
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230332e3139322e32342e302f32342d3234203d3e203137373831.roa
File: 3230332e3139322e32342e302f32342d3234203d3e203137373831.roa (raw, json)
Hash identifier: BbMTunYrz1nmuNv7CTHzX20n2SaSGLdFMAbzTikvoko=
Subject key identifier: BD:98:F0:C5:65:CF:0B:81:0B:F0:86:0A:E5:77:BE:30:5F:B5:55:AC
Certificate issuer: /CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D
Certificate serial: 72F057D1F0C3C94644DC01B8671A2B38F61D8BD4
Authority key identifier: 24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230332e3139322e32342e302f32342d3234203d3e203137373831.roa
Signing time: Fri 29 May 2026 08:43:59 +0000
ROA not before: Fri 29 May 2026 08:38:59 +0000
ROA not after: Fri 28 May 2027 08:43:59 +0000
asID: 17781
IP address blocks: 203.192.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl
rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 08:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:f0:57:d1:f0:c3:c9:46:44:dc:01:b8:67:1a:2b:38:f6:1d:8b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D
Validity
Not Before: May 29 08:38:59 2026 GMT
Not After : May 28 08:43:59 2027 GMT
Subject: CN=BD98F0C565CF0B810BF0860AE577BE305FB555AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:21:93:fa:bb:c2:c6:38:ba:42:8e:e2:78:33:
7d:3e:df:ae:5c:26:c5:40:bf:c6:2e:0a:63:6f:a8:
dd:1a:e5:25:c0:f0:3c:7e:20:2b:c6:e3:48:32:ec:
1f:9f:48:2c:13:5b:ca:b3:49:21:a7:c9:f6:06:4e:
74:39:8e:cb:aa:4f:44:05:69:82:15:85:c0:5f:f6:
22:ce:12:46:9c:fb:b2:8e:d4:ef:6c:6a:fe:3a:bf:
9e:d4:50:5c:0f:76:2d:99:66:bc:48:06:25:11:f0:
0a:d4:3e:77:66:42:41:9c:e5:99:59:d7:87:ce:e1:
cd:e9:f1:c2:d7:8d:a9:57:ce:2a:a2:7b:e2:0c:93:
03:8b:bb:f3:08:53:a0:51:12:8f:34:d4:1e:36:47:
c5:21:3f:90:2c:38:54:50:14:d4:10:a9:f1:72:91:
3d:09:85:7d:be:69:40:d1:e7:98:a6:6a:26:dd:03:
ee:25:b7:a2:26:51:4f:4b:22:e8:fb:fd:42:1c:ae:
72:9a:af:46:f9:5f:33:ed:2f:31:6e:ff:5d:34:41:
d2:9b:39:e2:da:a3:2d:72:83:11:a7:64:d5:47:96:
59:c9:9d:5a:66:2e:c7:df:65:51:89:ba:6d:3b:bb:
06:ac:47:f3:d4:8f:d3:5e:94:31:c3:7d:fa:e5:94:
b0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:98:F0:C5:65:CF:0B:81:0B:F0:86:0A:E5:77:BE:30:5F:B5:55:AC
X509v3 Authority Key Identifier:
keyid:24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230332e3139322e32342e302f32342d3234203d3e203137373831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.192.24.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:d7:6d:3c:b0:97:65:03:58:4d:3f:25:f2:3b:6a:f3:a5:a3:
2e:fa:38:ae:66:a0:6c:18:e1:10:54:ff:ac:d0:36:56:12:2b:
ea:60:bd:c5:03:32:ac:49:9f:95:a8:b1:cb:88:3e:52:d6:de:
b6:72:9b:78:7c:bf:d2:44:a5:23:74:b7:fb:3d:ae:9c:6c:e0:
d8:c3:89:c7:55:19:47:99:30:34:24:f4:10:e7:65:a9:c6:54:
4f:92:33:4e:dc:19:d0:ab:ae:96:01:61:ad:bc:97:28:2b:d2:
77:e3:87:45:c3:51:2e:d8:ae:23:7e:3b:e8:08:85:af:a7:9d:
47:f2:0f:d5:31:d5:b6:0a:43:bb:82:7f:5b:20:c0:4e:53:d4:
52:f9:2e:74:39:f6:ad:2c:6b:87:87:32:18:b4:64:00:e6:ae:
4b:92:48:bb:98:f8:94:c7:15:af:c4:dc:3b:8a:be:7a:ff:ff:
5e:80:fb:01:3f:47:fa:b4:9c:31:68:3b:d6:71:2d:8d:61:d6:
0f:db:77:f3:89:76:51:0b:0e:84:cf:2e:53:94:42:05:f0:ac:
bd:25:4c:48:c3:70:e8:14:71:65:a0:49:bf:a8:37:d8:a6:04:
60:f2:a3:5d:49:e9:5a:7d:e8:c0:5b:b2:59:dd:14:ee:33:5e:
ab:10:b0:b9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:56:40 2026 by rpki-client