
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138322e3233392e302e302f31392d3234203d3e2034383131.roa
File: 3138322e3233392e302e302f31392d3234203d3e2034383131.roa (raw, json)
Hash identifier: g+2iuy4CBW96FIRCmhdJaWYLSIeVpTM/9BQLFVCMdVE=
Subject key identifier: 3A:63:A8:DE:A6:BE:13:1C:F8:AF:D7:15:F9:79:58:2F:C9:1D:23:A1
Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial: 2728CC31D54E08C54EF8BBAAFAD9C9E41E111706
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138322e3233392e302e302f31392d3234203d3e2034383131.roa
Signing time: Fri 05 Jun 2026 07:38:32 +0000
ROA not before: Fri 05 Jun 2026 07:33:32 +0000
ROA not after: Fri 04 Jun 2027 07:38:32 +0000
asID: 4811
IP address blocks: 182.239.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 12:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:28:cc:31:d5:4e:08:c5:4e:f8:bb:aa:fa:d9:c9:e4:1e:11:17:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Validity
Not Before: Jun 5 07:33:32 2026 GMT
Not After : Jun 4 07:38:32 2027 GMT
Subject: CN=3A63A8DEA6BE131CF8AFD715F979582FC91D23A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5d:94:69:ae:b1:46:78:51:e6:cb:72:e1:2d:
3f:18:f5:25:9f:b1:90:77:dd:20:5f:11:fe:74:d3:
32:c6:f4:b5:6e:a1:7d:a1:7b:cd:3f:73:f1:99:75:
51:42:1c:95:5b:16:c7:ed:d3:ce:12:8b:d1:33:93:
6f:9e:7e:5a:c8:e3:c2:d5:df:06:3f:4b:32:9e:0c:
41:b5:1a:c4:88:ef:df:1d:e2:fb:76:aa:01:18:8c:
df:46:1e:6d:5a:62:57:f0:3d:8e:e5:48:04:d2:8a:
1b:89:7e:b1:bb:70:58:7a:b9:bc:2b:16:2d:3b:a9:
49:eb:53:3f:71:39:93:13:08:43:5f:24:c7:46:19:
bd:56:b3:4b:ea:de:81:91:fa:54:83:ee:63:1a:8d:
48:d7:f9:50:ae:bb:b3:25:09:80:77:a9:55:09:73:
f0:d6:ee:3b:9e:24:ee:99:f4:db:67:e3:ca:95:7b:
f0:aa:d2:a2:e5:5b:48:8b:5d:0f:54:28:a8:f2:4f:
f7:6a:ed:94:a5:49:20:d3:43:ef:12:b8:a7:ee:d4:
c0:d1:64:11:e2:f2:6e:a6:61:9d:e8:b5:79:ff:f8:
bb:c0:64:fb:bf:19:85:66:fe:21:43:50:6c:46:62:
78:f0:5e:5f:5f:f6:03:8e:f5:3a:67:2f:bc:f4:55:
b4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:63:A8:DE:A6:BE:13:1C:F8:AF:D7:15:F9:79:58:2F:C9:1D:23:A1
X509v3 Authority Key Identifier:
keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138322e3233392e302e302f31392d3234203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.239.0.0/19
Signature Algorithm: sha256WithRSAEncryption
88:d7:f8:aa:5c:32:c8:0e:dd:af:c3:d9:51:1e:6f:51:2c:e7:
da:5f:8f:f2:a7:db:38:52:5f:ae:d2:07:e9:3e:63:9a:d4:e7:
