
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114457741306429463/0/3230322e39332e3235322e302f32322d3332203d3e2034383038.roa
File: 3230322e39332e3235322e302f32322d3332203d3e2034383038.roa (raw, json)
Hash identifier: kK/ACVhxw+EM5uNXfp+kpIl6rn/PuCSg8zqiCgwErdA=
Subject key identifier: 6F:B4:06:97:04:11:80:AB:E5:A5:C4:26:64:C1:8A:42:0B:54:65:3B
Certificate issuer: /CN=FFF96F8B13C936AC197ADB438E27C4E998F8642E
Certificate serial: 38E1782A75314D5102AC13314E602B32ABF4BD52
Authority key identifier: FF:F9:6F:8B:13:C9:36:AC:19:7A:DB:43:8E:27:C4:E9:98:F8:64:2E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FFF96F8B13C936AC197ADB438E27C4E998F8642E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/3230322e39332e3235322e302f32322d3332203d3e2034383038.roa
Signing time: Wed 03 Jun 2026 08:06:47 +0000
ROA not before: Wed 03 Jun 2026 08:01:47 +0000
ROA not after: Wed 02 Jun 2027 08:06:47 +0000
asID: 4808
IP address blocks: 202.93.252.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.crl
rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FFF96F8B13C936AC197ADB438E27C4E998F8642E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:e1:78:2a:75:31:4d:51:02:ac:13:31:4e:60:2b:32:ab:f4:bd:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FFF96F8B13C936AC197ADB438E27C4E998F8642E
Validity
Not Before: Jun 3 08:01:47 2026 GMT
Not After : Jun 2 08:06:47 2027 GMT
Subject: CN=6FB40697041180ABE5A5C42664C18A420B54653B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:34:c0:db:6d:25:ca:cb:88:28:ec:7d:bb:63:
9e:44:aa:30:f9:58:78:fe:96:f7:a6:47:18:9e:dc:
81:ca:89:44:6e:d3:ce:c8:94:70:6a:37:43:e8:12:
95:0c:76:0d:2b:48:59:0b:98:3e:e0:c3:fb:b7:30:
f3:0b:d1:8c:ee:09:73:d7:3e:9f:bd:f4:88:43:f8:
12:83:89:6d:da:46:a2:ee:97:05:1a:73:7b:d2:80:
6d:21:25:f6:86:c0:a6:32:a9:c8:24:23:4b:51:9b:
91:a0:25:e9:f0:4b:6b:90:4a:37:45:cb:b1:95:16:
a4:7e:0b:93:40:69:da:a5:ef:52:b6:4f:ba:46:6e:
25:ba:d0:97:5e:f0:a9:46:8f:b2:6c:57:2c:a6:24:
28:52:1c:bf:b7:4e:21:87:19:ce:37:d4:5e:90:d7:
1a:5b:b0:be:bb:cc:f1:55:e8:af:9f:3f:52:ac:30:
20:1a:d2:73:f9:0f:92:82:21:6c:20:0b:e5:69:5c:
50:48:bd:5c:6c:8e:70:a9:b5:e6:ab:9b:08:21:07:
2f:d1:09:80:92:75:87:ed:44:c0:19:36:2b:8e:48:
98:e6:79:a2:7a:84:7c:26:65:aa:ce:55:60:e8:d8:
d2:40:4a:7e:c8:2c:0b:07:66:ad:fc:84:44:12:76:
89:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B4:06:97:04:11:80:AB:E5:A5:C4:26:64:C1:8A:42:0B:54:65:3B
X509v3 Authority Key Identifier:
keyid:FF:F9:6F:8B:13:C9:36:AC:19:7A:DB:43:8E:27:C4:E9:98:F8:64:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FFF96F8B13C936AC197ADB438E27C4E998F8642E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/3230322e39332e3235322e302f32322d3332203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.93.252.0/22
Signature Algorithm: sha256WithRSAEncryption
74:30:84:3a:73:75:75:6b:fb:3d:aa:75:6f:2d:e7:b6:8f:ad:
1a:4d:03:8b:54:44:64:59:4c:30:63:74:48:d2:27:f5:70:89:
f8:3b:19:eb:40:22:dc:7b:10:55:ce:5d:a7:5e:5e:06:d4:95:
97:1b:67:00:d8:9a:92:08:62:d8:a6:80:de:fe:f7:e3:f8:66:
79:b9:21:14:5a:94:a2:98:e7:f4:34:be:aa:f6:85:47:1a:1f:
45:1c:68:03:d9:00:be:4c:77:a6:93:14:75:40:1a:a6:f8:4b:
87:16:de:6c:a1:01:2f:d6:fa:d7:55:9f:63:58:83:0e:88:cb:
db:7f:ed:33:3b:e7:34:28:89:5a:f9:ff:67:20:0e:f9:35:c4:
de:b7:fd:ed:56:a8:1b:fb:a8:ce:12:09:d1:8d:43:74:8c:02:
9d:28:8f:55:25:7f:3f:83:34:b2:cc:04:17:75:35:5d:cf:63:
50:1f:a3:79:32:13:c0:90:f9:46:88:96:46:dd:ba:60:93:54:
b2:5a:1a:30:5d:49:fc:ef:5c:1c:3e:81:54:13:6c:50:8a:a7:
ec:33:09:43:28:ab:3b:60:1b:95:73:dd:5a:57:91:15:3e:92:
b7:23:89:d5:bd:e8:1d:81:2c:fb:e3:d1:79:67:03:13:be:36:
54:09:40:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:12 2026 by rpki-client