
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3230332e37362e3234322e302f32342d3234203d3e203536303436.roa
File: 3230332e37362e3234322e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier: /0VGREZBSQjhpA+J9YvDz6hSd0cUZP4iVcx2r4AbhlY=
Subject key identifier: 67:AF:56:09:30:D3:7D:06:20:09:2C:B1:CD:A5:32:E2:C3:D9:6A:AD
Certificate issuer: /CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE
Certificate serial: 5F5CCD5A0C54AD573FD23DD9B182D342FB34A0FD
Authority key identifier: EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3230332e37362e3234322e302f32342d3234203d3e203536303436.roa
Signing time: Fri 12 Jun 2026 06:31:21 +0000
ROA not before: Fri 12 Jun 2026 06:26:21 +0000
ROA not after: Fri 11 Jun 2027 06:31:21 +0000
asID: 56046
IP address blocks: 203.76.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl
rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:5c:cd:5a:0c:54:ad:57:3f:d2:3d:d9:b1:82:d3:42:fb:34:a0:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE
Validity
Not Before: Jun 12 06:26:21 2026 GMT
Not After : Jun 11 06:31:21 2027 GMT
Subject: CN=67AF560930D37D0620092CB1CDA532E2C3D96AAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a1:35:f7:7d:6a:ef:3b:ea:26:e5:f9:19:48:
4a:01:31:0f:06:3b:ab:f9:a1:eb:18:d1:e1:56:99:
7d:6b:71:fc:84:cd:07:b3:e1:9c:58:ba:b0:69:7f:
a1:b5:80:9a:1d:a3:50:15:dc:3b:24:88:b6:bc:f0:
81:8c:f5:48:7f:1c:e5:5a:ad:df:41:e5:f5:b8:87:
6f:95:d3:15:07:18:de:10:10:9a:1b:4d:dc:ab:4f:
a4:81:89:30:6a:98:81:ea:b3:d3:27:39:16:7d:8d:
f2:44:c1:03:f8:e4:e8:7a:7f:9c:d3:8d:0a:c9:ff:
b8:10:8b:72:68:27:d7:0e:ba:85:39:e0:ff:ad:6b:
3d:51:97:d7:61:0e:37:50:01:88:07:c3:c8:fd:ac:
bf:ac:9d:4f:5a:10:19:62:a4:6a:93:d8:55:db:d0:
1f:ef:52:a1:1e:b8:2b:4d:91:d2:1f:09:1d:22:c4:
fc:91:72:c1:23:3b:f0:ce:79:10:12:41:b7:46:e2:
22:14:10:ff:a8:60:36:24:04:e4:fb:9f:3b:9a:6d:
d1:32:50:26:cd:70:19:3c:86:af:02:e4:29:57:5a:
7b:77:6d:70:87:4d:3d:97:0e:89:fe:7d:66:18:7b:
ce:cd:a2:a1:f5:06:b2:f1:82:5d:25:d4:68:4b:ca:
25:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AF:56:09:30:D3:7D:06:20:09:2C:B1:CD:A5:32:E2:C3:D9:6A:AD
X509v3 Authority Key Identifier:
keyid:EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3230332e37362e3234322e302f32342d3234203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.76.242.0/24
Signature Algorithm: sha256WithRSAEncryption
02:ce:56:e2:76:55:c4:57:d0:68:4e:b4:06:ef:59:a9:e9:67:
