
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e3132362e302f32342d3234203d3e203633353535.roa
File: 3232332e302e3132362e302f32342d3234203d3e203633353535.roa (raw, json)
Hash identifier: ElRD3wRac/xlPPybfG99RYpbrEsjqMxeTuRfW7LovL8=
Subject key identifier: 22:4F:88:13:52:06:47:D2:D3:5B:C4:53:38:97:78:68:C9:45:93:F8
Certificate issuer: /CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251
Certificate serial: 0A25102BAEF09369919B91F5F2F27DDFFC0690EA
Authority key identifier: 42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e3132362e302f32342d3234203d3e203633353535.roa
Signing time: Mon 15 Jun 2026 05:14:43 +0000
ROA not before: Mon 15 Jun 2026 05:09:43 +0000
ROA not after: Mon 14 Jun 2027 05:14:43 +0000
asID: 63555
IP address blocks: 223.0.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl
rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 18:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:25:10:2b:ae:f0:93:69:91:9b:91:f5:f2:f2:7d:df:fc:06:90:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251
Validity
Not Before: Jun 15 05:09:43 2026 GMT
Not After : Jun 14 05:14:43 2027 GMT
Subject: CN=224F8813520647D2D35BC45338977868C94593F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f7:03:67:56:39:33:54:a5:d5:09:88:3f:bc:
4a:8a:20:51:5f:35:25:f7:73:6e:88:be:4e:3d:7d:
50:3f:6f:18:b0:6a:f1:87:a4:e5:96:10:8e:79:29:
12:fc:c6:91:f9:5b:1c:99:dd:0e:a0:79:6a:4a:e7:
76:7e:a6:26:56:94:ed:fa:f0:a8:79:b9:a6:00:d7:
76:e7:cb:df:4d:3b:c7:70:d7:16:37:a4:f9:71:20:
0e:ca:8c:13:9c:8a:23:46:87:84:6c:7e:26:c8:31:
e8:af:9a:a9:a3:32:02:01:00:f0:ef:66:12:1e:12:
1e:02:68:95:56:ea:38:5a:e1:b6:e5:47:a4:31:40:
03:8f:0d:4c:ed:bb:ff:9e:b4:1d:99:d5:e0:77:8a:
d3:79:b5:4b:09:80:f4:f1:29:dd:82:e4:12:63:5a:
66:75:f1:f8:f4:47:e3:bf:de:3b:fb:f6:78:a1:00:
ef:4b:f0:b3:0c:d6:95:0d:d9:c3:d1:99:99:f7:dd:
90:90:73:34:f8:b5:cf:a2:14:4c:f9:f2:67:af:f2:
2e:5e:6b:b7:2c:f0:b9:87:60:1a:f6:77:7b:a6:70:
07:a5:63:a0:5d:74:1a:9b:04:ae:2a:3c:75:a4:11:
51:4b:19:57:71:34:9b:90:16:af:14:4f:5a:cd:ff:
f5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4F:88:13:52:06:47:D2:D3:5B:C4:53:38:97:78:68:C9:45:93:F8
X509v3 Authority Key Identifier:
keyid:42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e3132362e302f32342d3234203d3e203633353535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.0.126.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:1c:6d:e5:2d:ac:8a:46:88:39:ed:63:1a:fc:34:f9:52:93:
84:ae:0b:4e:ca:6e:65:a1:c7:d6:b8:75:1d:3e:1c:03:fb:58:
9a:6a:23:9f:88:00:e9:5d:13:42:02:21:c5:cc:79:57:75:46:
05:10:6d:88:27:4f:47:ad:f6:2c:6b:45:5a:c4:8c:d3:1e:94:
bc:d2:cb:18:d6:95:b0:28:ca:05:84:4c:6b:17:01:97:74:d9:
bf:3a:ab:84:56:d2:ce:53:ca:6a:b6:f7:5f:36:4e:df:ea:2e:
8a:e3:a7:5f:6e:b7:5c:ce:f2:8c:ba:4a:7c:6c:0b:20:0d:b3:
3f:f8:6d:99:cd:48:b5:25:d3:ad:c9:65:aa:ff:35:a6:37:c5:
a4:56:86:c8:c6:e5:34:cc:71:2a:e9:ad:7a:84:8c:71:73:32:
e1:3e:ac:5e:04:80:75:5a:d7:e7:05:c2:e9:32:fe:46:cb:ab:
29:2f:81:22:04:ef:a9:3d:16:1b:b3:9c:7e:f1:75:a0:21:5c:
72:d2:c3:15:0f:a7:ed:4f:52:2a:f6:de:01:87:33:2d:8a:5e:
4f:36:16:b7:ba:38:0b:fb:a2:38:d4:ad:1f:52:26:6d:68:80:
22:e3:57:aa:9c:ef:19:a5:e5:4e:95:c7:70:0f:3d:ea:d0:a5:
c3:1e:d5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 21:55:31 2026 by rpki-client