd:33:ae:fb:83:f3:82:b8:81:
a6:2e:a5:a9:c0:f7:38:b1:5a:a2:0a:47:62:25:5d:
dc:9a:c0:7b:ee:71:e4:05:ee:57:da:b7:d6:8d:d0:
85:4e:6f:94:63:03:01:a4:3a:b0:a0:4b:3f:35:93:
f1:a0:2c:a4:02:73:66:71:02:6c:0f:84:d7:3a:cb:
d4:fd:df:41:a0:67:5b:e1:d6:cc:6b:cf:69:a0:b8:
ed:da:bd:07:b4:06:ec:7e:9a:66:fa:7f:0d:57:44:
cd:cd:c7:22:08:17:92:52:3e:07:26:93:c7:52:99:
fd:17:9d:28:36:0f:52:04:85:38:a2:1f:d7:35:1b:
98:d4:72:04:70:a3:98:6a:88:69:3f:b5:3b:63:35:
dc:f0:36:d9:e8:e9:9d:87:55:57:da:8e:8a:30:bd:
6d:e5:3d:5f:a1:37:62:e6:4b:09:f5:29:a6:17:55:
23:01:2f:ea:e5:40:03:48:59:b9:9b:8d:61:68:f4:
13:ac:c8:dd:a4:14:d2:bc:ce:2f:42:30:03:20:4a:
75:53:1b:b0:99:9a:66:61:66:d0:24:fe:0d:26:47:
a8:36:0b:44:3d:57:6a:0b:f5:dd:2a:c1:2e:62:b1:
47:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:15:79:0B:76:B2:D3:C8:66:C7:E0:92:E8:B3:37:73:42:17:00:D0
X509v3 Authority Key Identifier:
keyid:24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230332e3139322e31362e302f32342d3234203d3e203137373831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.192.16.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:e3:5f:0c:b2:ac:65:0a:1a:39:3d:2b:95:22:ab:5a:57:a0:
46:91:54:5f:4f:fa:50:79:a0:ea:95:dc:69:5f:0b:47:8c:a4:
47:ad:6e:f9:12:b0:6d:2d:c3:3c:b9:bd:f8:27:20:b1:f9:0d:
a0:d9:35:0e:5b:e1:e4:ea:9c:3d:13:57:f7:2c:74:63:59:9a:
c3:8b:ef:14:ed:0d:a4:4a:d9:38:50:ea:17:f9:e8:ed:80:8c:
75:65:41:d0:ce:f0:5e:66:51:a3:8e:00:03:2d:bc:c5:a5:fd:
59:b1:35:1c:39:18:7a:1f:12:37:8a:6a:21:5a:28:2e:d2:d0:
31:b4:62:25:3e:c4:72:e0:9c:3e:e1:54:aa:3d:6f:5f:88:50:
37:31:90:25:7a:b7:63:12:2d:4c:67:c3:65:df:07:64:54:40:
d4:a1:0a:0d:c0:38:b9:ad:56:8a:9b:d2:e1:4c:c8:2b:39:30:
5a:8e:3f:24:8b:47:3d:b2:1a:fd:29:68:f1:03:71:99:23:1d:
07:26:36:2b:b0:24:b0:3d:d9:f6:a5:4a:b1:f0:e9:63:65:ea:
48:dc:f0:26:55:f3:71:63:60:6b:b1:a6:df:2a:72:b4:1d:8b:
fa:30:ef:72:0b:82:64:2f:32:f6:c9:9e:87:15:16:01:27:e5:
63:8f:f5:0f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:14 2026 by rpki-client