
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113606036054343699/0/3132322e302e39362e302f32302d3230203d3e203234343232.roa
File: 3132322e302e39362e302f32302d3230203d3e203234343232.roa (raw, json)
Hash identifier: Ja8cOr88YvnZATrU28wxxZEEKg9qD+UwbHDMP26tZ0Q=
Subject key identifier: 17:A2:03:90:76:D5:D3:AB:56:1B:F2:31:5F:76:C7:6C:E8:72:CF:60
Certificate issuer: /CN=644DEF11BE48198BC5CBDC05F25E712AB41AE3B6
Certificate serial: 3A160CB0149F23A77F28315DC8DE96FD9176E547
Authority key identifier: 64:4D:EF:11:BE:48:19:8B:C5:CB:DC:05:F2:5E:71:2A:B4:1A:E3:B6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/3132322e302e39362e302f32302d3230203d3e203234343232.roa
Signing time: Sun 31 May 2026 23:26:03 +0000
ROA not before: Sun 31 May 2026 23:21:03 +0000
ROA not after: Sun 30 May 2027 23:26:03 +0000
asID: 24422
IP address blocks: 122.0.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.crl
rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 18:08:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:16:0c:b0:14:9f:23:a7:7f:28:31:5d:c8:de:96:fd:91:76:e5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644DEF11BE48198BC5CBDC05F25E712AB41AE3B6
Validity
Not Before: May 31 23:21:03 2026 GMT
Not After : May 30 23:26:03 2027 GMT
Subject: CN=17A2039076D5D3AB561BF2315F76C76CE872CF60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6b:4b:db:6a:99:0d:03:f7:11:60:89:e7:96:
a8:44:23:c7:08:0b:a2:71:2c:ca:40:e4:fc:a1:ba:
93:a4:2b:86:85:d2:96:00:a2:f7:c0:e7:8e:83:d9:
97:27:65:6a:d8:71:2d:c4:b7:cb:56:05:a5:d5:fb:
5e:c3:bc:56:31:4d:6a:c8:19:30:bf:f1:0a:63:1c:
ab:f0:14:cf:90:fd:a0:1a:0f:47:e3:32:13:17:67:
26:a5:ff:28:5c:3a:d5:7f:fe:e2:da:4d:88:d3:b4:
6f:47:4b:36:a4:df:cd:4a:69:09:40:53:9a:e8:01:
ab:89:13:ed:8c:21:c5:ad:b6:45:58:55:b5:29:be:
d0:18:b4:e0:6c:23:49:90:e0:f5:16:e4:95:0d:a3:
eb:cd:1a:9f:e2:9c:1a:52:0a:45:9e:9e:d4:4c:80:
11:e0:fb:02:a4:8a:cf:fe:9b:42:ea:c4:3e:51:34:
9b:46:4d:e5:89:e2:db:e0:6f:5e:1e:bc:1e:e7:a9:
25:83:3a:c3:29:c9:71:43:47:6d:6a:ec:e3:82:d5:
29:8c:53:a7:1f:0a:c1:4d:af:f8:2f:25:d8:c6:cb:
7f:17:36:1c:98:24:a1:77:8b:e8:dd:24:89:fb:6b:
11:f2:9f:5f:f8:87:fc:a3:96:6f:8a:3a:97:aa:26:
73:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A2:03:90:76:D5:D3:AB:56:1B:F2:31:5F:76:C7:6C:E8:72:CF:60
X509v3 Authority Key Identifier:
keyid:64:4D:EF:11:BE:48:19:8B:C5:CB:DC:05:F2:5E:71:2A:B4:1A:E3:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/3132322e302e39362e302f32302d3230203d3e203234343232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.0.96.0/20
Signature Algorithm: sha256WithRSAEncryption
98:24:fe:9b:bc:bb:c8:17:a2:aa:5b:0e:44:77:83:72:90:9d:
b5:21:e0:b1:fc:46:4e:a1:a1:d8:1f:b6:76:4e:0c:e7:d2:18:
b3:ba:5b:03:51:59:3a:9d:0d:6c:d2:95:20:04:53:3f:59:c5:
33:d4:ff:02:23:53:cf:db:c6:33:79:ac:8a:d1:5b:dd:5a:04:
5c:79:8e:f6:35:f3:22:9d:a3:f1:d5:1d:f3:5a:3b:0b:05:dd:
5f:d4:e3:10:c5:2b:83:63:83:ce:b4:8c:ca:b6:7f:d5:df:37:
fd:10:e6:bf:57:30:96:60:79:3e:7e:95:33:57:ba:98:e5:3f:
da:18:1d:98:73:7b:7e:dc:d6:8f:60:76:3c:14:79:4c:94:2a:
a1:fa:fa:cf:a5:a6:61:54:22:6d:01:d2:fb:a5:cd:ea:f4:62:
f3:f5:f9:c0:22:b7:34:a8:b1:38:a0:c5:35:b7:bc:d4:6b:4e:
e2:d8:5d:e7:1b:ca:80:25:00:4d:88:35:1b:03:2f:ad:32:22:
63:ac:99:4f:c7:47:6a:80:26:f0:f1:94:91:e3:80:9d:c1:a7:
23:9a:62:c0:56:ab:ab:6e:fe:2a:b2:af:b8:60:c5:4b:7b:86:
fc:f3:10:17:4a:d4:28:37:00:a0:d8:88:c2:fa:16:43:0b:e3:
f3:43:1c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:03 2026 by rpki-client