
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1122065292994805797/0/3231302e37362e3136302e302f32322d3232203d3e20313334373632.roa
File: 3231302e37362e3136302e302f32322d3232203d3e20313334373632.roa (raw, json)
Hash identifier: SrpaphldTts5AcZEbZ+7FmR5HxvlWebU1eK0VABiMKY=
Subject key identifier: 5C:FB:84:1C:05:05:DF:5B:64:EA:FD:84:54:17:40:F4:23:BA:90:73
Certificate issuer: /CN=B0B537B0747D6013B06152AEE77D15203B1916FA
Certificate serial: 5A861E91AAF132477AF96E63049A8DBB8AAC6253
Authority key identifier: B0:B5:37:B0:74:7D:60:13:B0:61:52:AE:E7:7D:15:20:3B:19:16:FA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/3231302e37362e3136302e302f32322d3232203d3e20313334373632.roa
Signing time: Thu 25 Jun 2026 08:05:06 +0000
ROA not before: Thu 25 Jun 2026 08:00:06 +0000
ROA not after: Thu 24 Jun 2027 08:05:06 +0000
asID: 134762
IP address blocks: 210.76.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.crl
rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Jul 2026 07:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:86:1e:91:aa:f1:32:47:7a:f9:6e:63:04:9a:8d:bb:8a:ac:62:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0B537B0747D6013B06152AEE77D15203B1916FA
Validity
Not Before: Jun 25 08:00:06 2026 GMT
Not After : Jun 24 08:05:06 2027 GMT
Subject: CN=5CFB841C0505DF5B64EAFD84541740F423BA9073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bd:d6:48:06:da:10:aa:80:c1:0a:3b:c2:b0:
7c:a4:01:2f:d7:87:74:4b:7d:9b:e6:09:46:b9:e6:
1d:44:50:c2:f8:d1:26:9d:b6:68:e6:95:9e:e5:e8:
ae:95:92:23:b7:80:fc:75:af:79:aa:2d:26:ed:a8:
1c:f0:e9:22:6e:c3:04:e7:28:30:9b:ac:42:9c:ae:
e5:07:3b:88:36:b0:a8:2a:d2:a7:0d:16:8a:d0:bb:
9d:d7:1d:4b:07:ce:8c:45:30:42:1a:38:59:aa:c6:
e0:fd:41:6e:f3:ef:f7:f3:13:a8:29:ff:ec:66:de:
b8:91:75:57:b0:ee:6c:53:cb:37:1b:2d:cf:02:ad:
ee:c4:9d:8c:6c:af:08:3d:1d:57:9a:9e:49:c0:06:
b1:af:67:35:4c:3b:1c:9b:f5:af:70:e2:d0:1f:38:
37:2d:38:a2:17:45:e4:de:2d:58:fb:d9:15:0f:73:
84:b4:45:43:6d:10:c2:47:3f:d2:08:9b:a3:ec:61:
8a:d9:22:bf:b3:c3:c8:39:3b:42:46:0a:f2:73:50:
cf:a6:5a:e1:2d:a4:30:21:b2:3c:5c:92:4a:29:ba:
26:bd:66:f3:27:a8:28:a7:60:97:93:2f:3f:67:07:
36:99:f0:31:0d:75:59:73:45:b2:bc:39:44:60:57:
8e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FB:84:1C:05:05:DF:5B:64:EA:FD:84:54:17:40:F4:23:BA:90:73
X509v3 Authority Key Identifier:
keyid:B0:B5:37:B0:74:7D:60:13:B0:61:52:AE:E7:7D:15:20:3B:19:16:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/3231302e37362e3136302e302f32322d3232203d3e20313334373632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.76.160.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:83:a4:48:ce:ac:a6:89:14:58:fa:0c:7f:16:90:cd:f0:d9:
57:12:69:87:36:c7:ef:24:aa:c7:a5:6e:33:db:78:00:83:51:
8c:0a:da:aa:89:fb:e1:c4:5d:7f:b9:bc:6b:f4:31:df:0d:5c:
b4:a6:1c:c7:37:40:f2:42:2a:81:51:41:a2:82:86:01:13:5b:
6c:c8:6e:5b:d1:02:01:50:78:27:89:df:4d:02:94:af:d7:b3:
1d:aa:1d:cc:c3:02:50:90:5b:f7:a0:2f:64:64:6c:99:1c:cd:
ab:3a:97:eb:ec:17:5a:6f:dc:4e:d4:9e:33:af:74:d8:52:76:
ee:0a:b9:82:7d:a0:ca:82:47:ff:52:de:91:47:59:b1:e1:48:
40:6c:cd:56:16:c6:23:19:48:64:ed:bd:9e:9b:30:ae:f9:37:
12:e4:36:e8:43:3a:55:cf:88:de:17:e7:cb:cf:af:ce:4c:ef:
3b:8c:50:d7:43:f6:b5:df:7e:1a:d3:85:ef:cf:b3:2b:d0:3d:
f6:24:7a:b4:50:31:1b:dd:0e:25:11:26:b6:ea:9a:be:58:74:
e2:89:ee:b0:71:55:87:62:4b:97:06:d5:62:6b:50:64:f4:00:
1b:e5:02:c1:ef:e9:d2:91:51:f2:60:26:49:d9:a3:ec:ec:b3:
1e:1e:0a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 18:08:35 2026 by rpki-client