
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1122065292994805797/0/3231302e37362e3137322e302f32322d3232203d3e20313334373632.roa
File: 3231302e37362e3137322e302f32322d3232203d3e20313334373632.roa (raw, json)
Hash identifier: EKUBeXes+M1jDCe7e1kc1oCmCgsBM6tO5sag3Ry34yY=
Subject key identifier: 2A:4A:EC:BA:AB:7B:60:CA:F4:2A:3D:DC:78:A1:39:2D:8A:81:66:41
Certificate issuer: /CN=B0B537B0747D6013B06152AEE77D15203B1916FA
Certificate serial: 17503E85FFD7CB3C5296F915203AA7795D07F24A
Authority key identifier: B0:B5:37:B0:74:7D:60:13:B0:61:52:AE:E7:7D:15:20:3B:19:16:FA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/3231302e37362e3137322e302f32322d3232203d3e20313334373632.roa
Signing time: Thu 25 Jun 2026 08:05:07 +0000
ROA not before: Thu 25 Jun 2026 08:00:07 +0000
ROA not after: Thu 24 Jun 2027 08:05:07 +0000
asID: 134762
IP address blocks: 210.76.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.crl
rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Jul 2026 07:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:50:3e:85:ff:d7:cb:3c:52:96:f9:15:20:3a:a7:79:5d:07:f2:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0B537B0747D6013B06152AEE77D15203B1916FA
Validity
Not Before: Jun 25 08:00:07 2026 GMT
Not After : Jun 24 08:05:07 2027 GMT
Subject: CN=2A4AECBAAB7B60CAF42A3DDC78A1392D8A816641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1c:d6:28:64:48:a5:5c:fd:9b:18:81:09:13:
31:9b:46:41:d0:7e:6c:98:99:96:c2:60:36:6e:58:
92:d4:3e:c6:2e:cb:29:c9:1d:3b:07:1e:50:49:10:
76:cc:43:e1:a9:59:df:58:fc:ea:50:8b:97:74:90:
f8:d7:5e:eb:05:3c:0e:8b:4b:a5:21:fc:40:5d:cc:
25:ea:44:1a:09:5b:f9:7a:b0:5a:0b:90:96:6f:50:
52:fc:a3:88:38:d6:91:5f:0a:e6:8c:09:c3:f5:fc:
b4:59:e0:59:89:f2:b4:2d:6d:c2:95:9d:11:1d:9e:
4a:6c:b9:f6:f6:c6:01:07:7e:46:0b:92:b5:16:9d:
69:4a:b1:7e:d6:c4:45:bf:48:01:d6:d3:e3:a8:d0:
68:a8:0f:5d:60:96:70:51:6c:95:58:e6:c7:bb:5b:
7b:08:96:78:97:37:a6:06:96:7c:a6:77:76:ef:b5:
b4:b3:a9:c9:ce:88:8d:49:ec:f4:2f:9d:b4:76:e1:
a0:30:22:fc:06:59:8f:19:26:28:f0:47:65:b3:f6:
82:0d:64:4b:84:2a:eb:8f:dd:73:3f:8f:99:e4:3e:
54:36:24:d2:a7:32:25:88:1f:a3:5c:2a:51:ad:7f:
41:8c:02:5d:13:e4:f8:bc:3c:13:84:4d:b2:bb:2f:
bd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4A:EC:BA:AB:7B:60:CA:F4:2A:3D:DC:78:A1:39:2D:8A:81:66:41
X509v3 Authority Key Identifier:
keyid:B0:B5:37:B0:74:7D:60:13:B0:61:52:AE:E7:7D:15:20:3B:19:16:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/3231302e37362e3137322e302f32322d3232203d3e20313334373632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.76.172.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:0b:6f:d1:ce:ed:13:44:7d:fe:5c:67:db:15:ba:06:1e:71:
ca:4e:2d:5c:cf:ee:21:a1:3a:b6:4f:b2:35:a7:01:51:29:9c:
dd:46:40:f9:8f:21:a2:32:1d:3f:8b:28:0d:aa:86:66:2b:02:
3b:5d:6c:95:88:42:ea:dd:b6:9f:3f:6e:89:b9:d3:f2:ed:4e:
a0:99:05:43:78:5a:2a:8a:18:01:87:2f:ab:0c:fb:f3:0f:ef:
0b:ad:a5:8c:2d:06:b7:93:ef:ee:8e:eb:1b:9d:96:d5:10:b5:
89:93:6b:05:9b:cd:f0:96:29:fb:29:40:ca:a5:8a:6b:4f:7c:
4e:61:b0:9a:8d:70:b3:11:1e:cc:f1:2a:46:a9:9b:1f:cf:e0:
21:43:90:99:ee:3a:60:50:10:5b:03:84:35:6e:20:23:eb:59:
f6:db:34:bb:e1:9e:2d:d8:21:30:44:e3:e0:4f:9f:b9:29:c5:
39:8b:7a:26:7e:db:c3:86:f6:0d:b6:59:c9:1c:4d:7c:e2:92:
16:5f:10:e7:87:36:8a:b3:99:89:dc:c7:d0:71:11:fc:12:fc:
71:98:6b:da:ff:3e:92:79:ce:b2:e0:b9:e4:b2:4a:2f:7a:f1:
45:df:7c:12:8b:3e:81:38:39:f1:5f:29:51:55:3e:a4:b0:88:
cb:28:cc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 18:08:35 2026 by rpki-client