
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3138302e37392e3132382e302f31382d3234203d3e203137343239.roa
File: 3138302e37392e3132382e302f31382d3234203d3e203137343239.roa (raw, json)
Hash identifier: cQMLVOb8o2+oOY8fCw3NXBnayAVnUlpvZiUK53yr6NU=
Subject key identifier: C6:41:F8:AF:1B:C9:10:BC:AC:93:18:2A:DD:7B:87:3F:60:A1:A3:C7
Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594
Certificate serial: 15F0E419B1908F057FF624BCF2C1F065DBBE7B1A
Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3138302e37392e3132382e302f31382d3234203d3e203137343239.roa
Signing time: Mon 13 Apr 2026 03:31:36 +0000
ROA not before: Mon 13 Apr 2026 03:26:36 +0000
ROA not after: Mon 12 Apr 2027 03:31:36 +0000
asID: 17429
IP address blocks: 180.79.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl
rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 04:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:f0:e4:19:b1:90:8f:05:7f:f6:24:bc:f2:c1:f0:65:db:be:7b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594
Validity
Not Before: Apr 13 03:26:36 2026 GMT
Not After : Apr 12 03:31:36 2027 GMT
Subject: CN=C641F8AF1BC910BCAC93182ADD7B873F60A1A3C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d6:31:90:cb:6f:2c:49:33:96:b4:d5:ae:ee:
f8:bb:2f:00:7d:19:4b:de:e3:de:9b:4a:29:ba:a7:
47:c5:3e:e4:0e:50:92:c7:29:34:1d:51:f8:83:df:
eb:73:87:94:30:17:df:f3:88:1b:84:31:fb:f4:b4:
fe:0f:0d:d6:cc:d7:0e:86:20:9e:05:a0:f2:64:de:
ad:e3:e3:0c:dc:63:3e:4b:5d:1e:b0:40:21:f1:25:
3c:04:5f:95:b5:ad:2c:ca:55:fc:f9:5b:d0:18:72:
9a:6d:9b:1f:55:cf:5c:e6:f5:c9:e2:6a:5c:ea:2b:
04:d1:06:7c:d4:da:31:fc:62:9d:db:86:fc:c9:14:
49:18:83:0e:c0:03:e4:1f:63:7e:64:9e:cb:ef:45:
be:bd:04:88:d2:af:35:2b:db:84:26:d3:89:d9:26:
ca:a3:0f:75:ff:80:4c:40:1c:60:f6:ea:70:5a:63:
7c:fa:fa:54:6c:03:d6:52:f4:b7:5e:05:75:4d:d5:
ed:66:cd:f0:b6:8e:4f:ae:32:cb:23:dc:5d:89:3d:
2e:ee:d8:54:f8:cc:e2:dc:3a:33:e7:e9:8b:0b:15:
c6:44:b5:08:0d:dc:e3:a2:7e:6a:d7:a7:7d:85:51:
20:c8:0f:83:a0:06:7e:d2:a5:c1:b4:14:60:a5:ba:
7d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:41:F8:AF:1B:C9:10:BC:AC:93:18:2A:DD:7B:87:3F:60:A1:A3:C7
X509v3 Authority Key Identifier:
keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3138302e37392e3132382e302f31382d3234203d3e203137343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.79.128.0/18
Signature Algorithm: sha256WithRSAEncryption
6d:ab:5e:30:f0:47:42:4e:41:07:9c:6c:bb:26:6e:1e:08:6a:
65:e3:7c:6a:31:52:fa:3a:1a:ad:e9:18:f6:ac:ea:95:50:9d:
d4:d8:0c:08:18:85:ec:7f:bf:49:1a:83:0c:a9:46:1b:48:f0:
43:a2:24:4b:db:fc:3b:06:bc:29:29:0a:42:f1:0e:41:22:a8:
a1:06:16:b9:20:8c:12:f0:b8:86:f7:ac:34:6e:4d:01:c5:46:
9f:9f:7a:06:af:5e:ca:48:9c:bd:ba:f9:97:bb:1e:c4:39:4e:
a4:59:43:2a:16:7b:f6:9b:07:11:5c:12:36:f6:8f:be:30:4c:
66:5f:e5:b0:8d:55:97:ce:28:4b:27:2e:d2:81:23:b3:82:c6:
64:ed:1b:e3:69:3d:9f:c7:3e:05:91:4d:07:26:17:ba:89:22:
66:5f:8b:13:73:61:53:f1:9b:b0:57:87:a9:42:05:64:4d:a4:
ed:53:f8:f8:9f:7b:56:ff:ce:0c:f5:74:7f:e5:91:00:42:12:
ba:80:88:a5:a6:88:64:0f:fb:d1:ec:67:8e:76:2b:65:be:54:
64:af:b1:e6:0c:77:48:a2:cc:29:00:fa:d9:d0:b2:f1:79:2d:
09:b2:14:58:66:a9:df:4b:0a:50:84:9b:89:78:76:30:52:ed:
c5:38:7b:65
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:20:32 2026 by rpki-client