
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e31332e302f32342d3234203d3e203633353535.roa
File: 3232332e302e31332e302f32342d3234203d3e203633353535.roa (raw, json)
Hash identifier: wkZEWjSfmMCc17yDUYICtj/0PypJmWK507oPGjbX4Kc=
Subject key identifier: 81:6C:A0:6D:88:9E:C0:99:E3:20:AB:11:14:8B:36:F2:F8:E5:95:9C
Certificate issuer: /CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251
Certificate serial: 4B6EE039FC6F3B0FE802259258A51C4E36C0F7CC
Authority key identifier: 42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e31332e302f32342d3234203d3e203633353535.roa
Signing time: Mon 15 Jun 2026 05:14:44 +0000
ROA not before: Mon 15 Jun 2026 05:09:44 +0000
ROA not after: Mon 14 Jun 2027 05:14:44 +0000
asID: 63555
IP address blocks: 223.0.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl
rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 18:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:6e:e0:39:fc:6f:3b:0f:e8:02:25:92:58:a5:1c:4e:36:c0:f7:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251
Validity
Not Before: Jun 15 05:09:44 2026 GMT
Not After : Jun 14 05:14:44 2027 GMT
Subject: CN=816CA06D889EC099E320AB11148B36F2F8E5959C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:18:f6:b7:80:16:6c:a0:8f:7c:84:0f:2b:07:
01:bc:5f:9a:89:34:64:f8:ac:89:65:45:63:33:14:
9d:b5:ed:86:d7:50:dc:2f:a6:7e:c1:ee:51:b5:d4:
25:5d:2e:35:39:40:28:55:3b:3c:4d:33:d6:1c:f5:
d4:5b:0b:4e:47:be:43:74:76:0a:39:e6:9b:4f:3c:
cf:91:f4:50:ce:4b:2a:fb:33:b6:46:cf:c7:ba:25:
9e:77:80:84:8a:3b:a9:c1:5b:50:f0:bd:5c:7c:be:
28:1b:58:65:fb:f1:d3:e7:29:1e:1c:9f:60:27:5a:
9d:53:44:5e:d5:65:55:04:dd:82:01:f0:d5:b4:98:
dd:1a:d5:c4:83:2c:88:f4:97:d7:58:0f:32:b9:5b:
30:d0:ec:ba:f7:45:40:df:a3:7a:dd:0c:1a:61:b1:
db:1c:40:e5:d5:fa:64:2c:13:c1:52:71:72:12:2a:
42:33:c8:24:ef:0e:9a:e0:eb:f4:df:68:a3:88:30:
35:74:db:bd:99:f9:05:81:d2:37:f6:c8:4f:e1:7d:
0f:10:17:f6:39:e7:e1:ab:d9:d5:04:46:31:bf:7c:
e8:84:d9:e3:f8:f0:42:10:52:8a:b5:e2:2a:81:cc:
b9:c8:b6:da:59:cc:82:2d:1a:18:fb:03:d2:33:63:
4c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6C:A0:6D:88:9E:C0:99:E3:20:AB:11:14:8B:36:F2:F8:E5:95:9C
X509v3 Authority Key Identifier:
keyid:42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e31332e302f32342d3234203d3e203633353535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.0.13.0/24
Signature Algorithm: sha256WithRSAEncryption
03:72:e1:ed:8a:4a:48:f7:52:87:33:ed:04:3c:9a:80:ef:a8:
4b:63:a7:12:f3:4a:f8:ad:38:da:2a:f0:6c:82:e5:c5:e3:25:
4b:6c:5a:e1:42:d3:67:e1:b1:c2:a8:fb:d9:d9:66:bb:94:64:
86:04:5e:20:a5:b1:70:f0:4a:4c:c7:0f:c7:fc:ea:67:3c:f5:
16:36:e0:0c:37:05:32:60:05:f1:1e:4f:11:d8:4a:0f:8d:2c:
86:4f:b6:cf:7e:13:9d:cb:1b:e3:27:d8:46:8f:bd:3e:53:d9:
fc:35:ca:42:32:bd:bc:99:79:f6:e5:a2:8f:ff:f6:58:d9:68:
97:5c:c5:84:df:a9:2d:2b:47:5a:52:68:e7:62:b9:dc:79:59:
69:d7:fa:4f:35:9e:33:62:73:e9:c3:86:fb:53:72:19:ed:9c:
7a:78:f5:32:dd:80:7f:e2:0e:da:cc:96:ef:d9:43:d3:24:32:
7c:80:11:8a:23:7e:c7:c7:cf:05:6a:15:65:73:f9:66:2d:59:
9f:de:22:36:01:bc:6d:36:25:e5:d4:ab:19:9a:3a:f8:9a:70:
be:7f:80:2c:11:54:09:e7:ec:bf:46:e5:77:02:d9:20:fd:da:
81:72:ff:25:55:5b:35:50:05:5a:47:6b:61:4a:87:89:64:5a:
ba:30:fb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:19 2026 by rpki-client