
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3139322e302f32322d3234203d3e20323034373635.roa
File: 3130312e3233322e3139322e302f32322d3234203d3e20323034373635.roa (raw, json)
Hash identifier: /0sg8ccLTkO3g1ldJzbTiAFtKDlkkCPb7uCa7Ysudpo=
Subject key identifier: 56:BC:B0:02:7C:29:D8:8F:81:1D:38:C5:39:D2:D8:EA:E6:EC:68:39
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 5582793DDD2DA37A3EAA05312BB0FECC9F7DBB27
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3139322e302f32322d3234203d3e20323034373635.roa
Signing time: Mon 13 Jul 2026 03:46:34 +0000
ROA not before: Mon 13 Jul 2026 03:41:34 +0000
ROA not after: Mon 12 Jul 2027 03:46:34 +0000
asID: 204765
IP address blocks: 101.232.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 03:41:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:82:79:3d:dd:2d:a3:7a:3e:aa:05:31:2b:b0:fe:cc:9f:7d:bb:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: Jul 13 03:41:34 2026 GMT
Not After : Jul 12 03:46:34 2027 GMT
Subject: CN=56BCB0027C29D88F811D38C539D2D8EAE6EC6839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e8:32:55:33:b3:2e:5e:50:63:96:b9:93:9d:
41:c1:f2:f5:03:6e:ba:62:ee:79:20:da:ea:b6:b7:
9f:b1:fd:b5:ae:e4:a1:2a:ea:dd:df:eb:06:f9:bb:
6b:a7:ac:35:6a:10:e2:30:a8:4a:fd:a4:0c:70:b3:
56:51:f5:17:a4:54:ce:c0:54:c9:77:b9:e8:5c:53:
ed:78:7d:cb:04:2b:cd:17:98:54:48:57:6f:56:15:
fd:2c:49:1f:41:4c:c9:76:15:7c:6d:4b:b8:ff:86:
0f:90:a4:a8:cf:4b:4d:fb:88:22:6b:6e:18:a7:bc:
e6:f4:bd:c5:56:6a:a2:17:2d:c5:09:c7:9b:3c:82:
45:15:14:9e:61:f5:9e:26:a4:7e:83:ef:cf:83:c4:
d4:fd:f0:65:16:47:a7:0f:a6:1e:84:e8:c2:bd:4c:
63:b1:dc:b3:84:2e:f8:62:f4:07:02:42:d7:13:05:
05:d7:32:3a:87:36:ea:a4:bb:6a:9d:49:a1:b9:cd:
cf:6f:97:64:68:e8:ee:e0:5e:d0:77:3a:ca:c4:db:
07:f5:0f:21:78:a7:ad:dd:53:9c:ff:4a:12:5a:ff:
b4:89:b9:f4:af:18:67:c0:9b:4a:64:fd:23:8b:0f:
d2:66:b8:68:d5:aa:88:53:f7:6d:d3:db:70:8f:96:
32:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BC:B0:02:7C:29:D8:8F:81:1D:38:C5:39:D2:D8:EA:E6:EC:68:39
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3139322e302f32322d3234203d3e20323034373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.232.192.0/22
Signature Algorithm: sha256WithRSAEncryption
20:7b:00:a8:52:f3:4f:eb:c1:0a:21:a2:24:8c:a1:ec:44:71:
33:47:09:f7:79:b8:dc:c3:94:39:0d:6c:89:b4:64:5e:b4:0e:
95:1e:7e:e5:38:1d:4e:1e:4b:38:75:58:a1:bb:1d:6c:66:a1:
7a:54:cd:3b:13:ec:75:3a:c7:47:e5:1b:1b:ac:5c:e8:64:fa:
12:eb:b8:31:48:df:23:22:23:6e:6a:e7:24:af:39:99:14:c2:
fc:e0:49:4d:b3:fe:3b:4c:4d:f5:96:b2:19:31:ca:6f:f8:97:
6f:47:df:d7:b8:63:1d:0f:89:b4:d2:cb:20:47:22:e4:5f:18:
83:c6:97:7b:dc:79:8f:e8:08:0b:81:5a:a3:ff:6a:47:ca:34:
e4:0a:e0:4d:64:e9:5c:e1:62:69:e9:71:f8:62:19:ab:65:fe:
ea:03:d8:41:89:aa:ef:54:f2:9e:9d:b6:55:22:d3:9d:57:d0:
68:c9:5d:9a:9f:55:e7:c1:d7:20:bf:09:d5:d8:f4:69:28:d7:
dd:e9:f2:2f:9d:9a:a2:5b:92:4f:3f:04:70:83:3f:fe:7f:e8:
3e:10:bf:3d:07:07:ed:cd:3e:22:59:b3:5a:8d:8d:cf:07:af:
b2:38:ed:4d:99:67:f9:a0:b4:56:e2:7a:c4:49:82:c0:99:57:
b7:4b:eb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:34:48 2026 by rpki-client