
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3131382e3139342e34382e302f32312d3231203d3e203536303438.roa
File: 3131382e3139342e34382e302f32312d3231203d3e203536303438.roa (raw, json)
Hash identifier: jJHfhdH55SAnLJjrfpHzF3IQbWlzuqxr70ysIHv2Qx4=
Subject key identifier: 15:33:17:A2:06:A5:5C:01:33:56:9A:ED:7D:87:AA:89:29:FB:11:E4
Certificate issuer: /CN=098D421CB46F292F13CE71DF3D685D5E82893289
Certificate serial: 258641249A2C064C4A2700B540E2761A4D04892A
Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3131382e3139342e34382e302f32312d3231203d3e203536303438.roa
Signing time: Tue 02 Jun 2026 07:48:54 +0000
ROA not before: Tue 02 Jun 2026 07:43:54 +0000
ROA not after: Tue 01 Jun 2027 07:48:54 +0000
asID: 56048
IP address blocks: 118.194.48.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 01:08:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:86:41:24:9a:2c:06:4c:4a:27:00:b5:40:e2:76:1a:4d:04:89:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289
Validity
Not Before: Jun 2 07:43:54 2026 GMT
Not After : Jun 1 07:48:54 2027 GMT
Subject: CN=153317A206A55C0133569AED7D87AA8929FB11E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3d:23:f4:57:39:14:e9:ae:41:a5:42:a6:79:
4b:1c:61:ae:25:1a:06:ab:4e:25:17:67:01:e1:9d:
67:d3:96:80:c8:e1:20:cb:ad:c6:15:82:69:6e:44:
ca:28:d2:44:46:b9:32:50:26:18:8b:33:a0:11:62:
6a:d7:1d:33:0d:27:e6:64:dd:45:89:ed:e3:bd:0e:
3a:37:9b:5e:a2:d2:66:0b:fa:60:f3:e9:a0:80:1c:
61:16:85:da:48:84:82:96:3e:17:2d:b6:2d:69:be:
5f:40:d0:9f:3e:29:df:15:27:56:1e:db:38:29:4f:
39:43:bf:7c:20:57:4b:73:84:03:50:c6:84:bd:17:
08:29:55:4a:b8:7f:56:b8:98:b8:b7:18:81:53:78:
88:70:4f:d9:bf:5f:fc:5c:12:b5:eb:11:10:31:91:
1b:2a:00:ed:c3:58:82:68:a2:dc:91:b8:b5:cd:23:
b1:01:bf:b0:17:95:4e:53:26:dd:0b:b6:ba:9f:6d:
d9:86:79:fc:c3:a4:06:97:50:a5:a2:99:dc:e4:0e:
e2:5a:b1:d8:36:93:36:c9:26:8f:ed:6c:06:85:13:
18:77:8c:a0:d4:07:23:2d:b8:e6:f7:c7:dd:d7:17:
07:b9:c7:6f:90:86:26:24:91:ab:48:14:a9:42:03:
85:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:33:17:A2:06:A5:5C:01:33:56:9A:ED:7D:87:AA:89:29:FB:11:E4
X509v3 Authority Key Identifier:
keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3131382e3139342e34382e302f32312d3231203d3e203536303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.194.48.0/21
Signature Algorithm: sha256WithRSAEncryption
32:67:f7:af:88:e4:68:29:f8:7f:e4:0f:42:9b:d7:7b:4b:5d:
09:6f:31:dd:06:cc:09:34:23:2e:a5:23:c2:25:99:3c:46:c8:
