
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114457741306429463/0/3230322e39312e3138342e302f32332d3332203d3e2034383038.roa
File: 3230322e39312e3138342e302f32332d3332203d3e2034383038.roa (raw, json)
Hash identifier: x5BW1+RlHPJ1eIaJoW8xLLmvZjNlyPZpGHm7mjrN2v4=
Subject key identifier: 6C:FF:60:F3:A1:AF:28:16:BE:80:A6:61:DC:EC:0C:AC:D2:81:F0:52
Certificate issuer: /CN=FFF96F8B13C936AC197ADB438E27C4E998F8642E
Certificate serial: 54EC2E05B03129EBC3C3820F4A7BE1F2289D91B5
Authority key identifier: FF:F9:6F:8B:13:C9:36:AC:19:7A:DB:43:8E:27:C4:E9:98:F8:64:2E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FFF96F8B13C936AC197ADB438E27C4E998F8642E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/3230322e39312e3138342e302f32332d3332203d3e2034383038.roa
Signing time: Wed 03 Jun 2026 08:06:47 +0000
ROA not before: Wed 03 Jun 2026 08:01:47 +0000
ROA not after: Wed 02 Jun 2027 08:06:47 +0000
asID: 4808
IP address blocks: 202.91.184.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.crl
rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FFF96F8B13C936AC197ADB438E27C4E998F8642E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:ec:2e:05:b0:31:29:eb:c3:c3:82:0f:4a:7b:e1:f2:28:9d:91:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FFF96F8B13C936AC197ADB438E27C4E998F8642E
Validity
Not Before: Jun 3 08:01:47 2026 GMT
Not After : Jun 2 08:06:47 2027 GMT
Subject: CN=6CFF60F3A1AF2816BE80A661DCEC0CACD281F052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8c:5d:bb:54:03:4b:a2:b8:44:f2:ad:ab:13:
be:91:4f:87:70:18:3b:19:d2:38:51:5c:ea:73:6b:
09:b3:28:42:f4:39:5f:f5:56:eb:bd:de:3c:43:55:
72:6d:77:62:1f:4b:65:9c:37:8f:95:6f:41:a3:28:
b5:20:70:f2:ce:57:28:3f:3c:c1:15:72:cb:e4:be:
1a:66:3a:86:b1:65:a2:ce:04:15:23:f7:cf:7f:6d:
87:00:73:ee:ed:f3:b4:92:83:87:95:fb:37:ff:58:
18:11:ba:ee:49:3b:54:e0:e1:d0:37:ae:45:4f:8d:
63:fa:97:50:a3:c4:bb:c1:09:18:80:5c:f9:e9:3f:
de:4b:81:4e:67:f1:5e:a9:61:3f:de:cc:84:eb:90:
6e:ba:59:56:5c:6e:c4:fc:99:de:e1:74:0b:fb:28:
c3:8d:2c:26:a9:90:ba:81:22:19:b6:14:d8:19:a8:
6a:cd:d5:74:33:2d:95:18:42:99:bd:ab:75:bb:7f:
c2:35:19:2d:ff:e4:87:b3:43:29:fa:3d:4d:07:8f:
6b:af:02:c2:e3:4b:81:55:88:90:ee:e3:64:63:23:
8e:0e:59:cd:2e:70:c7:c1:7a:f9:09:da:e6:59:11:
43:df:c1:e3:dd:e1:1e:83:b9:ae:37:62:8e:82:68:
34:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FF:60:F3:A1:AF:28:16:BE:80:A6:61:DC:EC:0C:AC:D2:81:F0:52
X509v3 Authority Key Identifier:
keyid:FF:F9:6F:8B:13:C9:36:AC:19:7A:DB:43:8E:27:C4:E9:98:F8:64:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FFF96F8B13C936AC197ADB438E27C4E998F8642E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/3230322e39312e3138342e302f32332d3332203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.91.184.0/23
Signature Algorithm: sha256WithRSAEncryption
04:30:ec:47:e8:14:6c:ab:b3:71:1e:ba:0e:72:70:36:2e:04:
b6:c2:62:2f:6d:7b:03:77:0f:23:29:2f:28:ec:15:e7:45:bf:
90:fd:0e:2d:68:7e:b6:6e:fb:24:88:3e:7a:ba:bc:7e:c0:b9:
a0:67:19:e8:6a:5f:e1:ea:dd:39:b1:9b:d2:a8:6e:05:c9:dd:
a9:3b:d6:8c:31:d9:5a:53:02:20:fa:70:e5:d8:71:0f:74:4f:
53:0a:67:ed:e3:c3:6e:f4:89:e3:2d:ad:c9:9e:17:fe:e4:95:
4e:9e:eb:4c:34:8d:53:4f:80:db:a4:e6:69:0c:2c:8b:0f:d2:
70:9a:90:0f:e2:c3:52:0a:ec:14:3e:b1:21:8d:2b:b1:80:5f:
97:a6:db:4d:26:23:90:8e:db:d0:dc:5f:7b:09:77:36:ea:4f:
a1:08:0e:a9:a6:07:99:5c:68:1a:ff:1f:0a:18:41:1f:a5:f0:
a1:f3:a9:8c:80:1d:c9:ce:36:de:94:14:a7:b4:51:34:e8:98:
3c:b8:4d:43:17:5c:aa:bb:60:49:1d:68:11:d4:aa:8a:85:f7:
7b:ee:aa:36:1e:35:2e:fe:c4:a0:36:61:23:c6:c3:91:77:d9:
d7:7e:15:ae:a1:5a:0c:62:f0:85:ee:e6:eb:48:9a:64:95:6c:
38:09:b8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:16 2026 by rpki-client