
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3131382e3139342e33322e302f32312d3231203d3e2034383038.roa
File: 3131382e3139342e33322e302f32312d3231203d3e2034383038.roa (raw, json)
Hash identifier: w2gS6YzrPmxBS3U09oI9HMSpNUd5vKBmQTETDvb5uLE=
Subject key identifier: C7:D9:20:24:55:0F:F4:B8:9F:10:CA:4A:E4:F4:83:EF:68:B5:15:0B
Certificate issuer: /CN=098D421CB46F292F13CE71DF3D685D5E82893289
Certificate serial: 73E1D9752732D0B027BBCB925C5A5A0C8E3305A5
Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3131382e3139342e33322e302f32312d3231203d3e2034383038.roa
Signing time: Tue 02 Jun 2026 07:42:22 +0000
ROA not before: Tue 02 Jun 2026 07:37:22 +0000
ROA not after: Tue 01 Jun 2027 07:42:22 +0000
asID: 4808
IP address blocks: 118.194.32.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:e1:d9:75:27:32:d0:b0:27:bb:cb:92:5c:5a:5a:0c:8e:33:05:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289
Validity
Not Before: Jun 2 07:37:22 2026 GMT
Not After : Jun 1 07:42:22 2027 GMT
Subject: CN=C7D92024550FF4B89F10CA4AE4F483EF68B5150B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fc:42:ab:55:3c:dd:b9:39:3f:c6:4a:51:18:
2f:49:a6:7d:1f:a6:67:57:20:e2:7c:83:3c:63:8c:
c0:b9:2f:29:32:20:5d:2c:cb:f5:50:96:9a:7f:3c:
f5:f6:8a:34:ca:f6:59:cb:c0:7f:53:e8:5a:48:0a:
38:89:44:14:24:30:05:66:b2:32:6d:4e:34:57:52:
bb:c4:9c:b2:42:2f:49:e0:af:e1:9b:ed:64:d4:37:
4f:61:f5:9b:b2:de:09:2e:3f:2a:0c:76:c4:f7:c9:
75:22:bc:71:3c:b1:3e:f6:0c:55:56:c6:bf:f3:3f:
6b:54:0c:17:a1:65:13:ac:c3:55:6b:c7:03:37:cf:
68:a8:88:8c:8a:24:b1:13:44:46:2d:23:a4:5f:d0:
49:be:6b:74:f7:5d:5b:b3:65:d8:b4:8e:12:3e:20:
d7:bf:62:bf:86:e2:3b:0e:fa:db:44:2b:04:05:60:
a1:f8:af:a7:b7:fd:a0:48:f5:89:49:c3:84:8e:5a:
a4:89:bb:34:ea:7e:59:80:8f:91:75:10:c6:19:6e:
ab:25:c5:f4:d0:41:0e:10:6d:05:cd:e0:57:7a:38:
72:c0:57:19:bf:7e:53:74:cb:8e:c9:d0:13:e7:f2:
6b:29:3a:ab:9e:ff:35:84:5e:66:b8:6e:6a:a2:5b:
81:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D9:20:24:55:0F:F4:B8:9F:10:CA:4A:E4:F4:83:EF:68:B5:15:0B
X509v3 Authority Key Identifier:
keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3131382e3139342e33322e302f32312d3231203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.194.32.0/21
Signature Algorithm: sha256WithRSAEncryption
06:3e:01:7c:50:10:23:94:39:66:65:fd:8c:19:d1:aa:25:ed:
fb:34:51:19:92:0e:96:f4:a2:87:6c:95:4e:cc:04:63:35:b4:
13:1c:05:96:cc:5c:2b:d2:d2:9a:26:96:ed:9a:8c:44:05:b6:
eb:5a:f0:22:23:2d:ba:85:6a:a1:23:50:32:6f:94:04:a5:eb:
c5:4c:2e:36:90:47:a6:bf:b0:df:f5:1c:c1:34:6f:77:01:2a:
d1:7a:42:aa:62:b3:f6:93:e4:74:af:32:30:bd:e8:3a:24:46:
38:64:fb:2e:41:d9:1c:1d:52:c4:87:7a:ac:a4:8a:f6:b0:d9:
e6:06:38:3c:49:53:91:8a:03:7f:a5:0d:ac:08:61:98:a3:97:
6a:77:db:ec:0a:5c:7c:75:f7:08:86:31:dc:53:81:ed:89:9d:
0e:1b:9b:f1:b7:3a:e2:53:6c:e3:66:15:ae:ac:75:51:1d:85:
47:55:97:ee:40:d3:16:2b:ba:8c:6e:ec:b6:b5:a5:6f:bf:e7:
54:13:f5:d5:a8:44:ef:20:57:c3:8b:8b:5c:8b:54:c2:bc:cc:
35:ed:f3:99:b0:f9:00:e3:41:e1:21:9b:76:25:3b:a6:85:c9:
48:fc:f8:b3:29:82:38:2d:cc:70:19:0f:07:9a:a5:d0:b5:79:
7a:6b:30:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:14 2026 by rpki-client