
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230332e3139322e352e302f32342d3234203d3e203137373831.roa
File: 3230332e3139322e352e302f32342d3234203d3e203137373831.roa (raw, json)
Hash identifier: BnkUoU7gJDO5a7aLhB5agXBQ3aLjPGSg0lU2EZRdkk0=
Subject key identifier: F2:A7:97:74:29:32:A3:F5:FB:E7:B2:62:12:00:6F:2A:ED:C4:3F:6F
Certificate issuer: /CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D
Certificate serial: 40EDE26A8D86D1171CE49F62064A35CA980E05C2
Authority key identifier: 24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230332e3139322e352e302f32342d3234203d3e203137373831.roa
Signing time: Fri 29 May 2026 08:43:59 +0000
ROA not before: Fri 29 May 2026 08:38:59 +0000
ROA not after: Fri 28 May 2027 08:43:59 +0000
asID: 17781
IP address blocks: 203.192.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl
rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 08:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:ed:e2:6a:8d:86:d1:17:1c:e4:9f:62:06:4a:35:ca:98:0e:05:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D
Validity
Not Before: May 29 08:38:59 2026 GMT
Not After : May 28 08:43:59 2027 GMT
Subject: CN=F2A797742932A3F5FBE7B26212006F2AEDC43F6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1b:9f:7d:2d:cc:21:b5:46:9e:5b:7d:95:1b:
d7:38:3c:12:58:7a:4d:d3:67:8c:b3:f1:26:19:b2:
9f:b3:73:e5:30:37:e9:12:02:68:cb:ea:23:eb:f9:
f9:48:27:79:da:b7:ec:e2:cc:f5:cb:39:17:b5:04:
63:b3:14:3c:ba:2a:70:9f:4d:04:7b:3d:41:87:ad:
23:6e:59:48:82:1a:84:3c:70:76:f1:21:af:b4:91:
fc:bf:3b:70:ff:4e:42:f9:8f:dd:e8:65:07:5e:4c:
b2:99:77:f1:ac:88:c6:64:d2:56:6e:c7:a7:73:20:
fd:28:ab:fb:26:69:b9:9f:21:ed:31:4b:90:e1:b4:
44:69:17:10:91:1f:b6:89:d9:b1:46:77:08:90:4d:
75:6a:5f:87:70:4b:75:ef:98:6c:51:41:51:d6:1c:
5b:bd:21:f1:50:9e:a9:f7:e0:d4:6b:ec:58:89:34:
06:3f:f5:57:82:5f:38:a2:62:38:52:d6:c5:c5:49:
2a:65:16:95:95:9a:9d:9f:5a:c3:2b:a7:d3:74:56:
0c:95:11:04:0f:cb:8c:43:7a:04:35:1e:a4:89:d5:
11:fb:24:28:d4:c0:0c:54:bf:27:a3:b8:93:7c:b3:
37:b9:de:bc:76:ec:1b:ad:54:de:22:7a:19:46:6f:
0b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A7:97:74:29:32:A3:F5:FB:E7:B2:62:12:00:6F:2A:ED:C4:3F:6F
X509v3 Authority Key Identifier:
keyid:24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230332e3139322e352e302f32342d3234203d3e203137373831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.192.5.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:62:34:8b:85:c3:1e:f7:ee:76:7f:42:be:5f:cc:d9:81:db:
0d:99:ab:c8:8c:38:65:50:ad:82:86:b6:6c:b7:03:45:51:ce:
48:50:ec:13:1d:31:d0:4b:61:1f:e3:0e:c9:7d:f6:fb:00:28:
5b:6d:c1:1a:f9:6b:82:64:3d:2a:fb:ec:8e:9e:31:fe:d0:4b:
64:53:66:66:99:70:50:7b:fa:7f:b0:ec:00:8a:e0:6e:81:93:
f1:72:0d:3d:12:25:30:3f:1c:87:15:ec:aa:c4:bc:e6:85:29:
16:e8:40:3c:c6:3b:30:15:d1:91:15:93:38:3a:b8:2b:ae:70:
e2:83:d1:d4:e4:d5:89:79:07:5e:55:e0:f6:34:8d:19:af:b8:
05:1b:0a:30:e8:81:df:0b:3e:5d:17:24:7a:fb:bc:07:bb:aa:
ae:55:75:11:ed:53:67:f4:33:09:72:6d:cd:12:19:37:46:26:
62:e1:b9:a7:7d:92:4b:b1:c5:65:4a:47:53:30:2b:c6:59:7c:
2d:b5:d3:79:af:4d:16:ba:c9:68:52:b9:40:80:9a:3d:23:34:
26:96:2f:66:2a:d0:c0:7a:8f:d0:75:c7:66:bd:c0:e1:aa:8f:
22:8d:9f:3c:b9:7b:4b:85:bd:10:01:f8:91:41:e5:87:2a:4f:
41:68:d8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:53:16 2026 by rpki-client