
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3231322e302f32322d3234203d3e20323034373635.roa
File: 3130312e3233322e3231322e302f32322d3234203d3e20323034373635.roa (raw, json)
Hash identifier: xfc/ZVPU0Q1vXAPScsLMB3KignGx3WH5eLiwYdm6I2w=
Subject key identifier: 92:B5:A0:F6:E3:72:8A:A8:FA:70:E7:98:E7:E6:2E:3E:47:36:0A:B2
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 67AF94BEA55E0835B9D5B61839D2A3093EA71858
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3231322e302f32322d3234203d3e20323034373635.roa
Signing time: Thu 16 Jul 2026 03:25:29 +0000
ROA not before: Thu 16 Jul 2026 03:20:29 +0000
ROA not after: Thu 15 Jul 2027 03:25:29 +0000
asID: 204765
IP address blocks: 101.232.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 03:41:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:af:94:be:a5:5e:08:35:b9:d5:b6:18:39:d2:a3:09:3e:a7:18:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: Jul 16 03:20:29 2026 GMT
Not After : Jul 15 03:25:29 2027 GMT
Subject: CN=92B5A0F6E3728AA8FA70E798E7E62E3E47360AB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9c:cf:25:1b:47:19:3b:7a:eb:2a:84:d1:52:
b1:76:ee:64:b7:da:f3:db:73:d4:72:de:e8:9c:13:
6c:0f:85:b0:9c:68:a5:96:bb:b1:4e:35:48:fc:30:
0b:f0:40:bf:1e:67:3c:69:22:7d:8b:3f:27:ba:11:
68:f3:4c:98:2a:aa:eb:b9:dc:1f:a2:29:44:f0:38:
ac:8c:05:bc:9e:e8:55:a6:7a:8e:47:69:44:1a:d1:
f8:dc:d2:20:f6:31:25:3d:c9:05:8d:07:1e:a5:f1:
6b:41:09:64:c9:47:7e:bf:fa:69:ac:dd:e3:5c:ab:
70:ae:79:a6:73:00:55:fd:f9:42:79:3d:65:9f:e2:
95:8b:2c:6c:e4:70:57:8b:10:10:67:ac:95:98:08:
12:c7:98:be:07:1e:d9:81:77:0a:c4:b2:c9:b6:ad:
a2:e3:34:40:12:c2:3a:49:66:4e:8c:01:a2:1b:a1:
14:54:83:c7:ac:d4:6d:66:0b:1c:2c:76:c6:39:63:
16:05:43:6c:f9:f1:da:ed:5e:bd:85:49:81:e2:07:
7f:90:be:ef:8f:db:e5:af:ec:87:c5:7c:8a:11:69:
bc:dc:aa:7a:32:4d:03:cb:b6:9f:69:85:93:5a:0c:
73:21:3d:cf:3f:79:46:3e:f5:8c:f8:8c:ff:b2:e5:
dc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B5:A0:F6:E3:72:8A:A8:FA:70:E7:98:E7:E6:2E:3E:47:36:0A:B2
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3231322e302f32322d3234203d3e20323034373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.232.212.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:1f:57:ff:3b:95:87:1d:0a:bb:ba:9f:40:7f:18:1f:89:b9:
14:22:b5:db:12:34:9d:6e:57:55:81:34:b9:14:45:bf:b7:99:
4f:1e:c5:f4:fc:94:d1:fd:86:52:52:94:01:ed:7d:76:92:95:
01:ff:88:52:9f:d4:43:7d:9c:aa:ac:a2:a4:62:39:6b:43:81:
c4:7e:5a:c5:28:0f:21:dd:8d:96:4a:c4:21:f1:96:b7:3f:1c:
df:55:2b:dc:93:eb:8c:49:51:15:0d:9b:7d:d8:4d:15:a5:bc:
63:9e:74:c2:a0:08:78:35:ba:cd:8d:8c:10:c1:0b:7e:4f:12:
1f:a7:b5:d7:ad:2d:f2:dc:1b:4e:3f:c9:38:95:5c:8c:db:f1:
c0:bc:ab:66:f7:6e:c2:c1:65:d6:cc:7f:25:cb:32:60:f4:41:
b2:c8:e1:a6:32:ba:e5:c2:7a:a8:2e:66:fb:e6:64:3f:1e:2c:
5c:de:04:a3:49:26:4b:4a:3e:b6:31:fe:78:37:c5:7d:95:bf:
3e:d8:b4:99:7c:3c:ba:91:73:70:ef:12:cc:fc:2a:bc:c8:d9:
5f:1a:6a:4e:c6:2f:eb:ef:4c:4a:dd:c6:45:79:48:d5:a7:c3:
c3:de:40:e6:ab:bb:18:89:88:69:22:5c:de:ba:39:04:bb:db:
c0:08:f1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:34:48 2026 by rpki-client