
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e38382e302f32322d3234203d3e20323034373635.roa
File: 3231312e3134392e38382e302f32322d3234203d3e20323034373635.roa (raw, json)
Hash identifier: re30P74Bbm0hmGv2RhIcziLM8r3Wt2LJElxw1K1ooLg=
Subject key identifier: 26:CA:7C:34:D0:EE:E5:91:6F:15:BB:C4:1E:D1:56:81:B9:60:73:E8
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 41A76632514845F8956BFEEDB5814FC7E9333201
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e38382e302f32322d3234203d3e20323034373635.roa
Signing time: Mon 13 Jul 2026 03:46:33 +0000
ROA not before: Mon 13 Jul 2026 03:41:33 +0000
ROA not after: Mon 12 Jul 2027 03:46:33 +0000
asID: 204765
IP address blocks: 211.149.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 03:41:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:a7:66:32:51:48:45:f8:95:6b:fe:ed:b5:81:4f:c7:e9:33:32:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: Jul 13 03:41:33 2026 GMT
Not After : Jul 12 03:46:33 2027 GMT
Subject: CN=26CA7C34D0EEE5916F15BBC41ED15681B96073E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:85:19:59:2f:c3:02:ad:de:5f:1b:38:4c:91:
b8:f1:ff:be:b1:d3:12:eb:b5:44:9f:a0:42:98:7b:
a7:d7:4c:81:5b:dd:5b:66:69:49:28:05:a2:96:09:
0b:ae:b0:07:86:8e:a9:36:f2:fd:1c:b7:a8:97:b5:
ef:ee:36:17:5d:27:04:e7:5f:28:f0:06:3c:10:58:
fa:67:61:9b:54:f3:7d:a1:c3:14:3a:63:28:a5:68:
0f:6e:f8:df:ae:78:11:35:1c:21:98:10:da:9e:5d:
59:f4:d6:5c:6c:59:a5:09:db:05:0b:d1:f6:48:7c:
5c:ea:8e:6b:41:d8:8f:98:a5:7c:08:e5:b1:37:83:
d1:40:21:71:e0:db:92:41:46:95:d1:7c:ca:1b:b9:
8a:49:cc:c4:9e:4d:38:51:b0:fd:24:3f:73:2a:36:
e6:e8:2b:64:ec:e5:aa:e0:05:e1:c3:58:b7:35:80:
fa:64:31:ac:1d:16:d1:62:3d:0f:dc:60:04:38:23:
6e:1e:f7:cb:83:d7:8b:77:76:a6:61:07:d6:c8:f0:
8b:6a:13:1b:93:06:a0:6d:fc:bc:d9:00:0f:dd:45:
19:46:b7:e6:ad:c7:15:08:20:75:f8:cb:bc:80:0a:
2f:92:25:18:51:3e:ea:10:4a:8c:a5:58:70:a3:a6:
fa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CA:7C:34:D0:EE:E5:91:6F:15:BB:C4:1E:D1:56:81:B9:60:73:E8
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e38382e302f32322d3234203d3e20323034373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.149.88.0/22
Signature Algorithm: sha256WithRSAEncryption
55:62:dc:40:92:a7:8b:8a:49:6d:c8:ba:b3:b3:05:9f:0a:da:
0f:d1:94:2e:78:e2:6e:c4:6f:37:ab:11:52:9b:b9:47:83:12:
60:e7:dd:30:0e:f3:15:73:99:71:54:ee:75:3c:c7:19:e0:20:
c3:29:44:8c:41:19:9c:1d:3d:24:a6:c0:54:3f:62:80:c1:b8:
d0:7d:1f:ae:09:58:de:1d:21:10:90:ff:b8:22:58:0a:67:b6:
a0:e2:b0:49:57:a8:17:32:ef:dc:7a:e2:63:c9:9c:fe:b9:21:
b4:a4:87:36:ad:ea:db:0f:00:a1:68:d7:d6:fb:fc:8c:40:e2:
0b:b0:4d:c3:62:93:21:10:07:ae:17:0a:67:de:c3:b1:95:4b:
e1:13:02:43:75:72:c7:d8:4c:5e:46:4c:8e:c9:2b:92:90:60:
4c:5d:3b:04:9b:64:72:cd:b2:27:34:26:f3:b0:67:41:0b:82:
00:4d:7f:81:27:08:e1:6d:e2:f3:b7:73:17:62:8b:7b:c4:66:
1b:f4:b3:d1:41:f6:ae:fe:ff:3e:18:74:f3:c2:fb:9e:0c:0a:
88:46:ed:60:58:f3:d1:3a:d1:7c:e1:69:d7:ed:61:94:d4:3b:
fc:7f:39:47:61:01:57:a5:ad:2b:9d:3b:ad:8b:86:79:ff:30:
95:9d:0f:27
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUQadmMlFIRfiVa/7ttYFPx+kzMgEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0
NEM5RUY4RTAeFw0yNjA3MTMwMzQxMzNaFw0yNzA3MTIwMzQ2MzNaMDMxMTAvBgNV
BAMTKDI2Q0E3QzM0RDBFRUU1OTE2RjE1QkJDNDFFRDE1NjgxQjk2MDczRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWhRlZL8MCrd5fGzhMkbjx/76x
0xLrtUSfoEKYe6fXTIFb3VtmaUkoBaKWCQuusAeGjqk28v0ct6iXte/uNhddJwTn
XyjwBjwQWPpnYZtU832hwxQ6YyilaA9u+N+ueBE1HCGYENqeXVn01lxsWaUJ2wUL
0fZIfFzqjmtB2I+YpXwI5bE3g9FAIXHg25JBRpXRfMobuYpJzMSeTThRsP0kP3Mq
NuboK2Ts5argBeHDWLc1gPpkMawdFtFiPQ/cYAQ4I24e98uD14t3dqZhB9bI8Itq
ExuTBqBt/LzZAA/dRRlGt+atxxUIIHX4y7yACi+SJRhRPuoQSoylWHCjpvqJAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUJsp8NNDu5ZFvFbvEHtFWgblgc+gwHwYDVR0j
BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2
NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1MjUyNTEvMC8zMjMxMzEyZTMx
MzQzOTJlMzgzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzYzNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAtOVWDANBgkqhkiG9w0BAQsFAAOCAQEAVWLcQJKni4pJbci6s7MF
nwraD9GULnjibsRvN6sRUpu5R4MSYOfdMA7zFXOZcVTudTzHGeAgwylEjEEZnB09
JKbAVD9igMG40H0frglY3h0hEJD/uCJYCme2oOKwSVeoFzLv3HriY8mc/rkhtKSH
Nq3q2w8AoWjX1vv8jEDiC7BNw2KTIRAHrhcKZ97DsZVL4RMCQ3Vyx9hMXkZMjskr
kpBgTF07BJtkcs2yJzQm87BnQQuCAE1/gScI4W3i87dzF2KLe8RmG/Sz0UH2rv7/
Phh088L7ngwKiEbtYFjz0TrRfOFp1+1hlNQ7/H85R2EBV6WtK507rYuGef8wlZ0P
Jw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:34:31 2026 by rpki-client