
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1122406123115118627/0/3231302e37362e33322e302f31392d3139203d3e2034383337.roa
File: 3231302e37362e33322e302f31392d3139203d3e2034383337.roa (raw, json)
Hash identifier: v5qZkA184lUeQZJHDQwhK9Q2fbhNxvuiIjmXjqZSX+Y=
Subject key identifier: 8E:F9:5F:0B:71:BC:58:47:CE:2E:53:1D:37:EA:6B:B5:4C:6E:E0:4E
Certificate issuer: /CN=3EEEE97335393C19F4043C9CE5E7352198F585B8
Certificate serial: 423D0AAA652FCD2B0D3D7FCDDA6CE9A4D05E0D01
Authority key identifier: 3E:EE:E9:73:35:39:3C:19:F4:04:3C:9C:E5:E7:35:21:98:F5:85:B8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EEEE97335393C19F4043C9CE5E7352198F585B8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1122406123115118627/0/3231302e37362e33322e302f31392d3139203d3e2034383337.roa
Signing time: Thu 25 Jun 2026 06:10:25 +0000
ROA not before: Thu 25 Jun 2026 06:05:25 +0000
ROA not after: Thu 24 Jun 2027 06:10:25 +0000
asID: 4837
IP address blocks: 210.76.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1122406123115118627/0/3EEEE97335393C19F4043C9CE5E7352198F585B8.crl
rsync://rpki-rps.cnnic.cn/repo/A1122406123115118627/0/3EEEE97335393C19F4043C9CE5E7352198F585B8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EEEE97335393C19F4043C9CE5E7352198F585B8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 07:58:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:3d:0a:aa:65:2f:cd:2b:0d:3d:7f:cd:da:6c:e9:a4:d0:5e:0d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3EEEE97335393C19F4043C9CE5E7352198F585B8
Validity
Not Before: Jun 25 06:05:25 2026 GMT
Not After : Jun 24 06:10:25 2027 GMT
Subject: CN=8EF95F0B71BC5847CE2E531D37EA6BB54C6EE04E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8a:44:89:80:b1:83:ee:64:10:e7:b1:0c:1c:
c7:77:96:68:a1:fe:88:ef:97:b0:50:5c:e3:a6:ab:
3f:70:a5:2c:4c:fb:90:c3:02:d1:7d:b3:1a:b6:8f:
80:8e:c3:5f:ca:4d:d2:24:06:7f:04:62:1f:b3:23:
65:76:38:69:f8:df:d7:ca:1f:ea:0b:5c:04:69:69:
8c:b2:f2:b1:10:9a:b4:38:b6:e9:37:1a:38:f5:9e:
8c:21:ed:a0:64:eb:ba:2e:2d:96:23:83:5b:c2:37:
d3:76:98:13:d0:03:64:79:db:6a:47:bd:7e:f9:4a:
37:bf:51:15:a0:22:0c:b6:61:ea:12:ce:1f:39:9a:
96:05:e8:b6:0b:13:0e:38:7f:41:9c:65:d1:b9:cf:
04:02:fb:8a:21:61:44:8a:09:f4:22:e7:16:39:51:
84:39:55:06:f7:4c:eb:66:83:00:cf:e4:be:80:00:
81:62:56:52:c6:00:a8:1e:93:c1:ca:3c:4b:cc:93:
67:3e:2f:d8:b7:bd:9d:ba:4e:d1:20:e5:d2:a9:3b:
fb:c3:6a:be:a7:d2:dd:3f:4b:e7:01:d7:3a:3f:ad:
52:78:bf:ce:0d:45:16:6b:c4:cd:f3:31:d1:9a:b1:
81:db:28:02:fb:84:77:83:7c:bb:fd:96:8b:fb:4b:
db:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F9:5F:0B:71:BC:58:47:CE:2E:53:1D:37:EA:6B:B5:4C:6E:E0:4E
X509v3 Authority Key Identifier:
keyid:3E:EE:E9:73:35:39:3C:19:F4:04:3C:9C:E5:E7:35:21:98:F5:85:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1122406123115118627/0/3EEEE97335393C19F4043C9CE5E7352198F585B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EEEE97335393C19F4043C9CE5E7352198F585B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122406123115118627/0/3231302e37362e33322e302f31392d3139203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.76.32.0/19
Signature Algorithm: sha256WithRSAEncryption
7f:e7:80:68:e5:55:1b:32:d0:96:6f:4e:f1:93:e6:02:18:78:
5e:07:e9:a0:46:25:ff:f1:46:76:01:ce:17:91:9c:2d:a1:85:
d1:a6:7a:eb:83:7e:ba:91:c2:03:35:56:98:b5:81:9a:f3:cb:
38:be:5f:72:bc:67:14:72:8c:b2:41:3d:8c:99:8c:7d:b5:82:
6c:4a:9b:96:e9:4e:b6:0a:51:98:76:3f:70:85:1f:c3:b6:00:
73:26:0d:ac:fb:dc:1e:35:f3:c9:5f:94:10:c3:d1:f1:46:d1:
84:8d:ea:c4:de:98:83:5e:dd:15:6d:b4:d1:30:18:07:e3:44:
f2:c8:de:b5:1d:48:5f:7b:8d:c4:80:dc:7a:f2:97:92:2c:61:
7a:9d:0c:61:2d:86:28:c5:fc:0d:a5:20:aa:48:8a:d3:66:3b:
9e:95:ba:9b:a5:ed:95:be:66:3a:54:1b:9d:90:34:e8:b9:f0:
f0:d8:f8:e3:77:21:79:e6:40:e9:45:5d:fb:20:db:02:f0:6d:
73:1c:b2:cf:a5:5e:69:b4:41:b0:0d:6f:b4:4f:5b:39:6f:e2:
db:4d:97:23:e5:5a:a1:7c:be:1c:6d:44:b3:bf:c8:ed:14:97:
da:c2:c4:b8:63:0d:1b:3b:e4:4c:a8:ae:1a:c7:a4:3b:c5:a0:
5d:2f:e5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:26 2026 by rpki-client