
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3231312e3135352e38342e302f32322d3232203d3e203536323832.roa
File: 3231312e3135352e38342e302f32322d3232203d3e203536323832.roa (raw, json)
Hash identifier: nWiHV5uWcU//AsKr2Cub7EKQBOqNjkygfViFiJ4XJVc=
Subject key identifier: A0:3C:B7:76:10:71:17:2C:69:C4:60:CF:0C:62:23:58:31:06:4F:2F
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 446B15057EA282A604A10DDE0DF67DE597CDCB06
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3231312e3135352e38342e302f32322d3232203d3e203536323832.roa
Signing time: Tue 09 Jun 2026 06:12:23 +0000
ROA not before: Tue 09 Jun 2026 06:07:23 +0000
ROA not after: Tue 08 Jun 2027 06:12:23 +0000
asID: 56282
IP address blocks: 211.155.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 14:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:6b:15:05:7e:a2:82:a6:04:a1:0d:de:0d:f6:7d:e5:97:cd:cb:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: Jun 9 06:07:23 2026 GMT
Not After : Jun 8 06:12:23 2027 GMT
Subject: CN=A03CB7761071172C69C460CF0C62235831064F2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:74:f0:9c:23:54:e1:92:d2:68:96:61:48:ef:
9e:ad:ae:8b:36:d7:d7:87:f7:8a:bc:c0:a5:96:ab:
d6:f0:59:6f:a5:b4:86:71:ae:17:aa:c1:43:cb:ce:
38:88:24:c1:88:ce:ab:c2:0c:29:e3:59:3f:c5:05:
71:02:a1:e1:20:2b:cf:c8:16:b5:c5:8c:09:87:ea:
6a:ad:8b:0a:af:40:32:67:ee:75:cc:94:fe:0c:db:
b3:cd:34:e8:7d:ab:4e:f6:0a:92:75:1a:f2:05:b0:
ec:68:9e:53:72:b9:73:ba:60:06:d0:9d:ff:ee:5c:
39:6c:6a:30:29:6e:48:b3:4f:9f:59:12:2a:39:37:
60:8d:62:a9:30:e0:ac:76:67:28:f5:24:d9:21:0c:
11:c0:bd:f9:a6:4f:0b:70:97:18:53:e9:27:09:92:
f9:e1:30:2c:a7:1d:80:83:87:dd:fe:ec:d4:f2:c6:
b0:dc:be:9a:05:65:9b:0a:8f:28:0d:65:11:b6:9d:
d8:95:46:2f:10:ea:a1:65:e8:90:ef:64:1b:07:d8:
ef:d2:03:cc:08:1d:d5:64:22:88:8c:5b:c4:25:42:
bd:f7:75:cc:bf:dc:a3:9e:c4:f1:72:a4:f4:16:79:
32:70:8d:f7:e8:fe:dc:a1:90:e8:60:1b:8b:ca:d0:
6b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3C:B7:76:10:71:17:2C:69:C4:60:CF:0C:62:23:58:31:06:4F:2F
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3231312e3135352e38342e302f32322d3232203d3e203536323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.155.84.0/22
Signature Algorithm: sha256WithRSAEncryption
66:3c:0a:c1:09:d6:93:95:0b:92:7e:55:86:3b:05:d7:75:c7:
88:08:d1:e5:0a:9d:7c:fe:3b:4e:7e:d3:a4:93:10:8b:84:79:
20:7e:bb:9c:2d:7d:c2:fc:91:42:2f:bc:e6:db:40:35:d9:e3:
9d:4e:c9:29:5f:70:9b:af:8a:a6:44:05:f8:a0:80:d0:f5:72:
e8:c5:9a:6e:2d:a3:8b:eb:52:be:55:99:23:b6:6b:b5:81:13:
ff:79:f5:95:b2:09:b1:dd:bf:ac:b7:e2:e9:54:3c:42:45:87:
02:3c:5f:7c:fc:86:80:20:08:21:c3:18:72:20:1d:b2:d5:3c:
8b:e8:73:ca:82:15:6a:b7:ef:0d:a3:28:ab:06:ed:35:37:dd:
b3:ca:18:4e:59:55:81:80:88:42:cc:1b:ba:5f:6f:b1:57:4a:
39:c2:1d:f3:44:aa:82:ce:74:e4:77:70:04:5a:e4:ce:bf:d7:
06:c2:b5:10:1e:20:c7:19:23:27:fe:6d:9e:44:c9:77:cb:01:
18:c5:95:4e:a6:6c:c7:b7:3a:4c:78:be:36:cf:59:1c:3d:82:
7e:f1:fd:23:f5:2a:59:ab:bd:d6:45:4d:3c:50:bb:53:28:98:
5e:80:09:7a:0c:b5:ca:38:94:2d:30:d6:96:4e:a1:72:ea:2f:
75:ed:86:88
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:18 2026 by rpki-client