
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3231312e3136312e3139322e302f32332d3233203d3e20313331353336.roa
File: 3231312e3136312e3139322e302f32332d3233203d3e20313331353336.roa (raw, json)
Hash identifier: c5LlQRjDMIDPFYAA46Xq9/sJL6HBaBIS4V8SaP+8ikQ=
Subject key identifier: 6B:72:51:D9:AC:FD:38:96:1C:9A:F8:FC:D6:28:1A:7F:ED:67:7F:9F
Certificate issuer: /CN=A162689F28161D4D4C3DF339D95097D5EF647370
Certificate serial: 3DE4445320FABF9C8C945EEF7256C591CDB854C1
Authority key identifier: A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3231312e3136312e3139322e302f32332d3233203d3e20313331353336.roa
Signing time: Tue 16 Jun 2026 02:06:23 +0000
ROA not before: Tue 16 Jun 2026 02:01:23 +0000
ROA not after: Tue 15 Jun 2027 02:06:23 +0000
asID: 131536
IP address blocks: 211.161.192.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 07:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:e4:44:53:20:fa:bf:9c:8c:94:5e:ef:72:56:c5:91:cd:b8:54:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A162689F28161D4D4C3DF339D95097D5EF647370
Validity
Not Before: Jun 16 02:01:23 2026 GMT
Not After : Jun 15 02:06:23 2027 GMT
Subject: CN=6B7251D9ACFD38961C9AF8FCD6281A7FED677F9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:48:90:da:c6:74:85:a5:85:cb:b0:41:38:e9:
ed:e5:2c:4a:a9:67:c2:2e:d9:71:4e:52:54:8f:d7:
50:15:8c:b2:e8:7b:1f:d9:45:95:94:8d:73:16:c3:
9c:ea:cd:29:75:2a:bc:a6:60:7b:15:bd:77:1c:33:
56:b0:22:e2:da:ae:27:3e:8f:04:0d:e5:ea:c7:74:
6f:42:c2:ea:da:1e:82:f6:bf:ed:6a:7a:5f:a6:ce:
10:fc:f4:3a:d0:24:cc:62:ae:a8:c9:41:b1:d2:8a:
b4:08:a0:30:5a:f9:42:ad:93:8b:39:e9:05:ab:3a:
0a:de:ca:7c:0a:90:6b:1f:4b:b1:64:26:83:03:01:
77:d1:19:78:9b:b6:96:2c:50:ea:30:12:78:5f:c7:
fb:43:c2:86:13:14:41:9e:28:fb:85:ed:bc:63:33:
b6:24:17:d0:06:e7:e2:32:3f:b9:c1:04:e5:84:ac:
87:eb:9c:d9:65:e8:72:46:34:75:1c:19:af:9a:74:
3f:b7:2f:0b:76:e3:3a:b5:82:ca:cb:3d:54:b1:08:
12:c7:33:21:d4:35:86:59:7d:1a:f7:77:ed:e9:90:
8b:63:82:05:d4:be:d6:c6:0f:a4:47:d7:ee:e9:3b:
21:85:58:db:39:a2:b0:58:f5:35:bf:29:43:36:ad:
85:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:72:51:D9:AC:FD:38:96:1C:9A:F8:FC:D6:28:1A:7F:ED:67:7F:9F
X509v3 Authority Key Identifier:
keyid:A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3231312e3136312e3139322e302f32332d3233203d3e20313331353336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.161.192.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:f9:95:9c:e4:e2:53:5c:9b:a0:6c:3d:90:78:04:00:79:a5:
