
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3138302e37372e302e302f31382d3234203d3e203137343239.roa
File: 3138302e37372e302e302f31382d3234203d3e203137343239.roa (raw, json)
Hash identifier: WSfTghnSvqCUDRUZsxe9SdOfEzli6YfukfmM0tXueqs=
Subject key identifier: 6A:F9:D3:F6:5E:14:5B:21:D3:96:02:1D:A0:90:11:7B:A7:C6:1F:00
Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594
Certificate serial: 11890A09FEC5C9062E83412930464EADE533E427
Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3138302e37372e302e302f31382d3234203d3e203137343239.roa
Signing time: Mon 13 Apr 2026 03:31:36 +0000
ROA not before: Mon 13 Apr 2026 03:26:36 +0000
ROA not after: Mon 12 Apr 2027 03:31:36 +0000
asID: 17429
IP address blocks: 180.77.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl
rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 04:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:89:0a:09:fe:c5:c9:06:2e:83:41:29:30:46:4e:ad:e5:33:e4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594
Validity
Not Before: Apr 13 03:26:36 2026 GMT
Not After : Apr 12 03:31:36 2027 GMT
Subject: CN=6AF9D3F65E145B21D396021DA090117BA7C61F00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c5:ef:f0:5c:af:a2:7b:ef:f1:eb:39:54:69:
f9:ca:42:5f:c5:c3:2f:6b:dd:fb:84:08:52:35:8f:
91:9c:14:8e:68:38:3b:a5:be:e2:65:ff:6e:90:88:
10:48:57:be:03:ae:c7:4e:4d:97:95:ec:43:6f:41:
84:b2:8e:fa:18:a2:6c:5d:72:02:ab:e3:5e:3e:c1:
79:eb:32:2c:2d:ef:74:7c:d6:3b:41:32:6d:f7:b0:
52:67:0d:68:4c:df:31:9c:c6:44:b3:4a:98:df:d4:
d5:e6:99:e2:25:b6:29:1e:5e:b4:7d:fc:c8:ba:f5:
71:19:f1:42:4c:a0:e4:a2:c2:02:de:32:79:08:8a:
9f:0c:9b:09:7d:a6:60:cf:bb:e1:a0:d9:71:de:37:
cd:a4:e4:99:be:02:25:0a:ee:9f:5a:f3:88:db:57:
e0:60:52:f9:65:78:36:c1:5e:bf:3b:52:9b:1b:7d:
63:05:2a:fc:dd:01:9c:f3:51:66:0a:64:77:0d:0e:
a4:8e:bb:d7:dd:90:71:8c:a4:19:78:a3:00:aa:c0:
70:43:26:27:1f:6c:30:40:a3:0d:1a:17:0a:6d:0f:
71:ee:40:40:b1:d6:b7:f9:2b:73:74:76:3e:65:75:
af:95:62:42:09:8e:e0:31:e5:f3:f9:80:8e:c7:0d:
5f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F9:D3:F6:5E:14:5B:21:D3:96:02:1D:A0:90:11:7B:A7:C6:1F:00
X509v3 Authority Key Identifier:
keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3138302e37372e302e302f31382d3234203d3e203137343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.77.0.0/18
Signature Algorithm: sha256WithRSAEncryption
00:8e:36:2d:9f:03:60:3b:b6:11:9a:4a:15:18:03:51:36:a1:
b6:f8:4a:89:05:41:fc:ff:33:be:18:54:ef:2e:dc:75:dc:68:
0a:74:9d:c8:15:a1:9b:ea:5a:75:01:04:b2:c7:5f:10:df:f1:
b0:0a:f4:9c:98:ca:87:07:ac:8a:6b:e6:7c:83:e7:e3:ce:dd:
7d:50:86:ac:c8:80:fa:90:58:ec:76:07:4c:c6:50:f2:f3:be:
81:0f:e5:a5:22:e1:7b:7f:52:6a:9c:fc:22:fc:ba:15:c4:48:
86:93:33:d0:2e:6c:f2:ac:ed:0c:46:46:f5:73:5b:d1:c3:e2:
57:a3:54:dd:89:86:ff:52:57:c9:73:2e:38:41:f5:6c:2b:1e:
59:e9:ea:ed:21:41:a3:4b:02:a5:51:45:49:7b:8c:52:b9:f6:
01:ae:2d:ee:c0:a9:7c:6b:8e:5f:4e:ed:04:54:60:fc:74:9a:
ca:95:58:60:8a:8d:f8:5a:9b:a5:4c:23:be:a1:25:30:73:eb:
75:ab:00:b8:df:75:09:54:1a:f7:b2:52:22:f9:f8:45:28:99:
39:b8:85:c8:9e:2b:0f:37:14:bd:fe:41:46:2a:b3:72:2d:44:
47:90:fa:d2:22:93:be:59:8f:e4:b9:0f:3b:e6:7d:c7:75:8b:
cd:4e:40:0a
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUEYkKCf7FyQYug0EpMEZOreUz5CcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3
MjE5QjU5NDAeFw0yNjA0MTMwMzI2MzZaFw0yNzA0MTIwMzMxMzZaMDMxMTAvBgNV
BAMTKDZBRjlEM0Y2NUUxNDVCMjFEMzk2MDIxREEwOTAxMTdCQTdDNjFGMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpxe/wXK+ie+/x6zlUafnKQl/F
wy9r3fuECFI1j5GcFI5oODulvuJl/26QiBBIV74DrsdOTZeV7ENvQYSyjvoYomxd
cgKr414+wXnrMiwt73R81jtBMm33sFJnDWhM3zGcxkSzSpjf1NXmmeIltikeXrR9
/Mi69XEZ8UJMoOSiwgLeMnkIip8Mmwl9pmDPu+Gg2XHeN82k5Jm+AiUK7p9a84jb
V+BgUvlleDbBXr87UpsbfWMFKvzdAZzzUWYKZHcNDqSOu9fdkHGMpBl4owCqwHBD
JicfbDBAow0aFwptD3HuQECx1rf5K3N0dj5lda+VYkIJjuAx5fP5gI7HDV/nAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUavnT9l4UWyHTlgIdoJARe6fGHwAwHwYDVR0j
BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE
Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyODUyMDk3LzAvMzEzODMwMmUzNzM3
MmUzMDJlMzAyZjMxMzgyZDMyMzQyMDNkM2UyMDMxMzczNDMyMzkucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAa0TQAwDQYJKoZIhvcNAQELBQADggEBAACONi2fA2A7thGaShUYA1E2obb4SokF
Qfz/M74YVO8u3HXcaAp0ncgVoZvqWnUBBLLHXxDf8bAK9JyYyocHrIpr5nyD5+PO
3X1QhqzIgPqQWOx2B0zGUPLzvoEP5aUi4Xt/Umqc/CL8uhXESIaTM9AubPKs7QxG
RvVzW9HD4lejVN2Jhv9SV8lzLjhB9WwrHlnp6u0hQaNLAqVRRUl7jFK59gGuLe7A
qXxrjl9O7QRUYPx0msqVWGCKjfham6VMI76hJTBz63WrALjfdQlUGveyUiL5+EUo
mTm4hcieKw83FL3+QUYqs3ItREeQ+tIik75Zj+S5Dzvmfcd1i81OQAo=
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:23:23 2026 by rpki-client