
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347388929/0/3131362e3139392e3135362e302f32322d3234203d3e203231383539.roa
File: 3131362e3139392e3135362e302f32322d3234203d3e203231383539.roa (raw, json)
Hash identifier: y85JS4IrFI4cLDMqGOcoSALZjFCH1nQD/vjK7EhIyVs=
Subject key identifier: E1:B6:22:91:1B:18:82:DC:5B:0C:D3:15:5E:04:3F:91:8C:9B:EC:F9
Certificate issuer: /CN=E23C4800CA452B1A8E6214923C01540E30830232
Certificate serial: 340FAEC7456C03A425AF56A766E1B2744EAD7B96
Authority key identifier: E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/3131362e3139392e3135362e302f32322d3234203d3e203231383539.roa
Signing time: Wed 08 Apr 2026 15:08:31 +0000
ROA not before: Wed 08 Apr 2026 15:03:31 +0000
ROA not after: Wed 07 Apr 2027 15:08:31 +0000
asID: 21859
IP address blocks: 116.199.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 12:41:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:0f:ae:c7:45:6c:03:a4:25:af:56:a7:66:e1:b2:74:4e:ad:7b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E23C4800CA452B1A8E6214923C01540E30830232
Validity
Not Before: Apr 8 15:03:31 2026 GMT
Not After : Apr 7 15:08:31 2027 GMT
Subject: CN=E1B622911B1882DC5B0CD3155E043F918C9BECF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ce:bc:85:7b:9c:1f:5d:3d:f3:ee:0f:49:77:
0c:05:36:58:fa:2e:5f:f7:ee:4e:8f:22:a8:ea:e1:
ec:d5:f1:a6:56:e0:34:ff:a2:d3:25:6a:97:bc:90:
f7:05:29:f8:bf:82:53:ae:e9:b6:e9:0d:44:03:2a:
39:f4:a0:f5:43:d6:34:bb:97:77:16:41:11:a6:05:
9d:c0:60:67:d3:24:f7:da:1a:87:24:bb:8a:f7:f7:
b7:0c:a4:51:de:c5:0b:e6:59:70:f8:b8:33:d8:0f:
5d:26:d0:88:d1:22:11:eb:ce:e3:9c:2b:8d:13:c5:
92:c8:71:98:c4:12:42:fd:78:aa:c0:c6:f5:b7:b0:
ef:77:e6:ed:e7:cc:c4:ba:c0:46:cd:45:ea:04:95:
ab:91:ea:a7:17:e7:6c:7c:6d:13:14:cc:9c:7b:06:
da:9b:88:46:b2:1e:ea:89:f2:23:33:5d:9f:94:1c:
30:d3:e3:e6:19:d1:b7:16:07:d5:b7:08:2a:d8:a3:
0d:b2:9e:7f:83:a9:00:0f:86:7a:7e:89:68:47:f7:
86:93:76:24:de:85:bc:ea:97:64:50:20:cb:fb:0f:
28:95:47:82:e9:6c:a6:58:64:6f:22:c3:09:96:a3:
21:b9:ea:be:47:d6:ac:b8:fd:53:db:03:23:d8:99:
01:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B6:22:91:1B:18:82:DC:5B:0C:D3:15:5E:04:3F:91:8C:9B:EC:F9
X509v3 Authority Key Identifier:
keyid:E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/3131362e3139392e3135362e302f32322d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.199.156.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:41:05:60:37:c6:0e:a0:a5:d4:6c:f0:c1:8d:d0:f2:8c:5e:
e4:7b:77:b3:c3:cc:74:79:04:62:b5:91:02:df:e0:a2:0b:1c:
e9:e8:fe:f1:0a:c5:c1:1e:b5:de:a7:71:04:47:36:7c:4d:50:
78:e3:c2:cf:a5:b9:94:39:d0:fc:ab:81:4e:5f:02:fd:9f:63:
1c:2a:cb:14:7a:ca:3a:7d:5b:07:0a:48:96:86:e3:b3:62:93:
12:f3:0e:49:0a:06:1c:1b:4e:46:a7:f8:48:0a:ec:ef:95:07:
7e:1b:a7:dc:b6:9d:54:15:f3:b3:ef:e5:38:0f:a2:8f:a1:10:
66:ec:03:49:ae:d5:02:63:d8:60:a8:2d:1e:2d:2a:dd:22:9e:
6b:89:57:cf:58:83:ea:54:97:44:b6:4d:7a:ca:5c:36:65:a3:
bb:77:c5:cd:fb:33:5c:4f:c9:68:3b:3e:8f:89:7c:7c:16:88:
b0:1d:bf:9d:4c:12:a9:c2:76:a2:1a:3d:fc:a8:44:78:5c:7a:
6f:8b:1d:3d:15:d9:db:fa:3f:1f:54:92:df:c7:87:a5:28:fe:
9d:b5:35:fc:d5:b7:77:94:d3:5c:19:a3:c5:6b:49:b5:6a:d4:
24:e9:b0:ba:b3:24:74:39:54:6b:b9:00:56:02:ef:10:51:61:
5e:47:e3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 13:54:43 2026 by rpki-client