
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e31312e302f32342d3234203d3e203633353535.roa
File: 3232332e302e31312e302f32342d3234203d3e203633353535.roa (raw, json)
Hash identifier: /oPIIonpOifhWwPEEOw8cb79yk+0Qt0cKwd2H1SsSYs=
Subject key identifier: 11:31:08:45:B3:8C:4D:7F:6D:86:0F:72:DB:8E:98:F6:91:BD:29:A7
Certificate issuer: /CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251
Certificate serial: 13111DA28FC4EEDCA2CD98998EB724B608C6EC85
Authority key identifier: 42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e31312e302f32342d3234203d3e203633353535.roa
Signing time: Mon 15 Jun 2026 05:14:43 +0000
ROA not before: Mon 15 Jun 2026 05:09:43 +0000
ROA not after: Mon 14 Jun 2027 05:14:43 +0000
asID: 63555
IP address blocks: 223.0.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl
rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 18:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:11:1d:a2:8f:c4:ee:dc:a2:cd:98:99:8e:b7:24:b6:08:c6:ec:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251
Validity
Not Before: Jun 15 05:09:43 2026 GMT
Not After : Jun 14 05:14:43 2027 GMT
Subject: CN=11310845B38C4D7F6D860F72DB8E98F691BD29A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1b:0e:c9:d7:a9:ba:b6:ce:da:e2:ea:f5:03:
1d:fb:89:f1:8c:2c:07:cb:bf:95:db:1c:0a:fb:12:
19:79:c2:43:78:db:3a:50:c9:29:a3:b2:b0:70:00:
a7:cc:a2:af:2f:d7:ac:03:e5:aa:a2:bb:02:1b:de:
b2:33:62:08:76:8a:73:e3:cc:74:6a:a7:e6:7e:cd:
0e:55:be:5b:78:0a:b2:14:80:88:b1:0a:bf:94:e3:
c4:f5:38:1f:ae:95:14:a4:12:d3:a8:b2:fd:72:eb:
75:93:b5:20:d4:d4:44:eb:75:f2:93:7e:b1:0e:46:
3e:11:db:7b:98:1a:03:a7:e8:e7:04:c2:42:f3:81:
7f:f2:90:69:e9:ac:b2:66:ff:cd:67:f6:2d:34:30:
d2:26:17:f4:79:cb:c7:dd:d0:8d:e3:73:9b:77:71:
97:8b:52:d2:f6:8d:1a:69:82:03:81:fb:19:4f:16:
7c:cc:ef:b3:28:ac:4c:20:1f:ae:03:48:0e:1d:82:
8f:ad:84:ed:30:b4:8d:1d:f6:5b:2b:9b:8a:5f:10:
e4:dc:74:6c:30:e1:99:f5:c7:0c:37:8a:23:08:39:
9b:f5:f5:08:4c:bb:66:cc:66:80:32:0c:03:6d:80:
33:8a:0a:da:86:06:7a:73:73:a2:8a:e2:20:d4:7a:
ae:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:31:08:45:B3:8C:4D:7F:6D:86:0F:72:DB:8E:98:F6:91:BD:29:A7
X509v3 Authority Key Identifier:
keyid:42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e31312e302f32342d3234203d3e203633353535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.0.11.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:53:c9:05:a9:52:0f:49:de:3f:a8:e0:9e:24:8a:78:ad:34:
c3:1d:f2:34:ca:44:00:04:f0:86:62:5f:6c:72:7b:ce:66:2c:
56:10:ac:b1:04:39:37:59:7e:1f:ae:cf:8f:97:e4:d7:2c:ac:
b0:92:7a:53:e2:94:ed:39:34:9a:99:75:96:4c:dc:39:9e:5c:
cb:8a:c9:bc:3d:80:de:2d:47:40:fd:db:5f:f3:30:57:7e:49:
79:2e:87:71:3d:eb:bb:9d:33:43:71:1b:9a:f6:08:47:71:2f:
28:2d:f8:e2:49:7a:8a:f2:24:c4:d5:b9:e8:82:6c:a8:99:5d:
d5:b1:a8:cf:f3:65:78:09:db:1c:82:c0:aa:30:dc:8e:55:ec:
b1:ce:e1:56:14:e9:a9:a7:06:9e:88:e6:4b:2b:af:29:cd:ef:
1e:25:71:6e:3b:1f:05:1a:62:f3:02:ac:81:92:e2:a4:d4:06:
9c:2f:b6:88:8e:e8:60:37:16:a1:8d:9e:cb:78:2b:02:29:0b:
f5:1f:40:89:e4:0f:0f:32:00:60:4c:d5:17:8f:37:00:d3:07:
b5:aa:34:b9:df:a2:5b:3f:d7:78:d9:70:76:50:8d:73:a8:fb:
f0:ca:4b:51:ac:d5:0e:2b:1c:7e:8e:69:c3:47:9d:18:ed:9a:
2c:fa:6f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:21 2026 by rpki-client