
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e34312e302f32342d3234203d3e203633353535.roa
File: 3232332e302e34312e302f32342d3234203d3e203633353535.roa (raw, json)
Hash identifier: VFL5gFLae8BFZyuSM0OErzlN1X4K1zN2RZPP5W4aWVU=
Subject key identifier: 57:A2:34:8C:11:0E:4F:9E:A8:D3:54:65:DD:7D:41:66:C5:9F:C9:87
Certificate issuer: /CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251
Certificate serial: 254E0A3D2EF064F945231752BF169F661FC22D91
Authority key identifier: 42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e34312e302f32342d3234203d3e203633353535.roa
Signing time: Mon 15 Jun 2026 05:14:44 +0000
ROA not before: Mon 15 Jun 2026 05:09:44 +0000
ROA not after: Mon 14 Jun 2027 05:14:44 +0000
asID: 63555
IP address blocks: 223.0.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl
rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 18:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:4e:0a:3d:2e:f0:64:f9:45:23:17:52:bf:16:9f:66:1f:c2:2d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251
Validity
Not Before: Jun 15 05:09:44 2026 GMT
Not After : Jun 14 05:14:44 2027 GMT
Subject: CN=57A2348C110E4F9EA8D35465DD7D4166C59FC987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:01:ab:b0:d9:1f:4f:64:6b:1c:69:9d:6c:a1:
21:5b:0d:08:c4:18:89:5f:79:41:29:57:5f:36:07:
aa:a7:fd:be:aa:35:f2:19:cc:56:ed:bc:8f:8d:6f:
6e:1c:76:03:96:40:01:f5:bc:39:e4:bf:07:da:ee:
a1:38:c4:b3:57:19:98:04:6c:36:3e:db:1f:7a:e5:
8f:b0:f0:69:99:e2:1c:26:3e:5d:61:e0:c7:95:f2:
50:c3:27:01:c1:ca:79:81:5c:2d:c4:69:5b:8f:21:
7f:09:d1:9b:dd:6d:74:e2:44:dc:52:09:69:1a:cb:
d6:b5:e7:c1:b5:38:67:e4:56:7c:27:16:85:03:72:
b0:b8:93:57:5c:fe:65:96:c0:bc:58:a5:6b:95:b8:
eb:20:72:94:26:11:60:8a:49:1d:d1:f0:3f:7d:3c:
cc:37:be:23:06:27:18:aa:28:40:c2:c4:9d:5a:11:
9f:34:6a:d0:0a:83:8b:ef:17:bc:87:3a:ea:c4:80:
fe:55:be:09:b6:22:60:d9:47:df:53:76:cd:76:fe:
87:92:43:2f:39:09:cb:72:6d:dd:43:b5:f3:87:55:
2b:e3:ad:59:15:d9:8f:6a:63:36:59:3a:73:45:13:
5e:c7:cb:38:2b:cc:63:dc:db:1c:f3:cf:a1:18:f6:
57:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A2:34:8C:11:0E:4F:9E:A8:D3:54:65:DD:7D:41:66:C5:9F:C9:87
X509v3 Authority Key Identifier:
keyid:42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e34312e302f32342d3234203d3e203633353535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.0.41.0/24
Signature Algorithm: sha256WithRSAEncryption
69:ae:2a:d3:c8:a8:c9:96:5d:80:cb:a2:02:09:3d:8a:5a:28:
74:3a:72:0c:d6:ce:e2:25:90:55:b4:7b:62:8c:a3:48:2d:11:
