
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3231312e3136312e3139342e302f32332d3233203d3e20313331353336.roa
File: 3231312e3136312e3139342e302f32332d3233203d3e20313331353336.roa (raw, json)
Hash identifier: WriACry53SHuZAqaOHUmQZQBLKUHAPX8KbmqCW+xxjY=
Subject key identifier: 7B:AA:EA:E3:CB:3B:7F:90:17:7D:CF:87:CF:C5:17:53:81:43:C2:80
Certificate issuer: /CN=A162689F28161D4D4C3DF339D95097D5EF647370
Certificate serial: 74E82F815C2A430AAF3CEDD564FA3E1FF2AE9016
Authority key identifier: A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3231312e3136312e3139342e302f32332d3233203d3e20313331353336.roa
Signing time: Tue 16 Jun 2026 02:06:36 +0000
ROA not before: Tue 16 Jun 2026 02:01:36 +0000
ROA not after: Tue 15 Jun 2027 02:06:36 +0000
asID: 131536
IP address blocks: 211.161.194.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 07:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:e8:2f:81:5c:2a:43:0a:af:3c:ed:d5:64:fa:3e:1f:f2:ae:90:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A162689F28161D4D4C3DF339D95097D5EF647370
Validity
Not Before: Jun 16 02:01:36 2026 GMT
Not After : Jun 15 02:06:36 2027 GMT
Subject: CN=7BAAEAE3CB3B7F90177DCF87CFC517538143C280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a6:1f:29:87:ee:96:ea:ef:e0:14:21:6f:ec:
6a:ab:30:48:5c:44:04:08:b6:84:88:af:e2:e1:a9:
4c:83:79:d7:c2:26:1e:63:ab:1f:71:5f:b6:a8:8d:
55:46:46:4a:33:c8:d0:74:6f:94:0d:e7:ce:a7:12:
0e:8d:f2:44:69:7a:5b:fc:92:ce:d1:b8:cd:58:70:
7f:78:a4:98:2f:09:25:cb:5c:c7:8f:7a:75:86:71:
9b:88:ca:53:41:4a:2f:ae:79:e6:a4:cb:fc:e2:ec:
8a:72:51:59:22:93:d9:bf:d1:73:52:6a:26:b7:db:
31:7c:42:82:a9:55:10:ec:ba:07:6d:0a:99:91:cc:
59:98:d7:bd:0c:c2:bc:e9:44:0c:1c:e3:51:f9:16:
dc:37:1e:b3:0b:9e:f1:2e:08:52:af:2f:4b:2b:30:
7a:97:4a:ac:7c:56:e5:dc:9b:79:9e:9e:50:19:1c:
a4:aa:cb:8c:24:f5:d5:5e:6a:2d:fa:a9:c9:97:8b:
17:c1:76:6d:dc:46:b6:cc:30:b5:c1:7a:b5:2b:fc:
94:1f:ef:f6:56:77:62:c4:cd:00:93:58:b1:c1:05:
c4:91:35:f9:d9:e1:54:99:70:b1:f4:a9:89:96:a9:
94:ae:1a:3b:27:90:59:8f:fa:34:a1:e1:49:5d:5e:
d2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AA:EA:E3:CB:3B:7F:90:17:7D:CF:87:CF:C5:17:53:81:43:C2:80
X509v3 Authority Key Identifier:
keyid:A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3231312e3136312e3139342e302f32332d3233203d3e20313331353336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.161.194.0/23
Signature Algorithm: sha256WithRSAEncryption
77:77:63:4b:e5:d5:d7:81:61:a2:7a:05:17:fd:d7:26:1f:07:
