
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3231312e3135352e38382e302f32322d3232203d3e203536323832.roa
File: 3231312e3135352e38382e302f32322d3232203d3e203536323832.roa (raw, json)
Hash identifier: et5rd9higpjun1K2b+n/dX1WpuWEuApu6JdQs1eKL1Q=
Subject key identifier: D7:DB:52:D6:3A:D0:2B:34:FD:EB:8A:79:FE:75:DB:41:7E:07:F3:DB
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 13AB90346107B4824DF1FA1155BCC023947CE054
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3231312e3135352e38382e302f32322d3232203d3e203536323832.roa
Signing time: Tue 09 Jun 2026 06:12:12 +0000
ROA not before: Tue 09 Jun 2026 06:07:12 +0000
ROA not after: Tue 08 Jun 2027 06:12:12 +0000
asID: 56282
IP address blocks: 211.155.88.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 14:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:ab:90:34:61:07:b4:82:4d:f1:fa:11:55:bc:c0:23:94:7c:e0:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: Jun 9 06:07:12 2026 GMT
Not After : Jun 8 06:12:12 2027 GMT
Subject: CN=D7DB52D63AD02B34FDEB8A79FE75DB417E07F3DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5e:f8:b6:d2:f1:e7:76:31:c6:04:42:ef:5f:
61:16:d0:cb:a0:94:f9:60:0c:f8:1a:cd:6f:19:32:
76:a6:c1:2b:38:b1:6f:f4:ec:d5:de:62:a4:18:01:
77:5a:ed:a0:7d:54:31:cb:ff:b5:d3:a1:13:94:fe:
95:89:52:03:d6:ec:b2:b7:44:7c:6e:a6:63:28:b8:
10:bd:8c:a8:1d:25:55:3a:a6:6f:60:16:5c:92:64:
2e:b3:a0:95:0e:90:47:80:df:d5:9f:f5:80:54:e0:
35:0f:05:7e:36:e8:3f:84:38:c5:0b:c2:bc:6b:88:
b3:f4:04:18:18:a9:3f:98:6b:84:38:02:8f:2a:b3:
cf:bc:d1:76:18:f5:a0:e6:cb:5a:05:58:34:74:fb:
a6:db:58:a6:cb:f0:5f:e1:85:f7:5d:f4:fa:63:df:
1b:49:47:53:12:1d:13:2f:ba:b8:41:8c:ba:c9:6a:
08:86:4d:ff:95:bb:ab:42:cb:25:20:26:89:3e:96:
27:ce:6d:52:2b:5f:7a:b5:f2:9e:2c:ae:5c:aa:e0:
15:af:ac:dd:d1:13:61:95:c7:84:1c:6a:65:44:36:
21:5d:19:89:de:9d:a6:4e:18:0c:2e:89:38:19:f7:
19:ef:d9:a7:c3:c2:d9:7a:9b:5e:ff:7a:b7:1f:39:
87:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DB:52:D6:3A:D0:2B:34:FD:EB:8A:79:FE:75:DB:41:7E:07:F3:DB
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3231312e3135352e38382e302f32322d3232203d3e203536323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.155.88.0/22
Signature Algorithm: sha256WithRSAEncryption
91:80:86:21:9d:99:b9:91:97:ea:82:9a:5f:6a:d7:9a:4d:29:
8b:79:e7:b9:eb:33:a5:95:10:bd:02:2e:a6:d5:0f:0e:d6:d7:
07:eb:ce:0c:4d:9a:9a:77:b5:c9:68:b3:3c:46:c7:03:0f:ba:
a4:6f:7c:8d:b9:c9:34:14:23:54:5e:de:40:f6:96:0b:07:9a:
d1:ad:10:18:bc:77:1c:b1:26:b9:29:4c:b8:96:9f:88:f6:5b:
4a:85:90:35:b9:95:01:01:60:33:41:78:82:ad:79:e4:9c:e3:
9a:03:42:0f:8a:67:ce:5f:3d:e2:11:fb:98:5a:4d:62:9e:7f:
ce:ef:32:b9:b0:ae:a8:e7:02:a1:7f:24:ac:35:1d:61:c6:0c:
62:0e:e9:68:e5:69:7f:a9:e1:6a:14:9b:1f:17:d0:7a:b0:fb:
50:81:89:61:8a:c3:54:83:a8:e3:76:11:bc:5c:a8:e8:b8:6d:
42:28:99:ab:53:b1:ba:c8:13:50:d8:e2:f4:a6:4b:dd:e9:a8:
59:67:f9:02:27:3b:d9:9e:96:af:a3:a6:fa:59:89:5d:7e:f1:
ba:5a:18:35:5d:89:a9:a6:df:d2:94:86:48:9c:92:65:2a:f5:
7d:5d:24:e4:bd:f6:df:07:b4:a0:cf:72:c7:1d:fa:0f:8f:a1:
71:ad:14:af
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:39 2026 by rpki-client