
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972271107/0/3131352e3137342e3132382e302f31382d3138203d3e2030.roa
File: 3131352e3137342e3132382e302f31382d3138203d3e2030.roa (raw, json)
Hash identifier: Te5aEH7Atwzwtj7U44Rp2UG8nMmkJlV2pEePC4dAlEQ=
Subject key identifier: FE:99:85:6E:94:7E:9D:56:43:FC:91:53:7E:5F:CE:F5:1F:24:82:7C
Certificate issuer: /CN=8FAB27452D80D270582E88C3F77F13734A31720D
Certificate serial: 62782865BAEB0AFAF269E2974121EB1DE4D9C9B0
Authority key identifier: 8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/3131352e3137342e3132382e302f31382d3138203d3e2030.roa
Signing time: Fri 29 May 2026 07:27:22 +0000
ROA not before: Fri 29 May 2026 07:22:22 +0000
ROA not after: Fri 28 May 2027 07:27:22 +0000
asID: 0
IP address blocks: 115.174.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 08:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:78:28:65:ba:eb:0a:fa:f2:69:e2:97:41:21:eb:1d:e4:d9:c9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FAB27452D80D270582E88C3F77F13734A31720D
Validity
Not Before: May 29 07:22:22 2026 GMT
Not After : May 28 07:27:22 2027 GMT
Subject: CN=FE99856E947E9D5643FC91537E5FCEF51F24827C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:24:45:a1:02:a5:82:e3:94:d1:1b:a0:2a:df:
bd:6f:b1:2e:73:83:7c:4e:81:29:e4:08:c5:43:a8:
a4:09:80:c8:bc:ed:03:f8:f6:20:2b:dc:3a:7c:e8:
7b:ec:68:c2:30:44:51:51:44:3d:43:2c:08:63:4c:
dc:14:c1:47:c9:a3:69:2d:69:e2:c7:a4:2e:b9:35:
ab:05:b4:a0:b6:3c:c9:f0:79:3b:a4:70:05:41:80:
bc:3b:37:67:b4:37:e2:82:8f:a8:3b:e8:de:bf:7a:
c9:b5:38:87:5c:4f:1b:4c:22:be:f8:b9:53:38:60:
69:09:12:8e:ec:58:63:68:d1:8b:71:5b:f4:13:d5:
14:5a:69:84:50:ff:77:34:33:d3:63:00:9c:67:79:
b8:e7:aa:8e:a2:bf:50:fc:6a:fe:74:98:4d:d2:03:
81:1e:d9:67:40:1f:a3:f1:a8:68:1d:d9:29:08:4e:
6a:6c:dd:82:30:77:a5:2b:3a:06:82:33:c1:3e:14:
8e:d4:22:29:84:24:66:7a:9c:9d:1c:fe:b3:be:aa:
c6:aa:ae:e8:b2:17:97:35:58:9a:ee:b2:04:65:1e:
f2:1a:86:ac:9b:e5:e4:dc:5b:6f:a6:b6:f8:e6:50:
2b:46:d5:54:e7:16:66:47:22:9b:2b:5d:a5:26:b5:
52:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:99:85:6E:94:7E:9D:56:43:FC:91:53:7E:5F:CE:F5:1F:24:82:7C
X509v3 Authority Key Identifier:
keyid:8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/3131352e3137342e3132382e302f31382d3138203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.174.128.0/18
Signature Algorithm: sha256WithRSAEncryption
21:ca:12:a6:c5:56:b6:7a:5a:4c:e3:e9:48:68:b9:3f:2f:2b:
6a:10:c3:57:55:c1:a0:1f:6e:80:0d:e0:64:15:4d:49:1a:61:
c1:78:34:9c:f6:99:0d:8d:1c:1a:46:58:c2:6c:5b:30:3b:62:
90:0c:6a:50:33:4c:e2:37:b9:1b:fe:a2:1b:9f:89:93:8a:ff:
f8:ef:2e:88:b1:78:55:7d:dc:4c:83:f1:bc:07:06:46:47:17:
9a:f0:68:51:8a:3f:c2:91:30:f8:7a:ac:c8:d7:96:90:ca:a6:
10:0f:0f:da:5a:2e:52:4b:51:65:d5:43:83:e6:ae:ba:da:78:
8a:35:44:30:09:8e:e7:09:c7:fb:4b:19:b2:5f:89:d5:ae:0e:
41:bb:65:e4:60:08:99:83:a6:33:f4:d4:42:49:0a:64:a6:b0:
fd:f0:63:46:ba:35:37:c1:d5:92:8f:12:ef:f1:58:4e:6c:5f:
9c:89:3f:1f:7b:49:57:43:63:4a:2d:4d:29:75:88:29:d1:47:
f1:ef:86:6f:b5:01:b7:ea:e2:76:de:2b:61:04:b1:22:50:af:
26:3f:c5:6c:b7:84:82:50:6d:b7:91:94:f9:cc:77:32:2d:73:
fa:ca:26:53:2a:cb:fa:f2:17:f1:c1:05:dd:16:e1:e5:a8:19:
37:dd:80:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:19 2026 by rpki-client