
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1122065292994805797/0/3231302e37362e3138382e302f32322d3232203d3e20313334373632.roa
File: 3231302e37362e3138382e302f32322d3232203d3e20313334373632.roa (raw, json)
Hash identifier: zI6ePoI0y2Fm1sSqrrUkSajPorMwE/xAmExyk0kFlus=
Subject key identifier: 5A:43:7C:EB:20:41:0C:AB:9B:A3:EA:BF:C5:EC:44:AF:03:09:B8:0D
Certificate issuer: /CN=B0B537B0747D6013B06152AEE77D15203B1916FA
Certificate serial: 0523468595514979EAD35471AB05598347A0C2B6
Authority key identifier: B0:B5:37:B0:74:7D:60:13:B0:61:52:AE:E7:7D:15:20:3B:19:16:FA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/3231302e37362e3138382e302f32322d3232203d3e20313334373632.roa
Signing time: Wed 24 Jun 2026 07:27:58 +0000
ROA not before: Wed 24 Jun 2026 07:22:58 +0000
ROA not after: Wed 23 Jun 2027 07:27:58 +0000
asID: 134762
IP address blocks: 210.76.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.crl
rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Jul 2026 07:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:23:46:85:95:51:49:79:ea:d3:54:71:ab:05:59:83:47:a0:c2:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0B537B0747D6013B06152AEE77D15203B1916FA
Validity
Not Before: Jun 24 07:22:58 2026 GMT
Not After : Jun 23 07:27:58 2027 GMT
Subject: CN=5A437CEB20410CAB9BA3EABFC5EC44AF0309B80D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:8f:bc:0f:8f:18:d7:b3:84:2b:9f:e2:bf:
46:2f:51:1d:84:97:cf:ed:86:74:77:8e:c6:38:ef:
12:e7:69:1a:1d:38:0a:a5:d7:6e:5d:43:46:0e:09:
e4:95:71:84:45:b9:18:1a:4a:d0:8d:fc:64:98:f3:
b7:6a:4a:37:c3:f6:64:07:74:c4:d3:48:48:42:63:
76:c5:59:00:aa:f5:5b:38:f0:7a:ad:28:75:5d:a2:
14:79:a0:42:f0:8f:48:ca:85:0f:c8:6d:0c:f6:a3:
5b:f4:af:b3:15:22:22:67:09:c3:74:8f:9d:cb:c2:
83:74:14:22:68:a4:d7:ac:b3:9e:f2:0b:f3:40:42:
02:3e:55:d9:99:4c:db:c5:cd:52:eb:5b:d7:b1:74:
9b:e1:df:3e:7b:1e:ce:a6:d2:71:f6:aa:18:3b:00:
24:95:10:30:54:2a:c3:85:e8:f9:67:b3:02:7f:a3:
db:34:99:bb:20:93:f8:b1:85:ef:66:27:cc:1b:46:
31:66:62:33:9e:d7:7f:6e:bf:4c:52:24:93:15:d4:
b8:8d:2b:42:33:b4:ba:5a:27:02:c0:66:8f:da:6a:
d0:df:fb:0b:43:97:4b:d1:85:8b:01:1b:fe:d0:c4:
19:b1:68:c6:58:2a:55:29:fa:75:f3:4b:9d:0d:17:
bd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:43:7C:EB:20:41:0C:AB:9B:A3:EA:BF:C5:EC:44:AF:03:09:B8:0D
X509v3 Authority Key Identifier:
keyid:B0:B5:37:B0:74:7D:60:13:B0:61:52:AE:E7:7D:15:20:3B:19:16:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/3231302e37362e3138382e302f32322d3232203d3e20313334373632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.76.188.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:bc:86:05:ac:17:48:89:8d:15:8d:59:b5:01:dd:c1:12:a2:
48:ba:a7:ea:05:c5:8b:42:15:cb:fe:5f:d8:6d:29:2a:66:c1:
1f:f0:62:bb:78:8b:8d:e9:ea:8d:c8:f5:1c:fe:ad:e4:4c:9c:
79:c0:1a:16:0e:73:2c:39:ca:a5:f1:09:0d:bf:12:99:c0:f1:
96:87:3b:91:51:3b:10:ee:dc:72:dc:1a:2c:2b:c4:97:e3:07:
b3:5a:04:35:4f:de:24:8a:11:da:bb:24:1c:83:0e:b2:eb:56:
81:48:96:0d:ea:e9:73:f7:d6:c5:11:79:5b:2d:ce:03:63:ee:
43:48:eb:dd:15:54:7c:16:cc:20:8b:d1:bc:b3:70:58:ed:de:
1d:ca:2d:f2:2c:ce:0b:5d:cc:eb:19:3a:1c:6f:a2:4d:9a:ef:
2b:98:10:ef:c6:bc:27:3b:e2:09:7b:ef:0f:27:b3:a0:0f:53:
98:ce:23:f8:40:99:fd:a9:75:2d:61:4f:08:90:64:fd:88:79:
21:91:44:2f:59:6b:df:5a:4c:5e:75:19:ea:a3:dd:92:36:c0:
0e:7d:28:9f:52:f8:de:42:15:59:bf:97:1f:05:91:f9:dc:6d:
7b:71:69:5a:c5:59:c4:4c:cb:9e:23:04:23:4f:62:76:ea:1a:
49:d8:0d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 18:09:19 2026 by rpki-client