
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138322e3233392e302e302f31392d3234203d3e20313337373138.roa
File: 3138322e3233392e302e302f31392d3234203d3e20313337373138.roa (raw, json)
Hash identifier: bqJrmy1FbcIMUwf28/NfknutSp/p5m/VZli+bUjexRE=
Subject key identifier: F2:94:C2:2E:57:6F:57:4A:A5:53:2A:A3:81:9D:BA:5E:8D:22:47:77
Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial: 227B91AAC76308F7D7DDCFA79890D6BE5EC26A34
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138322e3233392e302e302f31392d3234203d3e20313337373138.roa
Signing time: Fri 05 Jun 2026 07:38:32 +0000
ROA not before: Fri 05 Jun 2026 07:33:32 +0000
ROA not after: Fri 04 Jun 2027 07:38:32 +0000
asID: 137718
IP address blocks: 182.239.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 12:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:7b:91:aa:c7:63:08:f7:d7:dd:cf:a7:98:90:d6:be:5e:c2:6a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Validity
Not Before: Jun 5 07:33:32 2026 GMT
Not After : Jun 4 07:38:32 2027 GMT
Subject: CN=F294C22E576F574AA5532AA3819DBA5E8D224777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:15:c5:80:84:a7:d7:e5:31:27:f0:08:b2:
05:b8:5a:a4:eb:a7:66:6c:d6:fb:2f:dc:a1:3c:55:
91:f0:2e:a4:20:b0:de:32:b4:17:c0:4a:07:57:23:
e0:3a:50:c7:f7:4c:f5:2d:04:31:82:bf:ad:33:71:
90:bb:f7:10:29:0e:10:03:95:7c:77:41:c8:a6:0e:
4a:39:12:17:85:35:c6:cb:b9:ba:19:63:cf:03:d3:
68:89:bb:64:aa:08:d7:a4:80:59:ac:de:3f:c4:07:
ea:a8:7b:e9:31:ff:c3:f5:8f:01:31:35:b8:98:09:
54:25:a6:62:45:5f:60:a2:53:af:d9:29:41:ff:94:
ec:b1:91:10:29:66:c2:b2:3a:48:60:c9:00:bc:15:
d3:2e:6f:a8:1a:66:cd:72:4f:69:e7:cd:be:95:e7:
e8:b2:66:d7:99:fd:a2:6d:bf:bd:a5:3b:61:d9:7f:
09:4d:14:f6:25:0c:38:3f:fb:91:4e:d9:b9:18:f7:
10:fc:6f:31:4b:01:90:60:01:d5:20:47:4c:7e:9f:
3b:35:f7:af:fb:b1:45:19:dd:ea:49:d5:b7:94:ff:
f4:85:94:74:9a:f4:1d:fe:64:8b:69:57:54:a2:56:
89:f0:d6:34:33:26:c2:36:5e:ac:26:86:5f:17:aa:
63:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:94:C2:2E:57:6F:57:4A:A5:53:2A:A3:81:9D:BA:5E:8D:22:47:77
X509v3 Authority Key Identifier:
keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138322e3233392e302e302f31392d3234203d3e20313337373138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.239.0.0/19
Signature Algorithm: sha256WithRSAEncryption
4f:b3:17:88:13:1a:34:1f:ca:6d:b2:81:50:f1:c0:11:16:e4:
d8:a9:81:72:12:57:0e:f0:5b:81:ef:4a:48:53:34:84:3a:a9:
0c:c8:bd:41:b0:d7:1d:e1:f7:6b:48:98:9d:f5:3f:0e:0b:95:
71:8b:9d:db:b0:97:db:60:cb:31:83:ec:b3:0f:28:b4:ab:94:
f4:fe:d4:06:3a:4f:46:b4:0c:92:3f:c0:99:28:89:6d:7f:aa:
7b:17:56:8b:12:ff:ad:78:9f:8a:39:77:cb:1f:02:b1:e5:84:
61:f0:03:9c:a4:32:49:96:03:84:f2:b7:e3:b5:1d:ed:08:0b:
85:f0:c1:e6:c7:0c:4c:c3:57:89:2b:5b:f6:c6:0f:41:61:82:
0a:2f:e8:f7:b8:15:56:16:38:c4:56:21:e8:fa:6a:bd:97:03:
4e:8e:7d:48:da:29:04:a5:fe:0f:f4:c3:cd:d0:22:be:c0:1a:
9a:f4:a5:ba:97:7b:86:9e:ce:23:7c:66:33:65:0e:49:6b:3a:
c6:23:a7:94:be:16:95:38:14:3f:2d:9b:06:9e:05:d4:40:af:
f2:56:5b:d7:88:0e:53:80:e4:43:27:62:8c:c6:53:8b:14:b8:
b9:44:6c:f6:9a:63:63:51:0a:d8:e9:6a:17:87:30:33:85:d6:
63:e5:00:0f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:55:38 2026 by rpki-client