8c:b5:1d:01:2e:64:05:9f:67:88:71:7d:42:49:03:d5:da:d4:
b9:c7:59:94:cc:56:db:28:21:55:ed:4b:b1:43:7f:13:5c:ff:
68:6a:ed:68:d8:30:a7:c6:ec:b9:41:a0:cb:ac:87:44:d7:77:
af:c1:67:48:72:da:46:93:b1:59:0e:87:85:24:b4:09:c4:f3:
a7:71:c8:32:cf:18:20:06:ab:6d:57:d8:ca:16:7d:57:17:b7:
ec:9d:14:74:07:b3:39:02:cd:60:8a:7b:5c:b6:c1:ac:39:f0:
a4:ea:b3:a3:6f:6c:c5:d0:64:39:b5:1a:8d:e9:9d:46:fd:e6:
57:6d:f3:da:15:06:8c:55:42:ce:21:bb:13:6b:23:15:14:38:
b6:1d:f5:6b:7a:05:54:b0:a8:1d:ab:cf:29:a3:df:71:83:7a:
a0:67:9d:1c:91:72:a2:ab:79:13:92:b9:8c:aa:70:cf:35:d0:
50:b6:b5:d4:ac:4c:48:ac:09:aa:86:ce:14:49:56:8f:e9:ca:
08:76:01:d4:39:94:60:12:ca:42:d0:40:5d:c2:cb:7d:08:d7:
80:21:47:66
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUJYZBJJosBkxKJwC1QOJ2Gk0EiSowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk4RDQyMUNCNDZGMjkyRjEzQ0U3MURGM0Q2ODVENUU4
Mjg5MzI4OTAeFw0yNjA2MDIwNzQzNTRaFw0yNzA2MDEwNzQ4NTRaMDMxMTAvBgNV
BAMTKDE1MzMxN0EyMDZBNTVDMDEzMzU2OUFFRDdEODdBQTg5MjlGQjExRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOPSP0VzkU6a5BpUKmeUscYa4l
GgarTiUXZwHhnWfTloDI4SDLrcYVgmluRMoo0kRGuTJQJhiLM6ARYmrXHTMNJ+Zk
3UWJ7eO9Djo3m16i0mYL+mDz6aCAHGEWhdpIhIKWPhctti1pvl9A0J8+Kd8VJ1Ye
2zgpTzlDv3wgV0tzhANQxoS9FwgpVUq4f1a4mLi3GIFTeIhwT9m/X/xcErXrERAx
kRsqAO3DWIJootyRuLXNI7EBv7AXlU5TJt0LtrqfbdmGefzDpAaXUKWimdzkDuJa
sdg2kzbJJo/tbAaFExh3jKDUByMtuOb3x93XFwe5x2+QhiYkkatIFKlCA4UzAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUFTMXogalXAEzVprtfYeqiSn7EeQwHwYDVR0j
BBgwFoAUCY1CHLRvKS8TznHfPWhdXoKJMokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4Mjc0MTU3NzY2MjQ2Ni8wLzA5OEQ0MjFDQjQ2RjI5MkYxM0NFNzFERjNENjg1
RDVFODI4OTMyODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMDk4RDQyMUNCNDZGMjkyRjEzQ0U3MURGM0Q2ODVENUU4Mjg5MzI4OS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4Mjc0MTU3NzY2MjQ2Ni8wLzMxMzEzODJlMzEz
OTM0MmUzNDM4MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzUzNjMwMzQzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEA3bCMDANBgkqhkiG9w0BAQsFAAOCAQEAMmf3r4jkaCn4f+QPQpvXe0td
CW8x3QbMCTQjLqUjwiWZPEbIjLUdAS5kBZ9niHF9QkkD1drUucdZlMxW2yghVe1L
sUN/E1z/aGrtaNgwp8bsuUGgy6yHRNd3r8FnSHLaRpOxWQ6HhSS0CcTzp3HIMs8Y
IAarbVfYyhZ9Vxe37J0UdAezOQLNYIp7XLbBrDnwpOqzo29sxdBkObUajemdRv3m
V23z2hUGjFVCziG7E2sjFRQ4th31a3oFVLCoHavPKaPfcYN6oGedHJFyoqt5E5K5
jKpwzzXQULa11KxMSKwJqobOFElWj+nKCHYB1DmUYBLKQtBAXcLLfQjXgCFHZg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:45:02 2026 by rpki-client