c9:08:54:7a:9f:e5:1d:97:41:5f:3e:9f:f9:57:b0:84:b4:1d:
aa:92:cf:0e:32:a0:3a:78:6b:9c:53:6a:dd:7f:95:64:6a:10:
7a:77:1e:d6:02:32:07:16:30:28:9c:cf:13:88:b2:01:33:1b:
ad:41:c1:20:a5:5a:9a:9a:3e:c8:c1:ba:ba:dc:b9:88:c6:be:
ea:32:c6:20:84:39:9f:25:3c:fc:29:88:ab:c6:2f:b9:92:71:
d1:2d:9e:d7:86:3f:29:92:38:90:08:1b:c5:68:18:6c:6c:a4:
3b:8d:6d:90:9a:c4:ed:53:a8:18:a7:d5:dc:eb:24:29:b4:3c:
96:37:7f:cc:49:b6:9a:82:8b:08:83:70:7b:78:99:7e:5a:58:
47:91:78:98:0f:31:7e:65:fe:8d:c9:77:6d:b2:2d:9b:88:63:
29:15:bf:7f:39:74:2a:b2:3c:c3:48:ac:c4:e3:13:64:31:75:
0f:b6:90:11:10:67:8f:6e:48:4d:77:a6:fb:8d:78:c6:d3:c5:
37:5a:8d:2d:5a:d4:0f:61:f6:77:bf:4d:28:0e:4f:9b:d7:b0:
70:cd:7d:cd:d8:92:7c:43:0b:01:53:b2:5e:f3:4a:b0:f4:91:
8b:4a:0b:c6
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUX1zNWgxUrVc/0j3ZsYLTQvs0oP0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUI4MDY3MkFENDJBMjc5NkFGREI2Qzk5RjdGRkI2MjlF
NkEwQTRFRTAeFw0yNjA2MTIwNjI2MjFaFw0yNzA2MTEwNjMxMjFaMDMxMTAvBgNV
BAMTKDY3QUY1NjA5MzBEMzdEMDYyMDA5MkNCMUNEQTUzMkUyQzNEOTZBQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVoTX3fWrvO+om5fkZSEoBMQ8G
O6v5oesY0eFWmX1rcfyEzQez4ZxYurBpf6G1gJodo1AV3DskiLa88IGM9Uh/HOVa
rd9B5fW4h2+V0xUHGN4QEJobTdyrT6SBiTBqmIHqs9MnORZ9jfJEwQP45Oh6f5zT
jQrJ/7gQi3JoJ9cOuoU54P+taz1Rl9dhDjdQAYgHw8j9rL+snU9aEBlipGqT2FXb
0B/vUqEeuCtNkdIfCR0ixPyRcsEjO/DOeRASQbdG4iIUEP+oYDYkBOT7nzuabdEy
UCbNcBk8hq8C5ClXWnt3bXCHTT2XDon+fWYYe87NoqH1BrLxgl0l1GhLyiVXAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUZ69WCTDTfQYgCSyxzaUy4sPZaq0wHwYDVR0j
BBgwFoAU64BnKtQqJ5av22yZ9/+2KeagpO4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
ODUyNjYwNzY3MDI0NzQyNS8wL0VCODA2NzJBRDQyQTI3OTZBRkRCNkM5OUY3RkZC
NjI5RTZBMEE0RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRUI4MDY3MkFENDJBMjc5NkFGREI2Qzk5RjdGRkI2MjlFNkEwQTRFRS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5ODUyNjYwNzY3MDI0NzQyNS8wLzMyMzAzMzJlMzcz
NjJlMzIzNDMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAMtM8jANBgkqhkiG9w0BAQsFAAOCAQEAAs5W4nZVxFfQaE60Bu9Zqeln
yQhUep/lHZdBXz6f+VewhLQdqpLPDjKgOnhrnFNq3X+VZGoQence1gIyBxYwKJzP
E4iyATMbrUHBIKVampo+yMG6uty5iMa+6jLGIIQ5nyU8/CmIq8YvuZJx0S2e14Y/
KZI4kAgbxWgYbGykO41tkJrE7VOoGKfV3OskKbQ8ljd/zEm2moKLCINwe3iZflpY
R5F4mA8xfmX+jcl3bbItm4hjKRW/fzl0KrI8w0isxOMTZDF1D7aQERBnj25ITXem
+414xtPFN1qNLVrUD2H2d79NKA5Pm9ewcM19zdiSfEMLAVOyXvNKsPSRi0oLxg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:07:54 2026 by rpki-client