
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e39362e302f32322d3232203d3e20313338393135.roa
File: 3231312e3135352e39362e302f32322d3232203d3e20313338393135.roa (raw, json)
Hash identifier: mkRk/FfIjDtmaIG6G1C+HoEu70RiS2JMavmAU6dcucM=
Subject key identifier: D5:EB:4C:36:A4:10:56:93:97:D7:C8:F0:19:60:C9:44:6D:20:34:8D
Certificate issuer: /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
Certificate serial: 0347A1083A863ECC51CF9797053C4E1F10DEF185
Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e39362e302f32322d3232203d3e20313338393135.roa
Signing time: Tue 02 Jun 2026 06:25:25 +0000
ROA not before: Tue 02 Jun 2026 06:20:25 +0000
ROA not after: Tue 01 Jun 2027 06:25:25 +0000
asID: 138915
IP address blocks: 211.155.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Jun 2026 20:39:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:47:a1:08:3a:86:3e:cc:51:cf:97:97:05:3c:4e:1f:10:de:f1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
Validity
Not Before: Jun 2 06:20:25 2026 GMT
Not After : Jun 1 06:25:25 2027 GMT
Subject: CN=D5EB4C36A410569397D7C8F01960C9446D20348D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f1:b6:8c:8f:84:c6:89:4a:60:d7:71:0a:a9:
7e:4b:05:0c:97:a3:af:1b:36:6c:54:0f:7c:79:59:
59:4d:50:2e:49:b3:4f:0e:58:05:4c:06:6f:f4:14:
6e:f7:ca:18:3d:25:d7:d0:bd:45:45:0c:44:6f:5b:
76:a4:6f:b3:c8:54:0e:1f:38:d5:28:4e:e1:8e:a8:
1c:54:63:0b:26:71:1c:ac:04:56:d1:a9:89:57:85:
05:e2:a8:c2:6d:73:20:4d:1d:2f:6f:ed:6b:66:25:
7f:5d:41:76:a5:58:38:63:ad:70:c9:cf:f8:f5:3d:
09:15:40:e4:ad:44:c6:2c:b0:09:c0:01:ed:01:a7:
ac:87:68:f2:8c:a9:1a:f2:39:31:79:9e:c4:6b:7f:
61:00:49:69:55:b8:9d:83:50:8a:da:b6:53:27:0f:
db:d6:0c:e7:f0:09:62:fd:3b:f1:d3:b2:48:fc:12:
4a:b5:fe:6b:29:05:3c:c8:a0:74:81:45:e0:1a:81:
6e:5d:d9:dd:d8:50:ab:c0:da:1d:76:54:00:8c:e3:
c0:6c:c0:f2:1c:17:9a:d9:c0:40:86:e8:79:f7:3c:
b5:a0:e7:d1:d0:b8:d1:08:74:f3:52:f7:5a:12:d3:
10:8c:2e:dc:3d:e3:26:8d:72:b5:de:2f:39:95:66:
79:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EB:4C:36:A4:10:56:93:97:D7:C8:F0:19:60:C9:44:6D:20:34:8D
X509v3 Authority Key Identifier:
keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e39362e302f32322d3232203d3e20313338393135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.155.96.0/22
Signature Algorithm: sha256WithRSAEncryption
00:51:d2:ef:20:3a:1d:78:77:7a:2a:86:18:64:d2:b5:77:71:
e9:94:83:b2:e9:8d:5e:ee:cf:6c:d5:85:0c:16:17:50:31:88:
27:8b:20:4b:fe:1b:98:fa:ac:a5:c6:b7:0b:f2:d1:1e:33:33:
d0:57:55:8f:bc:81:41:84:6a:63:da:d6:cc:3c:1e:8e:3c:b0:
e9:9f:19:30:06:4f:69:51:ea:76:8f:bf:62:39:c8:30:02:ae:
8b:f8:ef:b8:b5:76:59:6f:42:9f:46:6c:30:da:45:ea:e4:8f:
54:f3:8d:66:e7:db:19:5d:7c:9b:e1:96:d6:bc:3b:31:38:8b:
bc:c4:31:2e:bb:7d:3a:8e:ec:f0:a6:c3:45:35:a8:3e:14:77:
00:cb:f3:a7:9a:3b:cb:e6:1a:21:f4:8e:d5:e5:ba:fb:d4:9b:
cb:28:cd:10:1b:db:00:d0:79:3b:43:34:21:76:b7:2f:d0:41:
8f:10:35:ea:3f:5e:fb:e3:15:f2:85:ef:d6:ef:a3:8d:f0:37:
b6:e7:05:fc:15:8b:c5:ef:ca:19:33:9c:c4:23:58:27:1a:76:
6d:70:74:ca:54:1b:36:cf:98:98:6a:b6:96:31:dc:8a:06:ad:
89:47:5f:8f:96:1a:1d:3f:35:07:44:f8:75:d2:57:3e:70:46:
4d:f3:74:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:12:39 2026 by rpki-client