
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3231362e302f32322d3234203d3e20323034373635.roa
File: 3130312e3233322e3231362e302f32322d3234203d3e20323034373635.roa (raw, json)
Hash identifier: Idjjoy5317eBYu+nyDOXXCnOhaPQ4lKa05rCZCo6iv0=
Subject key identifier: AB:E7:82:1E:67:0B:90:89:AB:F5:8D:FD:7D:13:B0:F3:64:D9:1A:FE
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 495B273710C07920D9EB5CCC87DD04BD96B2A0BC
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3231362e302f32322d3234203d3e20323034373635.roa
Signing time: Mon 13 Jul 2026 03:46:38 +0000
ROA not before: Mon 13 Jul 2026 03:41:38 +0000
ROA not after: Mon 12 Jul 2027 03:46:38 +0000
asID: 204765
IP address blocks: 101.232.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 03:41:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:5b:27:37:10:c0:79:20:d9:eb:5c:cc:87:dd:04:bd:96:b2:a0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: Jul 13 03:41:38 2026 GMT
Not After : Jul 12 03:46:38 2027 GMT
Subject: CN=ABE7821E670B9089ABF58DFD7D13B0F364D91AFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:98:af:4c:b1:f5:6b:14:69:88:82:4f:4a:88:
69:a1:fc:6b:2c:93:b8:9d:bd:6d:51:97:f8:67:96:
f3:27:98:da:85:fe:8a:f6:47:8a:24:59:07:9b:80:
18:07:1e:b0:6f:c0:ae:2e:7f:c2:03:16:da:98:65:
32:33:b5:1f:dc:ef:ee:c7:d7:ef:66:54:5c:41:f9:
be:05:a7:5f:df:2a:21:e0:bb:e7:e2:87:f6:df:34:
2e:71:ee:61:1b:4b:9e:2b:d0:60:b1:24:5f:af:b9:
5b:c6:a4:6c:6b:78:fa:19:d6:7e:8d:66:78:98:78:
47:b7:eb:98:f5:06:65:58:79:ff:32:f0:9e:da:66:
58:cd:62:6d:53:fd:f3:7c:23:48:7d:11:3c:02:5b:
33:fc:37:e9:e7:e6:60:0b:62:26:69:e7:cc:c4:40:
1c:5c:bf:38:d4:f0:3c:9b:21:c7:47:94:68:b9:4d:
28:7c:ef:de:76:2c:55:fb:9e:93:5c:b2:de:94:e8:
bd:5f:36:e2:fd:53:6e:1d:6f:48:ff:2d:72:07:66:
9f:a3:25:01:d4:dd:ad:6e:5e:e7:21:f9:4e:1c:49:
d0:53:77:99:1c:f2:2d:ab:c4:1f:a0:c6:b6:a3:bf:
3e:07:29:5f:06:d3:4b:59:86:2e:c8:1a:b4:34:db:
bc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E7:82:1E:67:0B:90:89:AB:F5:8D:FD:7D:13:B0:F3:64:D9:1A:FE
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3231362e302f32322d3234203d3e20323034373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.232.216.0/22
Signature Algorithm: sha256WithRSAEncryption
93:eb:d9:8f:ab:8c:9a:2c:a2:81:a7:d0:a9:e4:e9:2f:d1:9e:
ee:6e:61:b3:66:de:6f:bc:a4:e2:8b:9f:08:49:e2:45:98:94:
95:f7:46:6d:a5:2e:15:a0:48:b0:96:88:65:24:18:0d:ac:5d:
00:36:76:9a:46:9e:55:fe:9c:0c:80:33:6f:21:70:71:ae:e8:
77:9f:d9:d8:6d:bf:f7:f3:42:cd:61:9c:3e:b2:2f:2c:f8:d2:
70:ad:8a:27:81:37:09:00:ca:1a:df:4a:e2:a1:5b:f6:55:2e:
c4:d1:c3:91:3c:51:86:10:d7:62:2a:25:6c:54:21:16:25:a1:
74:83:31:27:66:c5:ee:f6:c2:6f:ed:65:6f:0f:b5:98:96:1e:
6a:25:9a:dd:d9:fa:91:a9:d0:34:71:00:38:d1:2d:b1:f4:97:
a2:6f:92:8f:c1:30:71:86:9a:a7:da:82:04:45:05:16:17:9a:
64:d5:38:3d:3d:85:dc:f2:26:55:39:12:b2:6c:8b:5b:7a:81:
bd:09:fd:94:17:42:25:a2:57:9c:47:91:16:e9:21:c0:08:16:
b8:58:69:e2:a4:2a:e4:6b:9c:c9:d9:6f:69:81:27:9b:cf:21:
f5:a5:e9:10:82:8d:ce:73:15:a8:f1:1b:6b:12:79:9e:cc:61:
ce:c0:d4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:34:48 2026 by rpki-client