
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e35362e302f32312d3231203d3e203536303438.roa
File: 3132322e31312e35362e302f32312d3231203d3e203536303438.roa (raw, json)
Hash identifier: OlqVUzQBn8tcFE4niny8RcvphQVQAF2g7rjIrsr8Fhc=
Subject key identifier: 81:E7:8C:98:B1:4B:E2:D5:2A:FC:D0:29:86:34:44:F7:3F:B6:35:44
Certificate issuer: /CN=098D421CB46F292F13CE71DF3D685D5E82893289
Certificate serial: 1851F703BBA5BF29AE406572C8D0497F6296BC09
Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e35362e302f32312d3231203d3e203536303438.roa
Signing time: Tue 02 Jun 2026 07:48:54 +0000
ROA not before: Tue 02 Jun 2026 07:43:54 +0000
ROA not after: Tue 01 Jun 2027 07:48:54 +0000
asID: 56048
IP address blocks: 122.11.56.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 01:08:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:51:f7:03:bb:a5:bf:29:ae:40:65:72:c8:d0:49:7f:62:96:bc:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289
Validity
Not Before: Jun 2 07:43:54 2026 GMT
Not After : Jun 1 07:48:54 2027 GMT
Subject: CN=81E78C98B14BE2D52AFCD029863444F73FB63544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d2:58:95:a3:41:8b:dd:26:0f:2b:7c:49:b0:
ee:53:f7:b6:fd:46:a6:cd:2f:dd:15:46:d4:0b:29:
e5:d9:20:3a:66:d3:41:d1:91:d7:7e:44:28:12:c5:
c0:21:46:0f:9b:a9:05:ba:c4:d1:e5:3c:94:6f:0a:
39:36:b9:7d:6d:5f:b0:7f:da:3c:09:c9:fe:7d:cf:
f5:65:a2:18:42:c0:35:12:e4:a7:e8:b8:31:41:7f:
36:1d:90:ba:39:bd:aa:52:ed:72:72:0c:ab:9b:af:
68:88:bb:c7:f8:bc:64:14:86:9a:30:a5:45:75:33:
22:e6:24:f5:1f:bd:55:76:16:af:bc:09:44:72:e3:
ee:11:4c:8d:ae:83:b6:54:35:08:51:e3:37:93:98:
c9:80:20:90:47:02:f9:ac:c9:e9:16:ac:9c:0c:bf:
e2:2b:98:96:d7:94:1e:15:cb:f8:40:7c:c9:b6:14:
6b:2c:1e:60:bd:5e:35:9c:fe:33:48:32:42:48:d1:
51:08:6f:9d:43:04:3e:43:e4:47:6e:12:4a:2d:3d:
2e:61:ed:11:cb:81:6f:a0:13:84:9b:73:cb:7c:f5:
cc:52:cc:82:31:86:79:ce:99:e9:37:e1:90:c8:6e:
55:39:ef:16:e1:ac:fe:21:1f:cb:3f:08:fc:4b:a1:
51:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E7:8C:98:B1:4B:E2:D5:2A:FC:D0:29:86:34:44:F7:3F:B6:35:44
X509v3 Authority Key Identifier:
keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e35362e302f32312d3231203d3e203536303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.11.56.0/21
Signature Algorithm: sha256WithRSAEncryption
87:59:0d:64:0f:1d:2a:3e:15:33:9e:74:5e:f0:ef:c0:c5:70:
d4:77:81:f4:03:46:06:a4:09:99:91:a1:cd:24:a3:4f:5d:18:
2f:d3:a1:0a:37:c5:8e:7a:07:89:2b:d4:38:97:a9:b0:2e:6e:
d0:d1:05:d7:ca:c7:b1:1a:26:ea:42:a5:8c:ce:0c:ae:d5:ab:
b8:a6:23:f4:e3:3a:93:61:53:a5:b6:25:e2:2a:b7:a6:99:1b:
5b:d7:fa:15:6f:75:93:9e:f9:8b:3d:49:89:ec:44:d9:21:a9:
a2:0f:7f:85:e4:b7:16:75:03:31:7c:c0:b6:f0:9e:60:43:29:
06:95:5a:95:87:51:55:84:64:5b:34:ed:a5:3e:f8:df:5a:b4:
b9:f2:e9:1e:93:36:e9:57:fd:a9:38:fd:29:dd:52:68:50:13:
1c:27:27:e0:37:51:91:c7:69:e2:01:f2:5f:07:6a:e8:38:7b:
93:47:07:83:55:b8:3d:42:81:54:38:eb:e9:d5:82:a8:a4:8e:
6a:9d:80:e6:fd:24:70:64:4d:a5:95:cd:52:ef:67:7b:ef:c2:
67:1e:70:65:cf:0f:2d:d9:0c:b3:cb:91:55:32:e9:31:5b:7b:
15:6c:56:db:18:8d:5a:70:05:4b:3e:24:7b:7a:8f:82:d5:d4:
73:44:81:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:29 2026 by rpki-client