
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3131382e3139342e34302e302f32312d3231203d3e203536303438.roa
File: 3131382e3139342e34302e302f32312d3231203d3e203536303438.roa (raw, json)
Hash identifier: n4IPcR0vuUnwdrml1UZMOWsHcrDZi76Za6KE8Vlcgjo=
Subject key identifier: 39:93:C5:72:11:88:47:15:0C:69:CE:D7:1D:08:8E:CF:16:72:1F:7A
Certificate issuer: /CN=098D421CB46F292F13CE71DF3D685D5E82893289
Certificate serial: 17BD1F94F6D5EF1BBA4614D519CBB4EC54AE9750
Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3131382e3139342e34302e302f32312d3231203d3e203536303438.roa
Signing time: Tue 02 Jun 2026 07:48:54 +0000
ROA not before: Tue 02 Jun 2026 07:43:54 +0000
ROA not after: Tue 01 Jun 2027 07:48:54 +0000
asID: 56048
IP address blocks: 118.194.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 01:08:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:bd:1f:94:f6:d5:ef:1b:ba:46:14:d5:19:cb:b4:ec:54:ae:97:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289
Validity
Not Before: Jun 2 07:43:54 2026 GMT
Not After : Jun 1 07:48:54 2027 GMT
Subject: CN=3993C572118847150C69CED71D088ECF16721F7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c5:44:8d:63:85:96:6a:9b:4f:21:ce:94:30:
cd:59:e9:22:ab:5f:cf:aa:7d:4d:52:90:55:62:64:
66:36:cf:69:3f:aa:ea:e9:61:0f:69:f8:95:73:60:
70:38:49:fa:43:0f:0c:93:30:bd:ec:d2:d4:71:7f:
3a:26:32:84:47:29:a8:f6:60:0c:5b:41:74:71:2c:
66:77:55:45:19:6b:0f:c8:a4:65:4e:fb:16:49:7b:
78:07:be:96:2d:9a:45:bc:06:6e:bf:f7:6c:2e:d4:
7b:ec:08:de:74:1f:c4:1c:d3:e0:75:07:ea:4d:57:
73:0f:97:3a:e1:74:ad:60:c4:e4:ea:ec:8f:3b:eb:
fa:ac:75:0b:54:37:3c:a4:55:2d:ec:26:cc:d7:d5:
43:0c:5a:21:e5:e6:4d:0b:77:f9:c8:a3:62:11:3f:
92:ec:5d:f0:f8:ad:d2:6c:66:55:2f:87:21:e0:f0:
3c:7c:68:1d:b1:86:8d:f2:8f:09:6c:4a:72:f9:56:
08:96:0e:cc:04:f0:d0:56:87:50:07:91:5d:6b:ce:
17:05:1c:f1:23:b8:f9:c0:32:dc:d0:38:9a:a4:f5:
fc:49:8e:1e:64:0d:b4:33:2f:59:f4:53:09:24:4e:
af:06:44:6a:45:33:d2:4a:22:f7:08:a4:58:df:c7:
9c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:93:C5:72:11:88:47:15:0C:69:CE:D7:1D:08:8E:CF:16:72:1F:7A
X509v3 Authority Key Identifier:
keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3131382e3139342e34302e302f32312d3231203d3e203536303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.194.40.0/21
Signature Algorithm: sha256WithRSAEncryption
70:b9:60:00:bb:29:3a:e4:0a:53:3a:e9:8c:13:47:f0:e9:97:
16:a6:06:05:c6:f9:bc:9e:44:f5:6b:a7:16:e7:c3:03:a2:7a:
8a:bf:5a:0d:f2:f4:f3:67:9d:0f:6b:8e:73:d0:4d:cf:09:55:
0c:ab:4a:06:d5:d1:c7:04:d9:bb:eb:73:5b:4e:34:49:79:ef:
4c:21:1a:90:7a:ec:88:30:5c:1e:75:34:39:b8:a8:4b:86:77:
01:8b:c8:bc:38:a5:74:21:f4:8b:09:03:ac:97:7a:8c:8f:d3:
df:5b:17:88:20:fe:35:c0:14:33:6d:18:64:d3:73:61:f4:47:
75:cf:6e:5e:b3:93:57:5c:60:02:8e:16:33:28:da:00:1a:0a:
09:48:2d:dc:95:72:b4:e1:6e:72:e1:af:e7:01:90:3f:6d:3c:
05:b5:4d:8f:4f:a0:52:84:87:e7:5e:3e:0c:e8:8b:f0:3c:2e:
ce:a1:28:4d:6f:e6:90:aa:1f:fa:24:63:5e:65:f3:ac:b5:f1:
97:fe:6d:9e:cf:74:44:7b:ea:b5:b6:fb:11:2d:f5:d8:97:0a:
d7:74:63:27:42:95:8b:da:38:c6:65:d4:82:30:64:e5:02:62:
f3:93:19:ac:f8:0f:65:b7:e5:32:7d:9c:0f:a4:e4:5f:e2:c0:
a9:b0:55:2d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:51 2026 by rpki-client