
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3138302e37392e36342e302f31382d3234203d3e203137343239.roa
File: 3138302e37392e36342e302f31382d3234203d3e203137343239.roa (raw, json)
Hash identifier: gFku7JSptQptf0uUZ2v8IXW55Kk2eh3KfBwO295QhOk=
Subject key identifier: 6B:27:B8:EE:21:F2:98:BD:49:0E:9C:43:C1:0E:F7:CB:AF:E8:B2:95
Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594
Certificate serial: 0CEF4EC6A22D69034054D8EF442C31BAA721F9F0
Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3138302e37392e36342e302f31382d3234203d3e203137343239.roa
Signing time: Mon 13 Apr 2026 03:31:36 +0000
ROA not before: Mon 13 Apr 2026 03:26:36 +0000
ROA not after: Mon 12 Apr 2027 03:31:36 +0000
asID: 17429
IP address blocks: 180.79.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl
rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 04:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:ef:4e:c6:a2:2d:69:03:40:54:d8:ef:44:2c:31:ba:a7:21:f9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594
Validity
Not Before: Apr 13 03:26:36 2026 GMT
Not After : Apr 12 03:31:36 2027 GMT
Subject: CN=6B27B8EE21F298BD490E9C43C10EF7CBAFE8B295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3a:74:ec:dc:06:37:64:5c:39:42:11:e5:eb:
ca:01:26:52:c4:e8:5f:6f:c7:53:bb:1d:c3:ea:53:
16:68:75:10:f1:fb:fa:96:1f:06:47:1f:67:fd:bf:
9d:bb:13:dd:c8:fa:b5:6e:d4:63:b2:7a:53:af:d9:
10:ca:50:78:b1:37:77:cc:4e:f6:a8:fa:b6:66:40:
f1:1b:7d:f3:c0:d6:21:78:05:c9:de:f4:e7:0f:df:
7d:8d:8f:23:74:d7:13:75:ca:00:00:79:81:eb:af:
71:f4:62:db:c0:8f:b7:04:fc:03:15:dc:85:f8:cc:
2b:56:d0:db:d3:00:ee:5e:41:44:79:a2:f5:b6:37:
10:09:00:ea:bf:a5:5d:33:70:60:b4:f4:11:8c:45:
da:f6:0c:be:e2:8d:11:d4:0a:b2:af:08:65:2f:fb:
4c:f5:e7:22:d9:d5:9b:0f:f6:ff:f8:8a:9e:2b:27:
5b:9b:b8:cb:e7:c3:1f:31:40:89:95:14:08:ed:bc:
cf:47:b3:18:9f:7b:30:d9:10:2a:08:f3:f4:68:0d:
bb:08:b3:28:59:cc:84:f4:c0:0f:14:dc:37:88:a7:
c6:23:dc:a7:e7:e0:3d:3b:a8:f7:87:96:ae:29:47:
bd:7f:b6:2a:57:54:22:26:e8:37:a3:0f:c2:39:84:
37:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:27:B8:EE:21:F2:98:BD:49:0E:9C:43:C1:0E:F7:CB:AF:E8:B2:95
X509v3 Authority Key Identifier:
keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3138302e37392e36342e302f31382d3234203d3e203137343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.79.64.0/18
Signature Algorithm: sha256WithRSAEncryption
7e:da:50:36:3f:03:0c:54:bc:31:17:46:0b:43:c4:14:e6:0f:
51:00:c7:a8:58:0b:3f:a2:04:32:9a:b2:81:94:6e:42:be:59:
ec:3e:8d:21:f0:7b:e9:cf:ea:5c:7f:b4:26:c4:10:28:1e:9f:
53:ca:31:2a:aa:48:cf:b7:56:db:96:eb:d6:f6:2d:42:fa:11:
84:35:15:df:45:4d:b7:39:5c:a4:2e:22:40:9b:66:1e:f6:36:
76:f2:72:3e:ca:46:e9:ff:f9:72:75:f8:30:c4:03:8e:4e:e8:
f0:4d:04:fd:74:1b:72:31:84:d1:d9:e5:ab:6a:a6:64:fe:65:
5b:13:cf:eb:46:fe:fc:ce:28:5a:02:b3:fd:07:97:64:2d:51:
3a:dc:2a:2b:be:19:81:76:7b:9a:bd:26:c9:c4:b4:67:ff:87:
2f:3c:71:a4:87:b5:2a:fb:59:a4:ac:ac:a3:b6:8b:29:f2:3b:
c0:6d:c7:f9:c6:81:52:60:4c:7b:37:b1:95:c6:8f:da:f8:cd:
bb:9b:28:e6:01:e0:b6:2c:0b:3c:b3:3b:e0:07:6e:11:74:46:
5b:72:e5:ff:b7:9c:85:db:17:56:84:60:09:e1:87:e1:fc:38:
51:0c:81:f7:a1:b3:f3:fc:03:b7:f9:16:4b:14:5e:ad:38:71:
2c:8a:12:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:12 2026 by rpki-client