
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e34382e302f32312d3231203d3e203536303438.roa
File: 3132322e31312e34382e302f32312d3231203d3e203536303438.roa (raw, json)
Hash identifier: OeABueeL5bVOfgm0ioMscNw6JnIbVThJEuNaqIcxCnc=
Subject key identifier: FB:5F:6B:25:AA:20:A5:93:17:68:AB:D1:F5:71:A3:68:94:99:86:A4
Certificate issuer: /CN=098D421CB46F292F13CE71DF3D685D5E82893289
Certificate serial: 7A513D9BE679CF080DAF43CCFE8ECB969E7A9442
Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e34382e302f32312d3231203d3e203536303438.roa
Signing time: Tue 02 Jun 2026 07:48:53 +0000
ROA not before: Tue 02 Jun 2026 07:43:53 +0000
ROA not after: Tue 01 Jun 2027 07:48:53 +0000
asID: 56048
IP address blocks: 122.11.48.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 01:08:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:51:3d:9b:e6:79:cf:08:0d:af:43:cc:fe:8e:cb:96:9e:7a:94:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289
Validity
Not Before: Jun 2 07:43:53 2026 GMT
Not After : Jun 1 07:48:53 2027 GMT
Subject: CN=FB5F6B25AA20A5931768ABD1F571A368949986A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fa:30:b3:c5:c3:4d:d4:e2:ec:20:b0:29:be:
ee:85:0e:d6:ef:21:63:e0:95:6b:54:34:e0:db:07:
c9:e1:33:08:23:74:e0:92:a3:37:00:b7:7f:26:b2:
3e:cf:2f:d3:b9:93:0f:0b:d2:ff:d3:a8:32:e3:1e:
a9:b1:87:23:e0:0c:da:16:ac:39:92:46:c0:f1:9f:
bb:ac:03:5c:6d:6c:9b:ca:43:5c:6a:d3:0c:e0:64:
17:91:2a:f5:e4:0e:ee:6b:88:7f:ab:81:ec:b5:d7:
f6:81:c8:53:88:4f:90:66:a0:a2:e5:08:41:c5:f2:
fd:2b:0e:ea:72:c0:ac:72:bc:17:c3:b6:39:48:e0:
2b:34:c1:2f:19:f9:68:ac:c3:c6:02:be:b2:6c:9a:
69:2d:02:a4:b7:34:88:cd:bb:01:41:a2:fb:7c:2d:
58:77:53:06:50:24:2c:26:72:7e:c8:49:c8:34:97:
48:4c:14:43:93:48:fb:49:d4:97:e8:6d:c3:8e:0a:
a0:05:55:20:a8:49:4f:3b:f3:3c:ec:48:3e:96:02:
ba:a6:ce:73:dc:60:e0:63:e4:94:dc:ee:1b:0e:aa:
fb:2b:4f:39:a9:09:c8:5d:17:ec:ac:a0:00:3c:64:
ae:29:27:94:5e:72:48:e0:df:8b:2c:dc:74:89:5c:
79:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5F:6B:25:AA:20:A5:93:17:68:AB:D1:F5:71:A3:68:94:99:86:A4
X509v3 Authority Key Identifier:
keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e34382e302f32312d3231203d3e203536303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.11.48.0/21
Signature Algorithm: sha256WithRSAEncryption
82:77:64:b8:21:44:4f:52:4c:9e:55:ab:d1:a1:f8:7d:b9:02:
33:aa:65:3e:9c:4e:d0:35:5d:1c:66:57:be:2f:c8:41:35:1b:
93:8c:e3:86:74:1c:c3:30:5d:df:b1:27:7e:e4:3a:08:ac:77:
91:3e:41:f3:d2:fc:52:bf:76:9a:b2:d2:cd:48:a2:59:03:9b:
cf:4d:de:db:8e:1a:ff:ae:27:99:9d:be:65:86:64:96:b8:23:
9b:31:e1:ed:88:d1:e0:61:c0:76:ce:7a:d7:97:05:62:cf:ea:
8a:ae:08:e4:56:c0:b2:f6:d7:2d:b7:02:19:2c:8d:42:eb:ea:
e8:99:17:b5:48:e7:c5:48:f2:31:f7:56:ab:35:e4:aa:3c:ba:
8d:ef:8f:e4:28:7c:3d:fc:d7:10:18:8e:5c:54:41:3a:15:04:
5c:93:5a:9a:d0:e2:c9:29:0d:16:ef:f3:78:8d:17:a4:29:c2:
f2:12:b9:64:5c:13:f5:e4:2a:52:9d:e1:03:bb:6a:26:fd:6a:
71:6b:5d:12:79:2c:6a:9b:19:bc:a9:1b:44:59:f4:e1:8f:8a:
15:02:fb:ec:75:aa:61:cc:8b:30:1a:83:d3:3d:9a:0d:1a:63:
29:f2:3e:97:64:58:34:99:00:2f:dc:62:76:ed:fc:a7:cb:64:
e1:f1:9e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:35 2026 by rpki-client