
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972271107/0/3131352e3137342e3139322e302f31382d3138203d3e2030.roa
File: 3131352e3137342e3139322e302f31382d3138203d3e2030.roa (raw, json)
Hash identifier: Gdn5kYanplsKw4hmbWs20ErJlnc/Yo6eF/M1YgWETrA=
Subject key identifier: 8D:A0:56:EA:14:6F:A0:A5:4B:2D:09:BF:04:58:E8:0F:20:60:F4:4E
Certificate issuer: /CN=8FAB27452D80D270582E88C3F77F13734A31720D
Certificate serial: 1B6811C6A9849A1BEDEC752E69E7E68373F567C4
Authority key identifier: 8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/3131352e3137342e3139322e302f31382d3138203d3e2030.roa
Signing time: Fri 29 May 2026 07:27:22 +0000
ROA not before: Fri 29 May 2026 07:22:22 +0000
ROA not after: Fri 28 May 2027 07:27:22 +0000
asID: 0
IP address blocks: 115.174.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 08:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:68:11:c6:a9:84:9a:1b:ed:ec:75:2e:69:e7:e6:83:73:f5:67:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FAB27452D80D270582E88C3F77F13734A31720D
Validity
Not Before: May 29 07:22:22 2026 GMT
Not After : May 28 07:27:22 2027 GMT
Subject: CN=8DA056EA146FA0A54B2D09BF0458E80F2060F44E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9b:51:44:84:df:74:d3:49:2e:e6:11:d5:60:
8f:49:d6:9f:63:43:96:57:b8:4d:a5:80:c8:e7:7a:
6a:c0:58:1c:ab:3b:d6:3a:70:9b:7a:41:e6:0c:6a:
70:97:f5:93:47:59:67:84:90:45:ad:b9:90:69:85:
47:d6:6e:be:6c:e3:10:c3:ed:2d:03:b2:35:ed:63:
7e:93:75:24:b6:37:38:63:40:cf:66:ad:55:b6:b3:
c9:0e:59:6a:ae:58:82:43:58:56:7a:1e:6f:6f:fb:
7a:2c:d0:f7:60:05:89:dd:a7:c0:80:04:cb:ac:4f:
2e:7d:ac:54:e5:2d:84:68:2f:74:76:70:b5:86:df:
7a:1e:55:b7:3c:9f:77:83:50:e7:5d:b1:bb:1f:46:
8e:0a:91:fe:fe:ba:e8:3f:f4:98:1c:4b:fc:d8:04:
f6:f2:b6:d3:a1:13:cb:66:cd:d7:b3:81:5f:8c:e7:
18:33:2f:fb:ad:a5:3e:3f:4d:62:bf:ad:4b:d5:da:
df:1c:2f:50:c5:6e:48:d4:33:e8:15:67:36:9c:e7:
81:31:e0:d6:4a:3a:07:39:5d:1f:1c:e5:39:e2:21:
a1:25:c6:ae:07:cc:ad:50:50:18:f2:7d:4e:ea:b6:
ed:38:0f:16:d6:df:f9:1a:e9:b6:52:14:e9:60:80:
02:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A0:56:EA:14:6F:A0:A5:4B:2D:09:BF:04:58:E8:0F:20:60:F4:4E
X509v3 Authority Key Identifier:
keyid:8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/3131352e3137342e3139322e302f31382d3138203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.174.192.0/18
Signature Algorithm: sha256WithRSAEncryption
89:0e:9c:4d:e7:e1:74:44:60:fe:de:d0:ca:94:c0:14:20:2a:
ef:a9:b7:f1:fc:45:c2:6a:7b:ea:d2:9f:45:d9:24:65:c5:1c:
d2:e5:cb:ed:a1:d7:ea:37:7d:fd:d6:c4:73:71:86:47:7c:d1:
36:19:22:89:46:50:b1:94:21:c4:33:9f:3e:b9:08:39:d5:bc:
23:eb:8b:37:d0:27:64:88:6c:ce:8a:43:28:03:a5:44:b9:1b:
2a:c3:5f:e4:86:7c:23:48:6a:12:15:10:28:75:1f:e2:41:bd:
21:9e:50:bd:f7:99:1c:42:04:32:8f:0b:41:41:c6:19:35:d2:
1d:41:d0:b9:c2:12:61:2b:02:0f:0c:62:55:04:bd:ba:17:ef:
27:ae:11:9b:ff:66:9a:41:e4:38:ac:12:e1:1c:76:67:26:ff:
84:82:d1:fa:62:92:8a:ec:45:2e:af:72:46:d5:ce:2f:dc:13:
70:43:43:5a:e4:fe:26:de:4a:9f:a3:c2:e7:cf:72:b0:8c:98:
81:da:da:e0:22:1d:77:4f:78:3f:7c:56:90:d3:6a:a2:2c:10:
ca:98:6b:fe:a7:45:98:49:f3:48:31:bb:40:e8:4f:09:0c:9c:
8a:00:3b:b8:29:9a:90:77:09:24:78:c9:da:c6:55:d6:ac:c0:
e7:74:ec:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:17 2026 by rpki-client