
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3138302e37372e3139322e302f31382d3234203d3e203137343239.roa
File: 3138302e37372e3139322e302f31382d3234203d3e203137343239.roa (raw, json)
Hash identifier: JoiImIIIJHTrY6sNR98RoE1vqm7HHxR0RMXvXrLDI2A=
Subject key identifier: FE:E2:9A:9F:51:E6:8C:A7:C2:23:36:91:24:06:AE:64:61:82:F7:C3
Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594
Certificate serial: 1A74B51DCD0F0D3DAFA4216D53C6B55F01C086F2
Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3138302e37372e3139322e302f31382d3234203d3e203137343239.roa
Signing time: Mon 13 Apr 2026 03:31:36 +0000
ROA not before: Mon 13 Apr 2026 03:26:36 +0000
ROA not after: Mon 12 Apr 2027 03:31:36 +0000
asID: 17429
IP address blocks: 180.77.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl
rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 04:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:74:b5:1d:cd:0f:0d:3d:af:a4:21:6d:53:c6:b5:5f:01:c0:86:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594
Validity
Not Before: Apr 13 03:26:36 2026 GMT
Not After : Apr 12 03:31:36 2027 GMT
Subject: CN=FEE29A9F51E68CA7C22336912406AE646182F7C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:12:c4:84:f9:30:d4:fa:7f:3e:2f:26:28:f0:
0d:be:1c:36:24:8d:5b:8d:4d:55:89:74:8b:7a:34:
6d:be:75:3b:af:c4:cb:4d:20:3c:4c:8f:c9:ed:1c:
6f:af:0c:3c:9d:d0:98:8a:c3:d1:40:fd:fa:87:b9:
6c:dc:be:56:ca:2f:74:92:46:e5:cf:12:db:ae:71:
45:94:7e:03:5e:70:dd:63:e4:0c:e8:1a:8c:8a:20:
d8:e1:c5:30:b3:4d:ac:12:a1:1f:9f:64:7d:36:0d:
f2:d5:39:1a:c8:3c:1d:e6:8f:58:91:0a:46:da:42:
ca:49:97:24:57:0a:c3:e5:46:55:dd:a4:07:35:a8:
ec:94:cd:c8:eb:8b:02:15:77:33:a6:c3:15:9e:a7:
97:65:9f:71:dc:ec:c3:0e:bd:6e:04:fa:3e:a4:18:
25:9a:79:38:8b:a9:b8:f7:93:b5:3d:c6:12:15:9e:
e6:a6:e0:ba:1a:ef:50:9a:ea:db:50:09:c8:b6:b9:
be:56:a7:fb:65:3f:5c:75:38:96:a6:af:a5:06:50:
2e:59:a6:7e:43:17:ce:c5:43:3a:8c:eb:31:d3:11:
51:db:7e:b1:ec:ee:93:fb:46:4d:90:09:58:44:a6:
12:f9:61:ae:ec:45:cb:b2:3d:87:f6:b3:b7:f5:67:
d8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E2:9A:9F:51:E6:8C:A7:C2:23:36:91:24:06:AE:64:61:82:F7:C3
X509v3 Authority Key Identifier:
keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3138302e37372e3139322e302f31382d3234203d3e203137343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.77.192.0/18
Signature Algorithm: sha256WithRSAEncryption
16:66:91:55:8f:41:d2:68:a3:b7:cd:41:07:05:42:19:85:d1:
56:9b:5e:8c:e0:b1:cb:13:1a:e0:fa:9d:27:f5:ba:e3:81:36:
f6:18:9e:dd:25:4a:1c:f2:d4:28:57:73:61:59:66:a0:47:a4:
8b:b3:a9:53:04:26:96:1a:5a:4c:c0:5b:f3:bd:5e:f1:5c:60:
2a:de:92:31:a2:8b:0a:76:ca:bc:a6:f5:4d:9d:02:35:dc:ca:
da:16:78:e5:0a:f0:29:51:8f:12:f2:4d:58:60:31:20:21:9c:
9e:4f:79:43:53:ae:1d:00:f8:f4:21:11:42:bc:50:5e:e4:0a:
91:b5:b1:0a:49:11:ac:80:fe:1c:ec:9a:d7:1a:cb:c4:12:7e:
0b:0b:e4:f0:9d:d8:89:ff:d7:a1:d0:a5:16:df:a8:3c:81:ad:
cb:f4:56:17:1c:45:6c:ff:97:91:d2:d1:d6:28:36:b9:da:ea:
69:66:3e:b8:5e:f1:27:8d:f1:88:da:41:e0:23:6c:19:0d:a6:
74:00:9b:88:ea:76:ee:82:9a:63:3a:19:30:45:75:dc:56:01:
4c:d4:a8:f4:61:b0:a8:91:cf:26:be:49:fa:21:fc:60:e8:eb:
a5:ae:7c:e2:50:3e:6d:93:79:3a:ee:b6:10:5a:60:59:7e:74:
4e:ce:bc:56
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUGnS1Hc0PDT2vpCFtU8a1XwHAhvIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3
MjE5QjU5NDAeFw0yNjA0MTMwMzI2MzZaFw0yNzA0MTIwMzMxMzZaMDMxMTAvBgNV
BAMTKEZFRTI5QTlGNTFFNjhDQTdDMjIzMzY5MTI0MDZBRTY0NjE4MkY3QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPEsSE+TDU+n8+LyYo8A2+HDYk
jVuNTVWJdIt6NG2+dTuvxMtNIDxMj8ntHG+vDDyd0JiKw9FA/fqHuWzcvlbKL3SS
RuXPEtuucUWUfgNecN1j5AzoGoyKINjhxTCzTawSoR+fZH02DfLVORrIPB3mj1iR
CkbaQspJlyRXCsPlRlXdpAc1qOyUzcjriwIVdzOmwxWep5dln3Hc7MMOvW4E+j6k
GCWaeTiLqbj3k7U9xhIVnuam4Loa71Ca6ttQCci2ub5Wp/tlP1x1OJamr6UGUC5Z
pn5DF87FQzqM6zHTEVHbfrHs7pP7Rk2QCVhEphL5Ya7sRcuyPYf2s7f1Z9hxAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU/uKan1HmjKfCIzaRJAauZGGC98MwHwYDVR0j
BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE
Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjg1MjA5Ny8wLzMxMzgzMDJlMzcz
NzJlMzEzOTMyMmUzMDJmMzEzODJkMzIzNDIwM2QzZTIwMzEzNzM0MzIzOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBrRNwDANBgkqhkiG9w0BAQsFAAOCAQEAFmaRVY9B0mijt81BBwVCGYXR
VptejOCxyxMa4PqdJ/W644E29hie3SVKHPLUKFdzYVlmoEeki7OpUwQmlhpaTMBb
871e8VxgKt6SMaKLCnbKvKb1TZ0CNdzK2hZ45QrwKVGPEvJNWGAxICGcnk95Q1Ou
HQD49CERQrxQXuQKkbWxCkkRrID+HOya1xrLxBJ+Cwvk8J3Yif/XodClFt+oPIGt
y/RWFxxFbP+XkdLR1ig2udrqaWY+uF7xJ43xiNpB4CNsGQ2mdACbiOp27oKaYzoZ
MEV13FYBTNSo9GGwqJHPJr5J+iH8YOjrpa584lA+bZN5Ou62EFpgWX50Ts68Vg==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:10 2026 by rpki-client