
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e33322e302f32342d3234203d3e20313937363436.roa
File: 3231312e3134392e33322e302f32342d3234203d3e20313937363436.roa (raw, json)
Hash identifier: E1+jSIF+26ZCWmYBRLcZrk43sgfcRZnSJXfTb4Ao+zI=
Subject key identifier: 37:64:FF:DA:34:2E:25:67:0C:93:90:8E:58:59:5D:7D:C5:C4:C2:43
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 31184B19D7AD4E142A3394BAAA723DF323FA0D9C
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e33322e302f32342d3234203d3e20313937363436.roa
Signing time: Mon 13 Jul 2026 03:46:38 +0000
ROA not before: Mon 13 Jul 2026 03:41:38 +0000
ROA not after: Mon 12 Jul 2027 03:46:38 +0000
asID: 197646
IP address blocks: 211.149.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:18:4b:19:d7:ad:4e:14:2a:33:94:ba:aa:72:3d:f3:23:fa:0d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: Jul 13 03:41:38 2026 GMT
Not After : Jul 12 03:46:38 2027 GMT
Subject: CN=3764FFDA342E25670C93908E58595D7DC5C4C243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1f:14:29:91:bc:d9:ca:17:4f:09:7d:e1:bd:
dc:b6:77:67:4c:69:90:02:83:6c:c6:b8:55:9b:b1:
7d:36:72:7c:1b:ce:9a:12:1f:b6:f9:94:78:fa:eb:
1b:ca:11:b2:21:d4:63:ac:9c:3a:87:db:46:57:3b:
4e:7f:de:58:b8:92:4c:be:20:e4:63:1d:ea:c5:46:
37:31:98:30:3e:41:b8:af:84:29:16:25:ad:86:0c:
1c:c0:66:c0:d1:45:a2:9a:70:b0:53:8a:06:b0:15:
ab:05:5b:1c:e2:23:e3:c0:51:fe:9d:8e:c3:75:61:
ec:ac:70:2c:a1:6d:73:53:e9:be:43:f9:37:cd:77:
dc:2f:8e:ed:71:95:a0:3d:70:9e:a2:34:b0:24:fe:
ed:19:86:26:ff:8d:9e:19:31:4b:2d:23:85:2b:3a:
96:04:36:7f:28:d6:e6:27:ea:08:64:59:49:aa:f8:
6f:6f:4a:bc:32:a1:b3:0a:ca:5c:2e:8e:35:61:61:
24:88:59:8c:aa:96:0b:52:67:f0:48:61:d5:8f:73:
9e:f8:dd:d4:f3:b0:b8:ff:fa:21:f8:fd:7c:aa:1c:
1b:7e:75:5b:f6:38:f9:1a:ef:dc:d0:8c:51:fe:d6:
00:88:4b:49:48:57:96:45:9d:f1:48:0e:09:77:a9:
0b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:64:FF:DA:34:2E:25:67:0C:93:90:8E:58:59:5D:7D:C5:C4:C2:43
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e33322e302f32342d3234203d3e20313937363436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.149.32.0/24
Signature Algorithm: sha256WithRSAEncryption
78:14:eb:8b:8c:f2:95:99:07:44:34:2c:00:00:22:05:d0:0f:
b3:eb:15:c6:cd:79:84:29:af:cc:d1:21:84:bf:35:2e:25:39:
ba:72:97:e4:78:34:46:7c:30:32:a3:41:67:6f:0a:39:76:22:
65:5b:ab:98:a5:69:9e:8b:65:1e:ed:b7:1e:2a:df:b8:3c:18:
b0:20:f4:a5:23:e3:72:90:f1:13:5f:29:b8:55:a4:cb:3d:a3:
60:eb:e5:a4:11:aa:97:a1:88:15:ca:78:5c:b3:b0:90:95:78:
89:91:f9:45:4b:fb:60:79:95:2f:d8:a4:96:a0:79:83:7d:8f:
ce:ef:4a:6b:b6:84:bb:9c:44:2b:e2:cc:f0:f7:6d:38:ca:54:
cc:44:d4:7f:c9:4c:23:c5:9b:64:79:a0:0b:86:60:44:d3:b5:
1d:2c:24:fe:33:b4:68:7e:94:fd:d1:ca:9b:02:26:7e:76:33:
7d:79:ee:72:4f:90:e7:6e:c4:cf:bb:53:34:b2:27:72:30:f5:
de:e4:fb:d9:e8:91:af:d2:b9:6a:ca:87:7a:db:1a:41:45:71:
f2:2c:c8:81:21:71:d8:f3:d9:73:88:dd:dc:b5:3d:17:da:c1:
ce:5b:7c:6d:00:1b:c3:22:f9:8f:5a:45:1c:e4:6a:ba:41:b1:
07:f7:c1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:40:21 2026 by rpki-client