
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e33342e302f32342d3234203d3e20313937363436.roa
File: 3231312e3134392e33342e302f32342d3234203d3e20313937363436.roa (raw, json)
Hash identifier: 5x/Vxtm5m5rkP6zFckDqlG3l/AjZ13Z5TGq14rxe+2s=
Subject key identifier: B9:2D:62:96:E9:0E:18:51:A6:38:B6:1A:8B:15:36:77:36:89:2B:24
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 0A3345020DE7490F482AD4D9D327C320C9DCBEB5
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e33342e302f32342d3234203d3e20313937363436.roa
Signing time: Mon 13 Jul 2026 03:46:34 +0000
ROA not before: Mon 13 Jul 2026 03:41:34 +0000
ROA not after: Mon 12 Jul 2027 03:46:34 +0000
asID: 197646
IP address blocks: 211.149.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:33:45:02:0d:e7:49:0f:48:2a:d4:d9:d3:27:c3:20:c9:dc:be:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: Jul 13 03:41:34 2026 GMT
Not After : Jul 12 03:46:34 2027 GMT
Subject: CN=B92D6296E90E1851A638B61A8B15367736892B24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:71:7d:e2:23:bb:73:8f:9b:ef:6a:ae:df:c3:
0a:a5:bd:15:41:d5:e2:64:4b:92:da:07:69:54:e8:
ad:f4:a1:f4:7a:4f:f2:79:dd:45:4c:d9:b5:1c:42:
49:c6:30:e6:7a:01:5b:63:b8:1e:ad:97:b6:25:b0:
26:72:13:6b:5a:a8:0f:a1:10:a0:cb:c2:fb:45:ef:
f8:d2:d3:25:a9:9c:00:0b:b3:25:16:61:93:bb:dc:
62:c0:da:1a:42:9c:32:d3:b2:61:de:72:da:13:7d:
c5:ae:be:5c:98:8b:d0:8a:8e:dc:eb:6f:a8:24:e6:
aa:b6:52:da:00:b9:d7:78:51:ba:bb:a2:4b:7e:2f:
f2:bc:90:98:1b:20:0b:a2:37:96:27:46:a8:b6:84:
b1:3a:97:22:0e:a6:28:b8:0f:2d:80:01:6b:58:9c:
0e:e8:14:5a:0d:5d:be:8c:18:82:7d:f9:42:96:fc:
99:24:1c:b3:9d:c7:1a:74:b3:2a:cf:9b:c3:6d:7b:
71:bb:bd:7f:d6:df:d9:0e:9c:63:bb:a3:6b:6f:13:
2f:db:49:25:79:52:0c:fa:5a:49:96:06:df:af:78:
c0:0f:8d:fc:6b:24:42:60:26:ae:12:ce:a0:03:2c:
ae:3f:7d:2b:fc:60:d9:18:a1:9f:e8:f8:4a:ae:a4:
3a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2D:62:96:E9:0E:18:51:A6:38:B6:1A:8B:15:36:77:36:89:2B:24
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e33342e302f32342d3234203d3e20313937363436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.149.34.0/24
Signature Algorithm: sha256WithRSAEncryption
74:5a:98:a6:b6:2a:55:90:3e:8c:28:20:dd:29:bf:3c:53:2c:
da:dd:8c:d7:53:66:7a:4c:30:9e:09:e1:ee:f1:c0:21:18:52:
3d:85:cc:73:40:76:8c:79:86:e4:11:2d:a8:6c:13:8a:d2:15:
b1:46:5f:56:07:24:f3:72:3d:b3:73:e2:a9:f5:27:a0:6c:76:
7b:1f:4b:f9:18:93:69:f7:48:79:0d:25:bb:2e:c9:79:fa:46:
d8:44:49:5b:68:02:de:86:ce:d9:18:72:f9:2b:c2:cb:7e:cf:
79:b4:bb:75:72:87:4b:7e:2a:02:d2:90:23:0f:dd:35:9f:de:
d5:34:61:37:53:e1:7c:68:86:3b:19:62:16:e2:6e:aa:98:93:
07:dc:01:1d:00:ad:3b:4f:07:26:59:fc:c4:f1:8f:d2:b2:06:
d8:e0:86:87:54:84:bb:bb:f3:fa:7e:26:9a:96:87:35:48:0f:
5c:64:e4:ee:8c:22:7e:7f:87:ec:26:b1:74:5e:dc:79:e5:d7:
e6:b9:94:23:50:f3:76:70:01:5b:09:ca:ac:37:8a:d1:b3:10:
75:3b:d2:2c:41:b0:2f:28:6b:aa:1f:78:8c:17:d6:0d:71:3e:
fd:5c:62:72:36:f3:a6:06:d0:d9:87:1d:f7:b7:c3:78:48:a7:
0f:30:d4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:40:21 2026 by rpki-client