
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3230332e37362e3234302e302f32322d3232203d3e203233363530.roa
File: 3230332e37362e3234302e302f32322d3232203d3e203233363530.roa (raw, json)
Hash identifier: zPmr0GI+JpsN9KVx4WosnQlWqYGhIjNOI9/Fe++ZE5g=
Subject key identifier: 0F:D1:F2:06:34:1D:1F:AC:5A:29:44:12:A5:F9:80:78:B8:26:AB:79
Certificate issuer: /CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE
Certificate serial: 29ADE11D15DB20C8E8E8FBA167A11F29E1B9DF11
Authority key identifier: EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3230332e37362e3234302e302f32322d3232203d3e203233363530.roa
Signing time: Fri 12 Jun 2026 06:33:26 +0000
ROA not before: Fri 12 Jun 2026 06:28:26 +0000
ROA not after: Fri 11 Jun 2027 06:33:26 +0000
asID: 23650
IP address blocks: 203.76.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl
rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:ad:e1:1d:15:db:20:c8:e8:e8:fb:a1:67:a1:1f:29:e1:b9:df:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE
Validity
Not Before: Jun 12 06:28:26 2026 GMT
Not After : Jun 11 06:33:26 2027 GMT
Subject: CN=0FD1F206341D1FAC5A294412A5F98078B826AB79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f3:9b:7d:25:6b:3f:3a:e3:e3:38:58:65:8a:
34:9d:61:9a:55:4c:c1:ac:58:1f:dd:fa:d7:4f:cb:
06:64:46:9a:1f:50:b2:db:9d:60:44:fa:74:80:f6:
25:de:75:2b:fa:7b:71:ef:78:a9:9b:3a:bd:20:33:
48:33:98:2e:af:9e:3f:f3:65:17:03:d8:11:4b:ca:
2e:fd:67:f7:fd:c2:c7:5a:79:ed:e9:4c:77:12:92:
9a:c5:de:0f:7f:2f:43:44:1f:b2:b4:b5:80:ea:06:
17:bb:b8:b2:53:db:b8:d9:57:ea:47:c0:68:2e:26:
7b:5c:62:76:e4:00:42:dc:2d:b7:95:d5:00:b0:df:
c6:ee:0a:ec:ed:4c:8a:5e:85:bd:3e:04:2d:59:13:
d8:bd:07:40:4e:bd:48:20:78:5b:3f:44:eb:e9:fb:
c0:19:39:e0:a0:a4:c1:d1:2f:37:10:b8:8c:43:02:
c5:b2:b1:a0:8a:53:35:ac:9c:dc:e9:0d:40:c3:dc:
2c:3a:24:73:fe:5a:49:cd:52:dd:4d:4d:93:1d:d2:
bd:d4:80:0a:5f:bc:41:c3:05:92:a6:c1:0c:58:66:
b7:ce:78:26:f3:0f:cd:77:11:f0:26:91:ea:63:36:
cc:9b:65:98:c3:a6:08:00:0e:8b:3a:0b:97:b0:48:
6e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D1:F2:06:34:1D:1F:AC:5A:29:44:12:A5:F9:80:78:B8:26:AB:79
X509v3 Authority Key Identifier:
keyid:EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3230332e37362e3234302e302f32322d3232203d3e203233363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.76.240.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:dc:02:45:93:81:2f:f9:23:fe:85:6c:76:17:2a:f1:93:b0:
5a:17:2d:88:5b:da:47:df:56:e8:d5:8e:37:a2:89:d4:a0:a5:
14:2b:98:a7:9c:a9:c3:57:82:4d:2b:f0:74:05:9e:25:aa:1a:
1f:4a:78:d3:21:17:e1:fb:3b:42:ee:61:7f:3e:c1:00:a7:b6:
85:bd:0c:f3:16:dc:07:80:05:9d:87:84:94:7a:ea:e9:de:c3:
4c:a8:23:44:f4:e5:b9:4b:08:b7:cf:b2:7c:e5:3f:bb:09:f7:
1d:b3:26:5a:0b:9c:e7:8a:28:2d:e1:b6:88:a5:b1:71:14:4a:
9f:a6:a5:ab:49:a7:1e:69:00:df:e5:d3:6c:e5:b4:25:a8:63:
a5:3d:7b:4d:c0:f2:97:5f:9c:b4:2a:2a:11:1f:4c:08:90:a2:
74:34:e6:f8:3e:8e:f7:b8:a6:8a:ba:5a:6c:2f:0e:a3:b9:70:
d5:2c:df:2b:8f:1b:a5:59:68:8f:34:74:da:cd:1d:91:05:9a:
99:e8:70:c1:ee:99:b1:a6:66:e4:39:9f:73:2f:cf:87:fa:a1:
6c:50:56:4d:85:b6:f4:12:83:79:62:0e:4a:5f:8f:22:fe:14:
4d:1f:ff:d6:ac:94:a5:73:96:78:f8:9a:98:46:f9:2c:85:79:
85:af:5c:11
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:02:13 2026 by rpki-client