
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3130312e3234302e36342e302f31382d3234203d3e203137343239.roa
File: 3130312e3234302e36342e302f31382d3234203d3e203137343239.roa (raw, json)
Hash identifier: 2TBhDKk67R4BK4fwjccTqxd2Q7unlnonEJZFgLwOCW8=
Subject key identifier: F0:D4:9E:CD:63:F2:72:D5:8C:17:00:01:CC:66:E8:44:49:49:B4:DF
Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594
Certificate serial: 185E734BF3F539FA9DAF0E4E7597A3A1875BB6C2
Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3130312e3234302e36342e302f31382d3234203d3e203137343239.roa
Signing time: Mon 13 Apr 2026 03:30:07 +0000
ROA not before: Mon 13 Apr 2026 03:25:07 +0000
ROA not after: Mon 12 Apr 2027 03:30:07 +0000
asID: 17429
IP address blocks: 101.240.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl
rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 04:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:5e:73:4b:f3:f5:39:fa:9d:af:0e:4e:75:97:a3:a1:87:5b:b6:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594
Validity
Not Before: Apr 13 03:25:07 2026 GMT
Not After : Apr 12 03:30:07 2027 GMT
Subject: CN=F0D49ECD63F272D58C170001CC66E8444949B4DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:71:65:01:0d:21:74:ff:f3:52:45:5e:05:7b:
e6:7a:1c:9c:c0:12:92:47:75:3c:51:32:6d:00:cd:
4b:e5:85:c2:7d:f7:e1:c5:49:da:59:00:e7:9a:8e:
b4:8f:de:c2:96:d3:c3:d0:69:5f:c3:1d:03:bc:f0:
56:37:98:3e:06:bc:13:16:4b:9a:7e:63:da:32:09:
88:e5:73:8a:9a:b1:9c:39:f4:02:dc:80:e7:42:7f:
29:9f:28:f5:22:c8:2f:68:09:20:b5:f7:de:60:ec:
5c:dc:e3:20:43:ef:5e:c1:7e:ea:ca:07:fa:1e:88:
36:3b:d6:9c:b1:32:c1:46:02:fd:1b:31:ca:f5:23:
74:62:4c:4c:bf:7a:66:ae:3b:2b:a7:56:5e:9e:31:
42:47:78:a5:37:15:df:76:fe:fa:ea:4a:87:ff:47:
b8:40:38:b9:76:66:5b:3f:0c:4c:ee:b4:eb:bc:07:
86:55:da:46:34:22:0e:d9:73:39:89:8e:04:d0:c5:
96:c5:9d:d8:07:34:c0:06:d8:a4:37:4b:c6:04:8f:
f2:2b:22:7a:ca:c2:8c:2f:ce:3a:ac:59:02:01:8e:
f0:47:62:f0:3a:27:26:3d:b6:c6:50:7e:a1:dd:9c:
04:7e:bb:77:13:e7:4a:5e:48:10:de:2a:84:36:53:
56:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D4:9E:CD:63:F2:72:D5:8C:17:00:01:CC:66:E8:44:49:49:B4:DF
X509v3 Authority Key Identifier:
keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3130312e3234302e36342e302f31382d3234203d3e203137343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.240.64.0/18
Signature Algorithm: sha256WithRSAEncryption
73:ff:ba:81:24:3b:1c:40:79:71:b3:d8:1b:55:77:1e:ab:06:
46:20:de:f9:e4:6b:78:38:ad:cf:03:f9:b3:c3:cd:2c:ee:91:
eb:17:42:64:53:ad:c6:e9:54:84:0d:e2:71:56:bb:0f:b2:2a:
8c:42:51:1b:59:3e:d9:2c:00:92:25:a5:25:fa:e8:65:35:e2:
84:c1:b5:5b:51:9c:1a:fe:9c:60:f3:b6:de:31:8d:59:e5:fc:
57:54:5d:41:d5:05:9b:c2:07:6b:c7:59:83:b0:7a:ff:f2:a9:
cf:c8:32:ce:2d:b8:96:dc:0e:30:6a:52:a8:d4:4b:c1:c9:03:
f3:09:eb:db:cc:f1:f6:92:44:ec:fb:72:f1:ee:f7:e9:99:7f:
23:a7:cf:86:07:bb:75:28:84:8d:0c:f9:3d:3a:4e:28:45:6a:
cb:e3:1a:11:47:d3:a0:d5:3c:fe:c6:3e:b2:ca:51:55:89:3f:
c5:87:07:4d:6d:01:89:c9:99:3e:4b:21:15:7a:4a:ee:10:93:
c0:ef:c6:06:43:88:5e:f1:32:d1:10:22:7c:ae:29:1e:76:22:
af:09:ba:56:39:1b:ec:0a:92:d7:a5:53:9b:39:2b:7f:20:03:
53:b3:db:95:3a:2c:f5:a7:ec:6c:be:17:68:ee:e4:a5:e4:00:
58:3c:82:cc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:27 2026 by rpki-client