
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e33302e302f32342d3234203d3e203633353535.roa
File: 3232332e302e33302e302f32342d3234203d3e203633353535.roa (raw, json)
Hash identifier: AhwYrA7rprhxjAUjJQ/8I1ajfiEMR/cG2JIYvnxOp/Y=
Subject key identifier: EE:68:69:20:B3:0A:44:D0:FF:93:DF:A4:BD:CB:2E:51:B0:26:ED:69
Certificate issuer: /CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251
Certificate serial: 63F5FDE89D4412348E7760B3D29972F4D1A9E426
Authority key identifier: 42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e33302e302f32342d3234203d3e203633353535.roa
Signing time: Mon 15 Jun 2026 05:14:43 +0000
ROA not before: Mon 15 Jun 2026 05:09:43 +0000
ROA not after: Mon 14 Jun 2027 05:14:43 +0000
asID: 63555
IP address blocks: 223.0.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl
rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 18:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:f5:fd:e8:9d:44:12:34:8e:77:60:b3:d2:99:72:f4:d1:a9:e4:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251
Validity
Not Before: Jun 15 05:09:43 2026 GMT
Not After : Jun 14 05:14:43 2027 GMT
Subject: CN=EE686920B30A44D0FF93DFA4BDCB2E51B026ED69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c3:86:9f:52:35:04:80:59:d5:ea:4f:e7:5c:
a7:39:1a:50:04:d5:e5:d9:d7:ff:06:fa:cb:22:98:
c4:9f:bd:b8:58:e9:b6:8f:d6:ae:3a:2f:34:38:f8:
6f:b5:22:3b:6e:80:a6:fa:4a:4d:b0:84:e0:af:07:
aa:54:12:43:80:ab:93:06:cc:1c:5c:3e:f2:06:37:
d4:10:14:32:c8:1b:01:78:2d:4b:bd:63:88:0e:e4:
7a:c3:34:6d:24:a6:e9:c9:a9:47:90:18:a6:96:64:
3d:c0:45:87:e6:3e:c6:b7:8a:5e:b3:80:ba:35:69:
0b:73:61:d4:07:0e:d1:19:9d:9a:3f:74:d7:ab:e8:
19:e3:b5:99:8e:b4:55:7c:ad:26:f2:dd:15:d2:82:
97:61:5e:3e:2c:cb:db:ce:9f:65:2d:85:95:7c:44:
63:c5:9e:97:a0:28:46:5b:e4:2a:3b:4b:51:e5:83:
f7:3e:87:98:80:fa:55:76:54:c2:6d:ed:a6:be:d4:
81:7d:69:d4:ea:c9:5a:98:74:89:e5:c1:d6:c6:ea:
03:74:68:b0:ab:08:53:b3:7b:bd:94:ab:74:01:11:
84:eb:13:4f:53:05:fb:57:50:4f:19:7b:24:99:84:
f4:e2:4a:45:2a:35:1d:e0:8f:f9:2a:40:2a:2f:71:
83:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:68:69:20:B3:0A:44:D0:FF:93:DF:A4:BD:CB:2E:51:B0:26:ED:69
X509v3 Authority Key Identifier:
keyid:42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e33302e302f32342d3234203d3e203633353535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.0.30.0/24
Signature Algorithm: sha256WithRSAEncryption
64:f8:f8:fa:c9:89:47:3d:60:37:32:7c:d8:7a:8a:58:22:32:
c6:57:9f:a6:b5:a1:c8:17:ef:4c:76:c3:8a:0d:c9:44:a9:0f:
5a:cd:33:62:fc:44:08:83:aa:d5:47:98:95:a3:95:8f:3e:c1:
aa:23:bf:74:8b:e0:a3:55:84:0f:77:11:0e:01:72:bf:e8:2b:
0f:4e:b8:1d:4b:d2:e2:43:79:d6:c4:8a:3e:96:68:c9:b0:97:
44:cc:38:77:00:89:5a:d8:97:bf:82:e4:f6:bd:ea:08:0e:79:
cf:c8:1d:0e:cc:6c:6d:d8:fb:88:0a:9b:59:04:5e:23:54:5e:
79:84:c5:bf:37:b6:0d:53:51:de:03:a7:f1:2e:92:b5:3a:5b:
a3:a9:16:d0:d6:94:31:03:a3:a2:22:a5:d4:13:31:32:32:bb:
42:f8:42:a5:84:b1:32:12:67:51:4a:4d:7d:f2:ae:a9:98:73:
14:bd:eb:f4:ec:13:a5:f4:81:cb:bd:c0:6c:d1:ff:e0:4c:ea:
58:84:03:41:bb:8a:63:7e:07:17:73:fb:6f:42:de:b3:e4:df:
87:79:01:a7:a2:3c:ee:e2:2e:9a:72:8d:8f:ac:9e:c7:d4:cd:
39:58:a3:3e:c3:24:4a:1d:3b:44:f2:6b:fe:f1:2f:95:54:a1:
4a:35:e6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:21 2026 by rpki-client