
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3130312e3234312e302e302f31382d3234203d3e203137343239.roa
File: 3130312e3234312e302e302f31382d3234203d3e203137343239.roa (raw, json)
Hash identifier: m+++fV5c6SPhX1VJmkwjoB3EANyqGHK7D/1mQk/d9bM=
Subject key identifier: C8:8C:19:CB:68:10:9E:B3:2B:9A:A2:E0:1D:20:64:01:60:26:2C:2A
Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594
Certificate serial: 083E4A55FCDEB6F341097D1922FAF334A99912EB
Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3130312e3234312e302e302f31382d3234203d3e203137343239.roa
Signing time: Mon 13 Apr 2026 03:30:08 +0000
ROA not before: Mon 13 Apr 2026 03:25:08 +0000
ROA not after: Mon 12 Apr 2027 03:30:08 +0000
asID: 17429
IP address blocks: 101.241.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl
rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 04:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:3e:4a:55:fc:de:b6:f3:41:09:7d:19:22:fa:f3:34:a9:99:12:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594
Validity
Not Before: Apr 13 03:25:08 2026 GMT
Not After : Apr 12 03:30:08 2027 GMT
Subject: CN=C88C19CB68109EB32B9AA2E01D20640160262C2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:69:a0:23:a8:ed:7c:27:70:49:0c:36:00:72:
1f:ed:b5:14:9e:32:46:54:eb:bd:53:e4:21:f6:77:
88:bd:da:f9:ce:ae:0c:ee:74:90:f7:a6:a7:48:b4:
c0:43:ec:68:3c:97:a7:24:56:5b:0b:c8:fc:ef:80:
be:29:b0:08:6a:c3:6f:3f:7f:0c:1f:40:9c:2a:da:
dd:94:6a:68:9b:65:66:a8:32:9b:8a:21:4b:4c:5f:
e0:9e:a7:6d:6c:cf:7c:88:49:30:cd:85:fe:38:62:
90:de:d0:b7:aa:79:07:0d:11:76:e3:c2:e7:c2:90:
cf:5f:cd:11:c1:5c:f7:99:3d:ed:0e:a1:75:39:65:
34:d4:84:9a:c6:ec:b8:46:87:58:39:42:e0:72:ce:
a4:c8:9d:b0:06:8d:f7:c6:79:12:55:70:22:65:34:
ed:b9:80:f4:4a:d8:9a:5a:8c:5c:3f:1c:fc:96:e0:
ce:67:04:c9:62:e1:55:22:f7:69:1a:92:92:6f:47:
49:0c:e1:41:54:dc:8d:eb:74:7b:57:32:47:73:5a:
36:49:81:f3:ef:4f:39:ae:b1:ef:a7:c9:6a:04:07:
f9:47:f4:46:29:70:e6:d0:87:de:d9:4c:f8:7a:e9:
df:14:a1:54:81:72:5a:af:b4:a2:e3:f8:8f:41:e7:
df:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8C:19:CB:68:10:9E:B3:2B:9A:A2:E0:1D:20:64:01:60:26:2C:2A
X509v3 Authority Key Identifier:
keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3130312e3234312e302e302f31382d3234203d3e203137343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.241.0.0/18
Signature Algorithm: sha256WithRSAEncryption
8c:b3:41:ea:31:75:a1:a9:3f:53:44:f7:1c:14:41:55:06:78:
96:fa:b1:25:cc:b1:3b:5a:0d:43:5e:90:51:0b:f5:60:e4:fd:
5a:16:72:62:00:13:fe:45:6a:f5:e4:4b:94:0d:15:70:72:64:
cf:14:23:ee:1b:ea:dc:b1:46:25:16:5f:dd:10:b4:b4:8b:ed:
36:f2:83:3d:60:95:d2:88:96:05:c8:68:12:60:37:4c:2f:9a:
6d:68:7d:7a:0e:e5:52:a9:8a:0e:1c:08:6c:85:e8:48:f5:37:
84:1c:c5:a9:2b:49:73:c1:00:2f:3d:48:d9:2e:38:d4:7a:43:
ce:31:63:25:62:78:e0:78:c4:8a:b0:66:1b:5f:05:b8:b5:30:
72:18:91:f8:6f:15:3e:1d:2b:1c:7d:9a:51:1e:ee:9a:cc:c4:
bc:b6:d2:9f:ac:f5:05:75:bb:db:d0:3a:cc:75:71:b7:9a:ec:
7e:68:5d:6c:42:7f:96:fe:87:ec:0d:c8:1e:07:bb:5a:de:d4:
69:32:42:8e:a2:e6:4f:10:b5:87:66:4b:dc:78:a3:c6:f9:1e:
a1:bd:d6:6b:c2:df:18:6f:d1:bf:9a:2d:9a:d8:0d:17:5b:a7:
24:56:63:65:a0:0b:bc:3e:95:01:74:9b:e2:c1:27:86:9e:9d:
f3:05:ba:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:11 2026 by rpki-client