
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3235322e302f32322d3234203d3e20323034373635.roa
File: 3130312e3233322e3235322e302f32322d3234203d3e20323034373635.roa (raw, json)
Hash identifier: Jf0nSP1QjgiNIQhdrUFTjytdDY0TmEhyfIpVa+7R0NI=
Subject key identifier: 6C:77:81:8C:90:49:32:A0:5D:91:E7:93:A3:36:4C:8A:46:86:53:5D
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 01ABCF3127A5B19EF237BEE9A63C584E557DE492
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3235322e302f32322d3234203d3e20323034373635.roa
Signing time: Mon 13 Jul 2026 03:46:36 +0000
ROA not before: Mon 13 Jul 2026 03:41:36 +0000
ROA not after: Mon 12 Jul 2027 03:46:36 +0000
asID: 204765
IP address blocks: 101.232.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 03:41:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:ab:cf:31:27:a5:b1:9e:f2:37:be:e9:a6:3c:58:4e:55:7d:e4:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: Jul 13 03:41:36 2026 GMT
Not After : Jul 12 03:46:36 2027 GMT
Subject: CN=6C77818C904932A05D91E793A3364C8A4686535D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1f:05:94:c7:dc:4b:21:92:c8:84:bb:1c:44:
a6:17:e7:b5:ad:35:ad:87:89:47:74:f3:00:09:05:
76:d4:94:5b:f7:12:91:20:71:26:b7:93:b9:55:75:
4c:7f:ed:a2:ba:7b:cf:48:2d:a4:7d:e0:c5:bd:95:
2e:14:51:a1:b6:2b:87:ed:4e:7f:7c:91:00:08:64:
b6:29:b6:f0:eb:70:a4:df:48:7f:75:7d:94:22:5b:
d4:b6:e8:49:20:1c:d7:e2:4b:f7:ff:b0:1a:8e:e7:
9f:24:65:64:67:34:9b:c7:11:80:21:9c:15:d9:dd:
d5:94:d2:89:08:f8:3a:b2:9b:40:6a:77:86:b6:d5:
92:76:2e:de:15:48:7a:e1:dc:87:2f:d7:c2:04:35:
a7:ff:39:d1:a6:08:d7:2a:6d:90:40:d2:7f:8d:51:
3d:91:7d:13:3d:16:55:5a:c1:22:a8:c6:d7:a3:9c:
ef:cf:44:2c:c1:ca:e0:8c:5d:a3:16:f1:8b:72:28:
0b:b1:5d:6c:c9:86:57:6e:c8:b9:d9:cf:48:61:39:
78:6d:ac:c4:c2:f9:70:d7:4d:89:30:fe:0b:ff:22:
52:dc:aa:2f:88:7c:96:a3:90:82:62:2f:37:fc:dc:
08:ca:b3:1c:71:00:50:0e:10:b8:dd:18:e5:10:ca:
bb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:77:81:8C:90:49:32:A0:5D:91:E7:93:A3:36:4C:8A:46:86:53:5D
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3235322e302f32322d3234203d3e20323034373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.232.252.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:25:7d:73:22:54:14:5d:3b:e9:3f:62:08:6e:a5:2d:03:06:
03:8e:f6:7d:bb:a1:6a:89:70:c4:73:4f:95:1c:52:4a:7e:53:
39:89:bd:d2:0d:82:c6:93:93:73:8b:e1:6b:e9:dd:48:34:8e:
de:2f:b0:74:e4:1e:6c:1e:01:4a:d8:61:ea:ff:bd:b8:09:ff:
69:1b:84:7b:1a:38:19:b1:33:9a:5d:3b:0c:35:f0:e3:78:ce:
eb:f4:1f:28:f6:44:be:7d:67:e7:83:b0:fd:e2:99:98:8b:09:
b3:65:3e:77:4a:69:b9:0e:56:26:02:e1:03:a1:45:6c:c6:30:
9f:2c:83:61:dd:87:aa:1a:24:96:2b:3e:dc:da:4a:38:b5:60:
47:79:81:df:dd:38:6e:f5:18:86:e4:ea:5a:61:61:cb:5a:41:
70:9d:93:0b:c4:f6:82:cf:2f:68:e6:75:2d:6d:84:31:3c:38:
69:30:6c:bf:ea:3f:9f:1d:2e:df:05:c4:3c:c1:ca:1a:92:68:
23:3d:74:5f:40:85:1d:70:f1:77:04:c6:83:59:b7:ae:22:24:
d4:53:f5:cb:40:eb:43:95:02:6a:e5:8d:e7:45:f6:8f:05:64:
3f:4a:ca:81:36:cf:b4:40:76:3d:46:6b:b8:18:92:06:c5:52:
1f:07:0d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:34:48 2026 by rpki-client