
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3131382e3139342e34302e302f32312d3231203d3e2034383038.roa
File: 3131382e3139342e34302e302f32312d3231203d3e2034383038.roa (raw, json)
Hash identifier: uTqtT2+Z+32pQg4cwaqs2sAF3NdBZFcby8wCkB8VGjE=
Subject key identifier: 08:56:A6:00:89:46:E1:B9:CB:74:C6:1E:1A:21:A0:77:DA:E8:A0:41
Certificate issuer: /CN=098D421CB46F292F13CE71DF3D685D5E82893289
Certificate serial: 11BBC11B825D8266E2C8DABD38CE1662E272AA35
Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3131382e3139342e34302e302f32312d3231203d3e2034383038.roa
Signing time: Tue 02 Jun 2026 07:43:12 +0000
ROA not before: Tue 02 Jun 2026 07:38:12 +0000
ROA not after: Tue 01 Jun 2027 07:43:12 +0000
asID: 4808
IP address blocks: 118.194.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:bb:c1:1b:82:5d:82:66:e2:c8:da:bd:38:ce:16:62:e2:72:aa:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289
Validity
Not Before: Jun 2 07:38:12 2026 GMT
Not After : Jun 1 07:43:12 2027 GMT
Subject: CN=0856A6008946E1B9CB74C61E1A21A077DAE8A041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e7:71:58:8f:a6:e3:7d:0d:7b:5a:9f:64:07:
26:a8:b6:25:f2:85:5f:3a:cf:97:31:25:c8:6d:30:
a2:cc:91:6c:24:50:55:66:5c:61:3c:9a:a4:59:c6:
5b:15:5e:2a:96:1a:18:aa:c8:85:ab:9c:0d:28:b5:
e7:5d:4d:01:9c:6d:41:e6:39:a3:bf:48:71:bc:44:
3b:b4:e0:50:75:3e:a0:36:c7:71:8a:f0:1e:ea:8b:
8a:ab:ac:1f:53:ad:7e:8c:9e:a7:83:0c:cf:55:37:
49:ea:b6:73:cf:73:8e:45:39:94:10:16:4b:28:60:
2b:af:8d:fb:1e:be:1f:0d:48:7f:59:16:90:56:9d:
14:41:33:f0:9b:bb:42:ed:9d:97:96:64:67:42:c1:
5a:09:2e:3d:15:e2:ea:ce:6d:71:d1:8c:7e:c8:b0:
da:09:c1:e2:a6:d1:f1:01:e9:c4:c5:20:a8:bf:7f:
24:98:cd:be:bb:19:c5:d1:91:a9:e0:38:a2:b1:11:
b7:73:f7:2b:f7:ee:f9:e1:43:e1:62:36:dc:1a:39:
06:b6:ce:39:14:b7:8d:f6:16:00:04:d4:dd:78:af:
f1:89:e9:92:33:c4:66:58:4c:17:fe:7e:43:07:dd:
ce:e0:bc:c7:09:64:fb:f7:a7:9b:ca:86:48:6a:91:
9b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:56:A6:00:89:46:E1:B9:CB:74:C6:1E:1A:21:A0:77:DA:E8:A0:41
X509v3 Authority Key Identifier:
keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3131382e3139342e34302e302f32312d3231203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.194.40.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:9b:fa:72:e1:d8:df:c7:52:b7:ce:d3:f8:70:d1:e5:09:3d:
4a:d7:a8:fe:20:a5:1a:3c:ff:98:8b:3e:04:ed:e4:97:c2:03:
49:2e:a7:2a:47:b3:67:70:01:0a:c4:b5:55:6d:75:99:68:0f:
61:29:6c:d1:c1:78:91:fc:4e:75:8a:99:c6:8b:6e:24:9c:28:
be:b8:ff:c2:bf:29:93:62:91:ca:41:80:88:33:ad:ed:46:79:
2a:c7:e9:b4:b1:dc:a8:66:4b:34:09:77:3d:ad:6d:1f:8a:4f:
95:10:9a:ff:8a:43:d3:49:48:6a:b9:57:da:27:be:fb:fb:87:
55:4f:88:e2:c1:05:9a:3d:49:35:d6:c6:76:e0:59:26:10:f1:
07:11:81:22:d9:9a:a9:a8:6f:ed:4b:b5:75:f5:f3:73:77:bb:
ba:f7:55:13:a8:90:ac:d6:34:2b:dc:96:03:a0:0a:35:f4:e8:
30:a3:d7:b1:98:4d:92:e0:7f:e1:44:4a:19:fd:75:ef:d4:55:
53:93:98:47:2b:81:c4:37:c6:f8:4b:31:30:10:1d:f2:4e:8a:
87:7b:f0:21:12:46:4f:84:86:b9:61:5e:39:d3:18:e8:24:be:
da:e6:1d:6e:4c:9e:de:67:a7:1e:d7:37:0f:40:92:1b:a4:91:
9f:1d:9e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:51 2026 by rpki-client