
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346150402/0/3136302e3230322e3135322e302f32342d3234203d3e203338323833.roa
File: 3136302e3230322e3135322e302f32342d3234203d3e203338323833.roa (raw, json)
Hash identifier: oBqTQzjxDdJDVYMDcw1iUViK03RD7kegj3JWKkhMuac=
Subject key identifier: 76:60:71:C5:8F:DA:8A:3B:5D:0C:17:09:A1:BB:62:DE:CC:D4:8F:43
Certificate issuer: /CN=E44A11245B84A6269EEC23D7321F11971335E4E9
Certificate serial: 5E0232A20BEB338ED5B6464E0FEA70188479555A
Authority key identifier: E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/3136302e3230322e3135322e302f32342d3234203d3e203338323833.roa
Signing time: Mon 13 Apr 2026 05:43:28 +0000
ROA not before: Mon 13 Apr 2026 05:38:28 +0000
ROA not after: Mon 12 Apr 2027 05:43:28 +0000
asID: 38283
IP address blocks: 160.202.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:02:32:a2:0b:eb:33:8e:d5:b6:46:4e:0f:ea:70:18:84:79:55:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E44A11245B84A6269EEC23D7321F11971335E4E9
Validity
Not Before: Apr 13 05:38:28 2026 GMT
Not After : Apr 12 05:43:28 2027 GMT
Subject: CN=766071C58FDA8A3B5D0C1709A1BB62DECCD48F43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6f:b0:03:a9:1e:c7:81:ee:7d:6f:f1:34:fc:
0e:d7:1f:fd:06:28:0c:f2:8e:4f:b8:7b:5c:55:6a:
e9:bb:18:d6:3f:80:0f:14:7a:f7:f7:26:8e:ae:db:
c2:b3:d7:e3:77:05:ea:96:38:73:8a:97:51:a6:a9:
af:2d:b2:19:9e:eb:16:20:89:62:8f:89:4e:9f:09:
15:3c:3a:97:60:71:5c:3e:0c:65:b8:7e:3f:76:41:
90:d5:3b:8b:ae:c9:bc:af:de:32:7c:95:3d:28:67:
76:f5:9c:26:6a:f3:7f:75:93:c7:5a:e5:a5:37:74:
42:80:79:46:38:96:eb:7e:1d:d9:7f:fd:e4:42:fa:
47:7e:3c:2f:f7:f0:69:10:75:42:f6:d9:b7:62:1e:
fe:6b:8d:ab:f1:7c:df:6e:b6:97:6d:6d:90:87:84:
b5:54:47:dd:eb:03:70:a2:7d:8a:cb:24:41:c1:97:
c6:9b:80:8a:40:ae:9b:81:7e:4d:41:5e:96:c2:e9:
5b:f0:c5:3e:2b:1a:be:a0:9b:f0:21:e6:60:42:8a:
f5:36:44:fd:05:dd:eb:87:cf:1a:5b:e7:a1:da:dd:
26:56:e8:0f:6d:e4:38:68:65:62:45:66:b8:a0:7e:
05:16:24:c0:9e:29:3e:ca:cc:0a:9c:40:ef:67:f5:
e1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:60:71:C5:8F:DA:8A:3B:5D:0C:17:09:A1:BB:62:DE:CC:D4:8F:43
X509v3 Authority Key Identifier:
keyid:E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/3136302e3230322e3135322e302f32342d3234203d3e203338323833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.202.152.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:7e:6a:6f:f3:bf:ab:da:0e:9f:dd:44:96:8f:11:5f:64:6f:
f5:ca:f9:86:f3:a0:65:81:bc:cd:36:3b:76:20:f9:d2:c1:5e:
a4:80:f4:b0:c4:e0:ce:a6:e1:c9:ac:c2:79:33:57:bc:1b:d6:
5c:33:8a:f0:55:96:1f:f0:47:33:d0:e3:5d:bc:49:c6:6c:4d:
bd:7b:62:09:a3:d5:ba:12:88:4c:5c:c1:fc:ae:03:d8:a6:f7:
53:7d:8f:03:e1:3d:50:6d:c3:ea:6f:91:46:1e:07:1e:55:6a:
e9:1d:5b:8e:af:6e:8b:8b:25:1f:eb:07:3b:f8:9b:56:bf:d2:
d9:78:ea:62:bb:81:d7:18:45:04:9f:be:66:11:d6:c1:a3:89:
b2:dd:fb:6c:22:94:e2:3b:fe:1f:dd:ad:80:23:a0:1c:21:8a:
be:de:b3:86:b5:7f:e8:63:f3:2f:ea:1a:d6:3e:26:88:27:09:
ab:1c:76:a5:1c:0a:51:16:b7:a2:34:bf:d2:0d:63:24:5a:42:
82:02:64:1a:ea:39:6f:93:e5:db:9c:8c:e7:01:80:d5:01:91:
41:7d:35:b9:de:f7:0c:df:85:6c:c9:54:7d:37:ff:d0:64:42:
8e:5e:56:7c:bd:64:58:b9:dc:86:b4:49:bd:30:8f:6a:42:65:
ad:9f:92:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 15:31:43 2026 by rpki-client