ac:e3:38:bd:17:09:cb:d8:6f:e9:12:d2:4f:41:71:f3:0c:c1:
20:20:a2:e8:73:51:7e:da:d0:81:a1:7e:96:9c:7d:84:22:56:
7b:51:fc:45:69:27:f6:7d:f0:9b:b1:09:ba:3a:18:7e:f9:6f:
49:34:05:be:a8:eb:6e:5b:f8:c1:06:f7:79:5a:b4:2d:58:4f:
1f:1d:a6:93:cd:d0:78:b8:36:be:4c:04:58:b6:7e:08:62:ea:
03:70:56:a7:d8:6f:93:f7:23:62:d1:6f:41:a6:c8:04:76:19:
d5:ab:e9:98:69:0a:07:f7:86:e2:7d:b0:9f:cc:d5:3e:a4:2b:
26:8f:03:b9:ff:24:29:19:29:1a:34:c4:a1:21:71:b0:88:7f:
bb:53:05:81:5c:59:67:77:92:bc:f4:db:67:c8:7d:2e:98:6f:
36:09:5f:86:98:aa:d7:7a:b4:b0:e0:d9:14:29:8b:5f:b0:3f:
fd:10:e6:a4:f5:73:56:d9:f2:20:d5:9e:a7:2f:14:e1:ef:d8:
eb:73:ba:ca:20:41:98:46:ec:0f:7c:74:ba:bf:b3:48:ad:19:
44:25:54:e6
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUJU4KPS7wZPlFIxdSvxafZh/CLZEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDI5Q0Y5NjcxRTBFMkVGRTg3MTNFOUE5QzNFRUI2NDQz
REM5MTI1MTAeFw0yNjA2MTUwNTA5NDRaFw0yNzA2MTQwNTE0NDRaMDMxMTAvBgNV
BAMTKDU3QTIzNDhDMTEwRTRGOUVBOEQzNTQ2NUREN0Q0MTY2QzU5RkM5ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMAauw2R9PZGscaZ1soSFbDQjE
GIlfeUEpV182B6qn/b6qNfIZzFbtvI+Nb24cdgOWQAH1vDnkvwfa7qE4xLNXGZgE
bDY+2x965Y+w8GmZ4hwmPl1h4MeV8lDDJwHBynmBXC3EaVuPIX8J0ZvdbXTiRNxS
CWkay9a158G1OGfkVnwnFoUDcrC4k1dc/mWWwLxYpWuVuOsgcpQmEWCKSR3R8D99
PMw3viMGJxiqKEDCxJ1aEZ80atAKg4vvF7yHOurEgP5Vvgm2ImDZR99Tds12/oeS
Qy85Cctybd1DtfOHVSvjrVkV2Y9qYzZZOnNFE17HyzgrzGPc2xzzz6EY9lebAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUV6I0jBEOT56o01Rl3X1BZsWfyYcwHwYDVR0j
BBgwFoAUQpz5Zx4OLv6HE+mpw+62RD3JElEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
ODc2OTQ1NTI1MDI3NjM3OS8wLzQyOUNGOTY3MUUwRTJFRkU4NzEzRTlBOUMzRUVC
NjQ0M0RDOTEyNTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNDI5Q0Y5NjcxRTBFMkVGRTg3MTNFOUE5QzNFRUI2NDQzREM5MTI1MS5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTE4NzY5NDU1MjUwMjc2Mzc5LzAvMzIzMjMzMmUzMDJl
MzQzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzMzNTM1MzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADfACkwDQYJKoZIhvcNAQELBQADggEBAGmuKtPIqMmWXYDLogIJPYpaKHQ6cgzW
zuIlkFW0e2KMo0gtEazjOL0XCcvYb+kS0k9BcfMMwSAgouhzUX7a0IGhfpacfYQi
VntR/EVpJ/Z98JuxCbo6GH75b0k0Bb6o625b+MEG93latC1YTx8dppPN0Hi4Nr5M
BFi2fghi6gNwVqfYb5P3I2LRb0GmyAR2GdWr6ZhpCgf3huJ9sJ/M1T6kKyaPA7n/
JCkZKRo0xKEhcbCIf7tTBYFcWWd3krz022fIfS6YbzYJX4aYqtd6tLDg2RQpi1+w
P/0Q5qT1c1bZ8iDVnqcvFOHv2OtzusogQZhG7A98dLq/s0itGUQlVOY=
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:15 2026 by rpki-client