
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3233382e302f32342d3234203d3e2034383136.roa
File: 3130312e35322e3233382e302f32342d3234203d3e2034383136.roa (raw, json)
Hash identifier: WsUc+MSuv9WcgFgzCPWpz0Hfv1wPVC9YyieWYRsXhQ8=
Subject key identifier: 99:60:8A:52:C3:26:B7:95:95:42:1B:3D:1F:E5:4C:7C:9F:47:19:B3
Certificate issuer: /CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
Certificate serial: 59703D663614CA33B037CD42FC50333BDCB6B9A2
Authority key identifier: 68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3233382e302f32342d3234203d3e2034383136.roa
Signing time: Fri 15 May 2026 08:48:26 +0000
ROA not before: Fri 15 May 2026 08:43:26 +0000
ROA not after: Fri 14 May 2027 08:48:26 +0000
asID: 4816
IP address blocks: 101.52.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 10:20:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:70:3d:66:36:14:ca:33:b0:37:cd:42:fc:50:33:3b:dc:b6:b9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
Validity
Not Before: May 15 08:43:26 2026 GMT
Not After : May 14 08:48:26 2027 GMT
Subject: CN=99608A52C326B79595421B3D1FE54C7C9F4719B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:35:26:82:17:f9:a6:66:92:62:77:67:1f:62:
28:a3:65:ea:d9:4a:8b:4c:91:b5:2b:7f:a7:2f:30:
5f:f6:f3:d6:bd:85:d7:33:6c:2e:37:08:23:1d:d1:
16:ad:a2:87:9e:c6:43:e4:01:14:1e:9c:34:c0:3d:
d3:53:4c:c5:d9:77:1e:ca:40:69:54:77:f1:c7:91:
4d:fe:2d:cf:a9:44:8d:90:e1:8c:27:ea:b5:6b:fb:
82:b1:68:41:f4:b1:85:1e:64:a4:e4:54:c7:b9:27:
2f:7c:07:76:5b:4e:23:27:22:a9:69:46:4d:49:f6:
4e:14:83:73:ec:8a:31:60:cf:49:16:45:74:02:50:
8f:3f:e1:a3:93:9e:02:97:f3:ea:d9:75:ef:2b:6c:
ea:42:13:f9:30:dd:3c:64:79:66:43:fa:58:55:2a:
ac:4f:ab:88:af:bc:b6:b4:44:85:22:be:e1:d0:e3:
33:52:06:ed:c7:89:bc:c9:2a:42:c3:0e:c5:e9:70:
ef:3c:52:3a:9b:2c:9d:59:7b:3d:38:48:93:ff:16:
49:e6:6a:34:98:aa:4b:2a:33:0c:5f:22:ce:60:d6:
f1:7f:e7:52:d1:0e:b6:6c:51:d4:b6:40:46:69:32:
c3:93:69:33:99:62:4b:77:5b:0c:f6:9c:6c:20:51:
1e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:60:8A:52:C3:26:B7:95:95:42:1B:3D:1F:E5:4C:7C:9F:47:19:B3
X509v3 Authority Key Identifier:
keyid:68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3233382e302f32342d3234203d3e2034383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.52.238.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:d6:e7:c4:f4:39:2e:2e:11:83:df:d9:5f:6f:07:72:f8:93:
36:28:07:87:ee:3c:9c:7c:96:52:55:5f:c3:2c:b9:d9:bb:f7:
e1:a0:2b:3f:43:a5:b8:8d:5d:da:40:04:e7:48:87:22:34:16:
fc:62:78:3b:77:e6:57:fa:b3:9a:ab:3a:f7:fa:3b:13:4f:05:
4e:50:ea:56:7d:f3:45:ac:54:32:92:92:80:e5:ea:3a:5a:b4:
b7:66:7b:6c:af:37:9e:9c:02:73:91:d3:56:ae:0d:f1:b2:48:
ef:62:1b:44:a1:50:76:cb:72:a8:67:80:41:95:46:eb:21:96:
40:56:31:f7:a5:48:14:e2:d0:6b:5e:be:cf:ae:60:49:a7:c7:
14:68:29:46:1a:6a:45:82:21:50:05:47:b5:80:ca:7c:07:c9:
e5:43:c3:77:0f:ef:fe:1e:a9:1e:66:90:39:a7:c2:8e:1a:a1:
fa:40:de:56:aa:1b:ff:e5:f1:ca:1e:9e:17:56:99:28:25:ce:
9e:f6:9d:e7:23:77:87:34:f1:6a:fd:da:18:5b:77:bd:ce:e5:
53:aa:42:4d:e2:d5:76:6d:90:96:60:ca:fd:1b:26:af:41:71:
0b:c3:0f:48:f7:bc:0a:c9:93:54:7f:53:3b:a5:84:22:42:29:
28:78:44:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:53:34 2026 by rpki-client