
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e302e302f31392d3234203d3e2033343931.roa
File: 3138302e3232332e302e302f31392d3234203d3e2033343931.roa (raw, json)
Hash identifier: CURsf/vzhEdH81+a5vXX6oUTLXHsnXttD9f5CTkEG+w=
Subject key identifier: 56:4E:DC:F1:67:37:BA:AA:0C:77:18:4D:30:5E:6A:FE:74:E3:64:2E
Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial: 0AD212F10292510D0770808D177B16FC0A777234
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e302e302f31392d3234203d3e2033343931.roa
Signing time: Tue 26 May 2026 08:05:50 +0000
ROA not before: Tue 26 May 2026 08:00:50 +0000
ROA not after: Tue 25 May 2027 08:05:50 +0000
asID: 3491
IP address blocks: 180.223.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Jun 2026 23:56:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:d2:12:f1:02:92:51:0d:07:70:80:8d:17:7b:16:fc:0a:77:72:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Validity
Not Before: May 26 08:00:50 2026 GMT
Not After : May 25 08:05:50 2027 GMT
Subject: CN=564EDCF16737BAAA0C77184D305E6AFE74E3642E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:29:e3:1b:62:24:b7:81:c1:11:f8:dc:bf:6a:
4a:db:12:4a:a1:8c:8c:85:2f:8a:dc:d2:ec:e6:b7:
20:0c:96:60:c4:de:88:50:40:d9:43:36:5b:cb:24:
54:01:fe:23:90:55:67:b3:f2:6c:e2:62:4e:b9:57:
2d:92:e0:42:69:c7:b5:94:b9:6b:c3:f6:a1:11:e7:
2d:4b:60:4c:b9:76:f2:6e:90:0f:fb:43:e4:e0:25:
92:8e:80:3c:4e:65:47:d4:fa:ab:1f:f4:be:61:bc:
fc:23:11:aa:c8:72:fc:d0:03:ac:47:e2:cb:0f:f6:
16:98:0d:3c:45:bd:d8:68:95:48:d2:25:07:2e:d4:
39:a8:e2:29:ec:a8:1a:cb:43:49:fd:17:d8:2a:6d:
88:32:48:b8:c4:21:3b:ab:6e:45:75:62:2f:0b:a0:
2d:10:dd:e8:23:74:0b:1a:8a:cd:c2:8c:9f:e3:39:
d5:3c:4b:63:57:b6:08:88:f8:2d:77:3f:64:62:2f:
33:e6:ab:5a:18:9f:2f:81:19:40:72:db:77:62:a0:
41:73:e9:1a:8e:6b:44:af:51:e1:84:eb:2d:f3:c7:
45:11:91:e8:62:30:23:39:78:77:84:7e:b6:e0:c2:
44:fa:66:77:a8:81:75:2d:aa:57:b5:96:ea:07:19:
e5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4E:DC:F1:67:37:BA:AA:0C:77:18:4D:30:5E:6A:FE:74:E3:64:2E
X509v3 Authority Key Identifier:
keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e302e302f31392d3234203d3e2033343931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.223.0.0/19
Signature Algorithm: sha256WithRSAEncryption
41:7a:5f:74:78:9b:e8:f3:90:44:c1:70:0d:bb:bc:51:de:02:
0b:db:1c:cc:77:6c:f3:9c:a5:f5:b6:46:22:9d:de:bd:d4:a6:
99:c7:d5:1c:b9:f6:56:95:2e:ab:54:c6:b0:b6:4c:c8:2f:94:
35:01:67:25:39:48:6f:a7:ad:13:30:ad:ab:69:91:79:79:c3:
ba:ef:54:5c:9d:35:ac:c5:2c:8c:ec:e0:1f:71:96:74:43:a3:
e5:b9:53:f3:82:33:59:23:c9:f0:cb:f7:a5:a1:46:d5:d1:31:
64:b2:1b:a6:f8:2a:cc:28:6f:b0:01:b3:17:9d:35:b1:c5:7d:
fd:0a:2a:ea:0c:c3:d3:04:3b:eb:8f:91:0f:95:6c:fb:d4:c0:
e6:4c:3f:70:93:60:7b:9a:5f:de:d2:62:76:6a:4a:20:6c:e5:
af:b1:83:a4:d3:99:ec:37:cc:fd:b4:65:8f:d9:fd:92:29:54:
d7:f0:97:6b:d6:22:78:27:a3:89:af:ea:07:48:64:ce:81:66:
c4:9e:20:1b:b6:62:5f:ba:d5:04:34:ab:38:f2:5a:1f:f4:28:
e5:55:51:d4:25:e9:05:d0:e6:b6:ac:0b:2b:4a:27:42:aa:f4:
e6:a0:18:10:a9:cd:f6:9e:43:23:65:ff:ab:b7:49:4e:f8:4b:
18:50:91:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:54:16 2026 by rpki-client