
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e302e302f31392d3234203d3e203138383131.roa
File: 3138302e3232332e302e302f31392d3234203d3e203138383131.roa (raw, json)
Hash identifier: +PX2SvJt+EM4lVhTlsioHPEu0dxiSeOPlsFcJOl9CWQ=
Subject key identifier: EA:5A:5D:E2:FC:C2:71:99:C9:5E:85:BB:BC:61:3B:EA:B0:76:98:09
Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial: 352B0A83D4B050E916FF9F1FEB33611528BBF6CA
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e302e302f31392d3234203d3e203138383131.roa
Signing time: Tue 26 May 2026 08:05:50 +0000
ROA not before: Tue 26 May 2026 08:00:50 +0000
ROA not after: Tue 25 May 2027 08:05:50 +0000
asID: 18811
IP address blocks: 180.223.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 08:47:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:2b:0a:83:d4:b0:50:e9:16:ff:9f:1f:eb:33:61:15:28:bb:f6:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Validity
Not Before: May 26 08:00:50 2026 GMT
Not After : May 25 08:05:50 2027 GMT
Subject: CN=EA5A5DE2FCC27199C95E85BBBC613BEAB0769809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ae:43:16:fa:9a:62:69:d7:4d:1a:8f:27:a7:
50:79:c9:81:fb:f5:81:e2:dc:c3:cf:8b:1b:f9:3d:
95:90:b2:33:0f:d2:43:ea:5a:4d:15:3f:ae:3e:47:
79:e5:e2:01:49:d8:5f:94:f4:ca:4d:58:a7:93:4e:
c3:9e:ae:8c:c3:f1:c4:c5:4a:85:f3:14:29:97:82:
79:0e:3e:97:16:01:4c:cc:32:d9:44:8f:db:98:70:
dd:94:d2:cb:0f:fd:e8:1f:e8:a1:31:f9:f9:25:c8:
0f:ec:7b:34:30:2a:cd:27:ec:41:8b:73:bd:00:6a:
37:8b:a7:35:e4:22:5d:a3:23:f3:18:cb:65:98:33:
e0:93:55:2f:68:6d:43:33:02:99:bf:5c:a3:cb:47:
60:42:fe:14:76:0a:4c:18:5d:8d:4b:b4:a8:0b:bc:
c9:4d:7b:43:6a:2f:a0:a3:6f:26:f4:85:58:7d:71:
f5:19:dc:40:90:1c:90:f3:f4:37:67:c5:38:f4:cd:
f5:67:a7:1a:84:98:82:dc:7e:f0:82:a5:f5:74:f1:
98:37:56:ba:dc:c3:96:cf:ee:56:4a:e9:d3:93:c1:
bf:bb:13:b9:07:2f:79:1c:f7:3e:c0:ed:02:aa:fc:
f2:b8:e4:ba:06:2b:f9:db:0b:fb:04:85:6a:99:79:
e8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5A:5D:E2:FC:C2:71:99:C9:5E:85:BB:BC:61:3B:EA:B0:76:98:09
X509v3 Authority Key Identifier:
keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e302e302f31392d3234203d3e203138383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.223.0.0/19
Signature Algorithm: sha256WithRSAEncryption
56:c7:1f:83:08:69:5a:7d:0a:7f:69:6e:a8:da:77:13:9e:34:
4b:fc:50:a3:55:b6:50:89:b6:72:76:8f:89:84:b4:2a:c7:fe:
1e:d6:5a:54:51:9c:d7:3b:86:af:9e:3a:90:12:ba:00:ee:0c:
81:19:82:06:47:3d:98:f1:c1:9b:25:b4:58:33:cb:f7:97:e7:
69:15:10:ec:b0:54:06:c3:ae:0e:04:01:a9:9a:e2:99:73:f2:
d0:8b:a7:b2:cc:73:8c:3a:f9:bf:08:c9:55:0f:da:2e:c4:c3:
34:c4:db:e0:c7:c7:71:78:0c:bb:a7:22:69:09:95:2e:43:4f:
f4:97:00:ea:96:e6:24:5f:ff:49:bc:ab:90:e8:89:4f:c5:7a:
91:62:ff:c2:c8:28:a0:ba:8d:ca:34:34:c6:6c:ba:f4:74:b7:
e0:9b:fe:54:1d:c8:4f:ff:81:76:70:a3:9e:bd:54:ed:11:6d:
46:7e:1d:03:aa:48:a3:63:d2:67:14:81:39:ca:2a:f8:dd:65:
61:4b:d3:81:0d:11:2c:69:45:65:7f:7e:f0:75:b3:03:5e:bc:
90:ba:b2:cf:5e:fd:59:62:e7:7a:eb:cf:d9:ea:0c:f2:9c:92:
d9:58:1c:4b:7a:62:47:ef:54:df:08:a7:6f:5c:74:97:63:10:
92:da:b2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:27:22 2026 by rpki-client