32:b4:e8:9e:b0:52:57:d6:42:b0:13:cb:66:53:30:7a:f3:ee:
50:67:39:f1:24:6e:04:3f:f8:7d:56:d3:62:fa:53:ae:23:72:
ba:5f:a3:5d:14:aa:52:e0:ef:a0:52:41:cd:b0:83:e7:28:af:
9e:5e:a7:e8:9e:c8:bc:ff:a2:fb:ea:95:ff:a7:2f:93:ab:9b:
9d:4b:89:b5:73:fa:c8:a2:72:c8:e3:0d:ad:8c:28:6c:57:33:
d1:e0:c4:2d:30:34:26:c1:ec:60:ee:b8:b6:4a:79:26:13:f9:
a7:ed:e3:4a:ec:b6:f8:31:65:9b:81:8c:7b:7a:cc:0e:66:23:
54:1f:b2:9d:38:e8:91:d4:17:b3:f5:b6:5c:af:40:18:62:cf:
b2:f0:06:48:4f:f9:50:5f:ca:2b:40:c8:a9:b2:b3:aa:da:83:
7a:2b:ac:f1:a1:08:e7:14:9b:01:5d:d2:19:8b:c9:dd:dc:21:
49:63:42:2c:4c:7a:47:e7:03:40:03:f3:e5:e1:49:f1:30:5a:
28:f7:60:6b:0f:e5:d8:24:fb:ed:9c:b1:83:6d:b9:fd:2a:e7:
87:d6:bb:68:e7:83:6a:06:c4:ea:4f:a8:ea:e0:3c:f2:92:ba:
01:2b:49:9f
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUdOgvgVwqQwqvPO3VZPo+H/KukBYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE2MjY4OUYyODE2MUQ0RDRDM0RGMzM5RDk1MDk3RDVF
RjY0NzM3MDAeFw0yNjA2MTYwMjAxMzZaFw0yNzA2MTUwMjA2MzZaMDMxMTAvBgNV
BAMTKDdCQUFFQUUzQ0IzQjdGOTAxNzdEQ0Y4N0NGQzUxNzUzODE0M0MyODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ph8ph+6W6u/gFCFv7GqrMEhc
RAQItoSIr+LhqUyDedfCJh5jqx9xX7aojVVGRkozyNB0b5QN586nEg6N8kRpelv8
ks7RuM1YcH94pJgvCSXLXMePenWGcZuIylNBSi+ueeaky/zi7IpyUVkik9m/0XNS
aia32zF8QoKpVRDsugdtCpmRzFmY170MwrzpRAwc41H5Ftw3HrMLnvEuCFKvL0sr
MHqXSqx8VuXcm3menlAZHKSqy4wk9dVeai36qcmXixfBdm3cRrbMMLXBerUr/JQf
7/ZWd2LEzQCTWLHBBcSRNfnZ4VSZcLH0qYmWqZSuGjsnkFmP+jSh4UldXtIvAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUe6rq48s7f5AXfc+Hz8UXU4FDwoAwHwYDVR0j
BBgwFoAUoWJonygWHU1MPfM52VCX1e9kc3AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MjMzMDM0NjkzMDE3Ny8wL0ExNjI2ODlGMjgxNjFENEQ0QzNERjMzOUQ5NTA5
N0Q1RUY2NDczNzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTE2MjY4OUYyODE2MUQ0RDRDM0RGMzM5RDk1MDk3RDVFRjY0NzM3MC5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgyMzMwMzQ2OTMwMTc3LzAvMzIzMTMxMmUz
MTM2MzEyZTMxMzkzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzMzMTM1MzMz
Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAdOhwjANBgkqhkiG9w0BAQsFAAOCAQEAd3djS+XV14FhonoF
F/3XJh8HMrTonrBSV9ZCsBPLZlMwevPuUGc58SRuBD/4fVbTYvpTriNyul+jXRSq
UuDvoFJBzbCD5yivnl6n6J7IvP+i++qV/6cvk6ubnUuJtXP6yKJyyOMNrYwobFcz
0eDELTA0JsHsYO64tkp5JhP5p+3jSuy2+DFlm4GMe3rMDmYjVB+ynTjokdQXs/W2
XK9AGGLPsvAGSE/5UF/KK0DIqbKzqtqDeius8aEI5xSbAV3SGYvJ3dwhSWNCLEx6
R+cDQAPz5eFJ8TBaKPdgaw/l2CT77Zyxg225/Srnh9a7aOeDagbE6k+o6uA88pK6
AStJnw==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:11 2026 by rpki-client