9d:ba:c9:d1:be:3d:10:dd:63:c5:6b:99:91:69:50:d2:8a:2d:
ef:32:5f:9e:13:47:f4:f6:e2:9d:26:43:c9:d0:6d:18:51:37:
cd:61:b6:62:f1:50:b5:6d:d2:86:87:50:41:ef:06:79:2d:81:
3e:19:da:38:d3:80:57:82:d2:04:f5:d6:6c:a2:50:fe:de:fe:
91:76:81:21:ad:de:44:5d:64:8f:d7:61:77:fc:ce:08:2f:f9:
55:54:85:cf:c5:bd:88:18:26:ec:ab:1e:f1:15:0a:5d:ae:43:
2e:69:20:1f:25:db:55:6a:64:ab:51:57:98:f1:75:69:3b:42:
da:09:54:5e:47:4b:fb:f8:38:8e:37:8f:13:01:e1:8c:c1:d1:
8d:58:83:1e:68:90:96:ea:1c:44:1d:5d:5e:0b:b0:2b:69:f3:
08:7b:42:a6:fa:50:d0:5f:c6:b5:4b:1a:6c:da:c0:d3:93:92:
63:7e:66:e9:7f:8a:66:74:13:81:51:80:79:76:1c:1a:73:4d:
69:b3:77:bb:a5:ba:76:01:4a:0f:68:18:9c:ea:24:d5:ef:97:
36:1d:f7:37:93:51:97:36:9f:8d:6e:e3:20:a6:e3:7c:7d:7b:
22:ac:2e:0c
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUPeREUyD6v5yMlF7vclbFkc24VMEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE2MjY4OUYyODE2MUQ0RDRDM0RGMzM5RDk1MDk3RDVF
RjY0NzM3MDAeFw0yNjA2MTYwMjAxMjNaFw0yNzA2MTUwMjA2MjNaMDMxMTAvBgNV
BAMTKDZCNzI1MUQ5QUNGRDM4OTYxQzlBRjhGQ0Q2MjgxQTdGRUQ2NzdGOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuSJDaxnSFpYXLsEE46e3lLEqp
Z8Iu2XFOUlSP11AVjLLoex/ZRZWUjXMWw5zqzSl1KrymYHsVvXccM1awIuLaric+
jwQN5erHdG9CwuraHoL2v+1qel+mzhD89DrQJMxirqjJQbHSirQIoDBa+UKtk4s5
6QWrOgreynwKkGsfS7FkJoMDAXfRGXibtpYsUOowEnhfx/tDwoYTFEGeKPuF7bxj
M7YkF9AG5+IyP7nBBOWErIfrnNll6HJGNHUcGa+adD+3Lwt24zq1gsrLPVSxCBLH
MyHUNYZZfRr3d+3pkItjggXUvtbGD6RH1+7pOyGFWNs5orBY9TW/KUM2rYUFAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUa3JR2az9OJYcmvj81igaf+1nf58wHwYDVR0j
BBgwFoAUoWJonygWHU1MPfM52VCX1e9kc3AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MjMzMDM0NjkzMDE3Ny8wL0ExNjI2ODlGMjgxNjFENEQ0QzNERjMzOUQ5NTA5
N0Q1RUY2NDczNzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTE2MjY4OUYyODE2MUQ0RDRDM0RGMzM5RDk1MDk3RDVFRjY0NzM3MC5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgyMzMwMzQ2OTMwMTc3LzAvMzIzMTMxMmUz
MTM2MzEyZTMxMzkzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzMzMTM1MzMz
Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAdOhwDANBgkqhkiG9w0BAQsFAAOCAQEALfmVnOTiU1yboGw9
kHgEAHmlnbrJ0b49EN1jxWuZkWlQ0oot7zJfnhNH9PbinSZDydBtGFE3zWG2YvFQ
tW3ShodQQe8GeS2BPhnaONOAV4LSBPXWbKJQ/t7+kXaBIa3eRF1kj9dhd/zOCC/5
VVSFz8W9iBgm7Kse8RUKXa5DLmkgHyXbVWpkq1FXmPF1aTtC2glUXkdL+/g4jjeP
EwHhjMHRjViDHmiQluocRB1dXguwK2nzCHtCpvpQ0F/GtUsabNrA05OSY35m6X+K
ZnQTgVGAeXYcGnNNabN3u6W6dgFKD2gYnOok1e+XNh33N5NRlzafjW7jIKbjfH17
IqwuDA==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:17 2026 by rpki-client