
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1122065292994805797/0/3231302e37362e3137362e302f32322d3232203d3e20313334373632.roa
File: 3231302e37362e3137362e302f32322d3232203d3e20313334373632.roa (raw, json)
Hash identifier: uCOWXNMePOZa/iksUWzRBEjUWdyxzN11zhwz3y1U4Ek=
Subject key identifier: 60:70:56:77:D7:4A:33:5A:AA:6B:21:0B:30:02:F9:2A:45:22:E8:8E
Certificate issuer: /CN=B0B537B0747D6013B06152AEE77D15203B1916FA
Certificate serial: 65B5694C38CDCAB2719613FB453601D7795E108E
Authority key identifier: B0:B5:37:B0:74:7D:60:13:B0:61:52:AE:E7:7D:15:20:3B:19:16:FA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/3231302e37362e3137362e302f32322d3232203d3e20313334373632.roa
Signing time: Thu 25 Jun 2026 08:05:06 +0000
ROA not before: Thu 25 Jun 2026 08:00:06 +0000
ROA not after: Thu 24 Jun 2027 08:05:06 +0000
asID: 134762
IP address blocks: 210.76.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.crl
rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Jul 2026 07:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:b5:69:4c:38:cd:ca:b2:71:96:13:fb:45:36:01:d7:79:5e:10:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0B537B0747D6013B06152AEE77D15203B1916FA
Validity
Not Before: Jun 25 08:00:06 2026 GMT
Not After : Jun 24 08:05:06 2027 GMT
Subject: CN=60705677D74A335AAA6B210B3002F92A4522E88E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:de:f1:9a:a6:3a:13:41:17:a0:62:05:d4:22:
49:b9:2f:a5:fb:c1:77:88:e5:e3:5e:5c:69:3c:0e:
be:b9:1a:a8:49:dd:0e:17:0e:e2:08:ab:3e:f6:e0:
22:cc:e5:13:37:80:38:46:c9:7f:7c:03:fd:c8:11:
3f:ff:93:2a:8f:18:9c:8c:72:30:2b:2e:f4:74:e9:
a0:af:9c:00:e9:14:68:fb:12:ec:18:fd:52:13:48:
2e:9c:df:b1:69:59:24:50:c0:a0:5d:31:5e:e8:03:
04:ea:31:4b:55:a1:eb:2b:03:1b:21:e3:ce:33:46:
14:9b:65:ec:b1:7f:9f:f7:db:fd:cc:52:de:78:ea:
e8:2d:66:bd:a2:18:40:cd:fa:a9:f7:6d:50:d6:3d:
c5:f9:63:20:aa:83:fd:d3:65:9a:38:a3:e1:93:99:
4a:6e:f2:19:60:d9:29:2f:7f:f0:a0:a6:3b:3e:83:
48:7f:03:71:af:5c:29:fe:14:a9:06:35:58:cd:c7:
cc:eb:a0:9b:a5:34:1f:93:99:21:1e:3c:9a:67:d8:
98:87:31:9e:46:25:bb:4f:6e:d1:02:ae:99:53:bd:
f8:99:06:10:75:25:b9:b8:5b:86:e4:16:a7:8f:67:
7f:51:98:b1:92:bf:1e:44:0d:26:b3:ef:3f:e8:c8:
a0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:70:56:77:D7:4A:33:5A:AA:6B:21:0B:30:02:F9:2A:45:22:E8:8E
X509v3 Authority Key Identifier:
keyid:B0:B5:37:B0:74:7D:60:13:B0:61:52:AE:E7:7D:15:20:3B:19:16:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/3231302e37362e3137362e302f32322d3232203d3e20313334373632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.76.176.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:fd:bb:74:b8:21:df:3a:37:08:82:c7:89:1a:e7:17:83:23:
c1:e5:c2:97:05:d1:46:e0:54:f4:2e:ae:69:fd:1c:38:cf:d0:
c3:f7:b3:b5:ab:a3:b4:d2:33:af:11:55:a3:a4:a1:38:9a:a1:
0b:d3:af:9b:ad:69:a2:f9:8a:4d:0a:3b:f9:45:5e:c6:87:29:
e4:05:af:c7:e0:6f:45:69:41:71:c8:aa:d8:24:6a:50:f0:fb:
64:5e:4f:4e:ba:01:95:d1:b4:41:33:16:9e:94:6a:b4:a4:46:
bb:ab:6e:36:3b:fc:d0:11:78:6f:e1:d8:51:dd:56:e3:26:f8:
ac:14:af:96:b6:79:46:85:10:f4:2a:78:ce:33:8c:83:58:47:
94:74:10:de:29:70:05:48:1e:23:eb:74:ad:11:ef:67:2b:5f:
cc:ba:8b:70:fe:30:d6:8b:d6:61:88:8e:db:52:3d:60:0d:12:
84:5c:8d:76:f2:fd:46:94:e4:41:c4:0f:93:9d:76:0a:49:2f:
99:51:2f:e4:49:0b:1f:df:70:31:82:de:47:79:4f:45:b3:31:
4d:35:b8:1e:c3:5c:6b:ab:64:69:b1:c1:3d:60:2e:ed:89:d7:
5d:b2:43:a8:1f:56:a1:7b:61:2e:5e:da:40:ef:30:62:9e:ef:
9a:3b:59:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 18:09:18 2026 by rpki-client