93:2c:80:4b:41:8f:64:75:d0:6a:38:81:7f:3f:1e:4f:0f:9e:
a2:87:74:77:be:1a:57:bd:ce:bb:93:ed:d7:61:6f:ef:3b:d3:
72:14:5c:4f:af:99:09:c1:8f:6d:dd:4f:fe:57:73:b6:62:08:
a9:60:45:fc:b3:61:93:c9:34:dc:93:af:5d:30:a8:ae:8c:90:
0b:82:71:e5:9a:a7:f0:9d:a0:aa:d6:31:95:56:5e:23:a6:b7:
59:89:e0:22:2b:d5:6f:12:4e:de:a0:0d:aa:58:88:a4:ed:3d:
24:93:ec:40:75:0b:87:0d:dd:50:d1:5d:06:26:c8:38:98:a4:
ad:b7:13:7a:89:ad:e7:30:81:08:aa:3a:34:6f:c5:bf:a0:94:
4b:50:51:d3:e0:26:9d:99:76:07:8b:19:a6:d8:6c:30:fd:a2:
9c:1a:4e:3b:c6:6c:27:33:9a:2a:e9:f1:11:4e:22:18:31:79:
53:32:67:8c:ee:75:6a:63:9b:1b:95:f1:c0:62:a7:29:75:7e:
1e:c9:1c:45:69:14:9c:57:89:94:14:13:cd:05:b9:e3:6b:d8:
24:db:bb:f6
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUJyjMMdVOCMVO+Luq+tnJ5B4RFwYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJE
MUVFRjM4RjAeFw0yNjA2MDUwNzMzMzJaFw0yNzA2MDQwNzM4MzJaMDMxMTAvBgNV
BAMTKDNBNjNBOERFQTZCRTEzMUNGOEFGRDcxNUY5Nzk1ODJGQzkxRDIzQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMXZRprrFGeFHmy3LhLT8Y9SWf
sZB33SBfEf500zLG9LVuoX2he80/c/GZdVFCHJVbFsft084Si9Ezk2+eflrI48LV
3wY/SzKeDEG1GsSI798d4vt2qgEYjN9GHm1aYlfwPY7lSATSihuJfrG7cFh6ubwr
Fi07qUnrUz9xOZMTCENfJMdGGb1Ws0vq3oGR+lSD7mMajUjX+VCuu7MlCYB3qVUJ
c/DW7jueJO6Z9Ntn48qVe/Cq0qLlW0iLXQ9UKKjyT/dq7ZSlSSDTQ+8SuKfu1MDR
ZBHi8m6mYZ3otXn/+LvAZPu/GYVm/iFDUGxGYnjwXl9f9gOO9TpnL7z0VbS/AgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUOmOo3qa+Exz4r9cV+XlYL8kdI6EwHwYDVR0j
BBgwFoAUMHdGU7O3vxWzi4u//XOlwtHu848wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTY0OTM0NTY5MTY1MC8wLzMwNzc0NjUzQjNCN0JGMTVCMzhCOEJCRkZENzNB
NUMyRDFFRUYzOEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJEMUVFRjM4Ri5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ1NjkxNjUwLzAvMzEzODMyMmUzMjMz
MzkyZTMwMmUzMDJmMzEzOTJkMzIzNDIwM2QzZTIwMzQzODMxMzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAW27wAwDQYJKoZIhvcNAQELBQADggEBAIjX+KpcMsgO3a/D2VEeb1Es59pfj/Kn
2zhSX67SB+k+Y5rU55MsgEtBj2R10Go4gX8/Hk8PnqKHdHe+Gle9zruT7ddhb+87
03IUXE+vmQnBj23dT/5Xc7ZiCKlgRfyzYZPJNNyTr10wqK6MkAuCceWap/CdoKrW
MZVWXiOmt1mJ4CIr1W8STt6gDapYiKTtPSST7EB1C4cN3VDRXQYmyDiYpK23E3qJ
recwgQiqOjRvxb+glEtQUdPgJp2ZdgeLGabYbDD9opwaTjvGbCczmirp8RFOIhgx
eVMyZ4zudWpjmxuV8cBipyl1fh7JHEVpFJxXiZQUE80FueNr2CTbu/Y=
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:55:45 2026 by rpki-client