
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e302e302f31382d3234203d3e2030.roa
File: 3138302e3232332e302e302f31382d3234203d3e2030.roa (raw, json)
Hash identifier: MwO4lHejsBrhN1Ug79HKcj2pqAcWoFhEP1qG4PpEWik=
Subject key identifier: 90:80:90:2D:DF:32:84:A0:10:CA:D8:DE:5B:F3:07:93:98:EE:80:13
Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial: 4A59C7836DE0CD68E782CC6C4BA3F5516127ABB8
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e302e302f31382d3234203d3e2030.roa
Signing time: Mon 20 Apr 2026 01:47:12 +0000
ROA not before: Mon 20 Apr 2026 01:42:12 +0000
ROA not after: Mon 19 Apr 2027 01:47:12 +0000
asID: 0
IP address blocks: 180.223.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 09:17:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:59:c7:83:6d:e0:cd:68:e7:82:cc:6c:4b:a3:f5:51:61:27:ab:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Validity
Not Before: Apr 20 01:42:12 2026 GMT
Not After : Apr 19 01:47:12 2027 GMT
Subject: CN=9080902DDF3284A010CAD8DE5BF3079398EE8013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:21:5c:dd:82:91:fc:c8:e5:90:3a:be:27:89:
35:a3:73:85:67:c6:b5:cf:f8:c5:46:97:66:6b:bb:
da:31:6e:ad:76:50:8d:a0:df:21:91:18:4f:6e:08:
2b:e1:e4:a7:10:94:9b:6d:9a:fb:76:b8:a7:b0:16:
a9:37:5b:83:9d:7b:0f:f6:30:97:80:e9:1b:89:ca:
b7:ef:e9:06:24:de:fc:b1:cd:66:3c:78:e8:26:54:
81:08:98:4a:0d:1b:b6:c5:80:bd:cf:17:9e:c4:34:
fd:48:ed:53:f7:2d:7d:e6:27:cd:2a:67:22:ff:b5:
b2:36:2b:e4:1f:c3:f4:ac:ce:3d:77:66:75:55:8b:
0a:3a:63:09:65:bd:db:6c:a9:11:45:b2:ee:f8:d6:
1e:7a:a6:ab:0f:03:a1:95:1b:94:4c:2c:ce:80:56:
cc:eb:2f:da:6b:1c:e5:0f:12:fd:c2:dc:f1:39:2d:
40:87:25:29:19:37:14:44:5d:b8:97:a2:5e:06:54:
34:8b:d9:2e:a2:3f:48:a2:e8:2d:df:68:4b:dd:83:
48:f8:f6:92:69:ad:29:3b:dd:7b:e3:ef:2a:15:83:
9d:c1:85:b9:6c:73:85:aa:50:e8:89:6f:14:a1:da:
3a:ee:36:e5:f8:77:6f:2e:f2:72:6d:6d:4d:75:77:
43:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:80:90:2D:DF:32:84:A0:10:CA:D8:DE:5B:F3:07:93:98:EE:80:13
X509v3 Authority Key Identifier:
keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e302e302f31382d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.223.0.0/18
Signature Algorithm: sha256WithRSAEncryption
53:6a:d0:63:2c:e6:a8:bc:62:87:a3:09:5a:40:45:1c:f6:4a:
bb:9b:f9:9d:a4:31:7c:fe:85:ad:b0:02:12:7e:06:77:0b:44:
bd:99:1e:56:4e:55:aa:35:e0:64:81:f5:02:55:d9:26:eb:ad:
ea:da:fe:f7:a3:83:ed:32:e1:84:d4:81:62:ed:af:eb:9a:37:
73:95:ac:61:22:9d:c6:d4:cd:e6:64:e0:ee:a1:df:2f:c2:49:
e7:0f:b7:9f:5a:85:33:16:70:c4:91:4f:2a:3e:f2:56:4e:90:
5e:d1:3e:6c:28:7a:d1:d1:1b:c6:12:22:05:76:de:0d:02:d6:
92:5c:52:2e:f7:e2:2d:8f:0a:be:83:cf:7f:c3:00:6f:7f:15:
dc:55:ec:73:9a:0e:71:77:ab:df:72:85:5f:c0:6d:4b:ff:cc:
54:f2:ef:76:a1:eb:ce:b9:0f:b1:9d:cc:2d:e6:83:0c:1d:8b:
09:c5:36:c2:6e:63:20:b2:6e:c0:15:df:84:cc:95:b2:52:20:
14:a4:42:45:6e:71:dd:13:37:c2:c0:23:09:1d:0a:a4:3d:e5:
b0:ca:17:e5:ae:ff:3d:9c:ec:9a:0a:3d:1f:ae:fa:dc:0e:11:
61:46:21:a7:9b:fa:e3:93:f8:53:49:29:23:b0:5d:9b:94:83:
c9:96:3c:cf
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUSlnHg23gzWjngsxsS6P1UWEnq7gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw
NkNERDJDRTAeFw0yNjA0MjAwMTQyMTJaFw0yNzA0MTkwMTQ3MTJaMDMxMTAvBgNV
BAMTKDkwODA5MDJEREYzMjg0QTAxMENBRDhERTVCRjMwNzkzOThFRTgwMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoIVzdgpH8yOWQOr4niTWjc4Vn
xrXP+MVGl2Zru9oxbq12UI2g3yGRGE9uCCvh5KcQlJttmvt2uKewFqk3W4Odew/2
MJeA6RuJyrfv6QYk3vyxzWY8eOgmVIEImEoNG7bFgL3PF57ENP1I7VP3LX3mJ80q
ZyL/tbI2K+Qfw/Sszj13ZnVViwo6YwllvdtsqRFFsu741h56pqsPA6GVG5RMLM6A
VszrL9prHOUPEv3C3PE5LUCHJSkZNxREXbiXol4GVDSL2S6iP0ii6C3faEvdg0j4
9pJprSk73Xvj7yoVg53Bhblsc4WqUOiJbxSh2jruNuX4d28u8nJtbU11d0MvAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUkICQLd8yhKAQytjeW/MHk5jugBMwHwYDVR0j
BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0
RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw
gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNTk2OTI5LzAvMzEzODMwMmUzMjMy
MzMyZTMwMmUzMDJmMzEzODJkMzIzNDIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAa03wAw
DQYJKoZIhvcNAQELBQADggEBAFNq0GMs5qi8YoejCVpARRz2Srub+Z2kMXz+ha2w
AhJ+BncLRL2ZHlZOVao14GSB9QJV2Sbrrera/vejg+0y4YTUgWLtr+uaN3OVrGEi
ncbUzeZk4O6h3y/CSecPt59ahTMWcMSRTyo+8lZOkF7RPmwoetHRG8YSIgV23g0C
1pJcUi734i2PCr6Dz3/DAG9/FdxV7HOaDnF3q99yhV/AbUv/zFTy73ah6865D7Gd
zC3mgwwdiwnFNsJuYyCybsAV34TMlbJSIBSkQkVucd0TN8LAIwkdCqQ95bDKF+Wu
/z2c7JoKPR+u+twOEWFGIaeb+uOT+FNJKSOwXZuUg8mWPM8=
-----END CERTIFICATE-----
Generated at Wed Apr 22 18:14:15 2026 by rpki-client