
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1122065292994805797/0/3231302e37362e3138342e302f32322d3232203d3e20313334373632.roa
File: 3231302e37362e3138342e302f32322d3232203d3e20313334373632.roa (raw, json)
Hash identifier: KBOVI2UBdbeXRbsHVeTV6sbjrU6doYtA6rDMtJTlq1U=
Subject key identifier: BD:26:97:BF:68:39:7B:84:5B:07:E7:72:28:5C:51:6E:C8:3D:1F:5B
Certificate issuer: /CN=B0B537B0747D6013B06152AEE77D15203B1916FA
Certificate serial: 2873E163E279CA06F23637B5AEE97BF3026B0549
Authority key identifier: B0:B5:37:B0:74:7D:60:13:B0:61:52:AE:E7:7D:15:20:3B:19:16:FA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/3231302e37362e3138342e302f32322d3232203d3e20313334373632.roa
Signing time: Thu 25 Jun 2026 08:05:06 +0000
ROA not before: Thu 25 Jun 2026 08:00:06 +0000
ROA not after: Thu 24 Jun 2027 08:05:06 +0000
asID: 134762
IP address blocks: 210.76.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.crl
rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Jul 2026 07:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:73:e1:63:e2:79:ca:06:f2:36:37:b5:ae:e9:7b:f3:02:6b:05:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0B537B0747D6013B06152AEE77D15203B1916FA
Validity
Not Before: Jun 25 08:00:06 2026 GMT
Not After : Jun 24 08:05:06 2027 GMT
Subject: CN=BD2697BF68397B845B07E772285C516EC83D1F5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:53:af:63:45:4d:34:f2:36:70:a4:82:66:da:
26:f6:64:e9:1a:bb:b5:c1:f0:c0:03:7c:21:3b:b3:
2b:63:d5:0d:42:e9:2f:e9:96:12:5c:37:ef:b3:ef:
e1:89:69:98:36:94:db:08:85:cb:e3:a5:b2:d0:b7:
5a:78:51:c3:b8:98:18:3c:47:18:e7:3b:e4:07:f2:
9c:0b:d1:00:60:b9:1c:e8:71:b4:bf:69:60:08:c0:
83:bc:97:1c:7e:bd:2a:ca:8b:cc:f8:24:96:91:6b:
f0:f8:46:f9:d1:d4:2f:4f:0e:2b:a5:09:0f:77:91:
d9:02:a9:57:0d:03:ab:92:dc:dd:91:ad:15:d4:66:
fb:f8:3c:d4:1c:9e:3b:42:a5:b1:32:0b:65:a7:eb:
b1:19:a5:bf:e1:03:79:19:92:02:07:7a:29:9c:19:
81:b4:27:71:15:c5:50:af:6a:ae:3c:ce:0c:9c:72:
f7:3f:91:2c:9b:26:fd:77:e0:d5:85:aa:d3:be:b0:
26:5c:17:2b:ce:ce:1e:c9:40:56:41:4e:11:74:ce:
16:fc:75:0a:45:b1:f6:9a:fd:4f:88:13:02:38:b0:
d3:06:10:a8:c9:a5:b6:f3:33:ed:05:5f:81:13:b2:
38:51:6d:a3:10:c4:67:62:9e:95:a6:12:8b:de:25:
0a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:26:97:BF:68:39:7B:84:5B:07:E7:72:28:5C:51:6E:C8:3D:1F:5B
X509v3 Authority Key Identifier:
keyid:B0:B5:37:B0:74:7D:60:13:B0:61:52:AE:E7:7D:15:20:3B:19:16:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/3231302e37362e3138342e302f32322d3232203d3e20313334373632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.76.184.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:ee:7e:1e:66:b4:d0:63:d1:3e:8f:66:54:af:58:0e:b8:87:
79:ec:14:64:27:de:8c:8b:e4:3b:34:de:9e:a4:a6:99:34:2d:
99:9b:33:10:46:3a:66:78:16:3e:57:d8:89:ab:3e:a8:d3:46:
8f:5c:5a:04:d6:31:d7:5a:43:b2:a7:82:f0:cf:ca:cc:e1:eb:
5b:de:e5:42:09:31:7d:1f:cb:91:03:86:80:ed:39:88:2c:7a:
9b:07:0b:93:aa:f9:5d:c2:47:ae:4e:94:49:51:22:f7:a5:32:
6a:b2:62:b3:48:22:42:de:c5:ac:d0:f3:bf:03:af:2b:ab:57:
f1:e7:50:ef:10:12:98:83:43:23:51:d0:8b:bd:7c:d1:d5:c2:
0d:fa:72:84:f0:b6:67:91:93:07:16:6d:19:ae:0d:72:58:ac:
88:4e:96:c8:5e:00:2a:71:82:19:0c:53:32:d1:53:aa:e0:f2:
08:a0:6d:90:78:1d:cb:4c:dd:77:14:d3:42:f0:b9:ac:4f:98:
88:49:c9:8f:27:4c:f8:44:3c:c6:22:55:1b:da:1a:87:6e:cc:
19:68:da:dc:91:e0:83:62:83:eb:ce:98:e3:9c:8d:6b:11:45:
cc:39:64:e3:01:ec:f9:0c:d2:8c:32:08:17:79:e0:42:2b:e7:
9e:09:87:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 18:08:16 2026 by rpki-client