
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132382e302f31372d3234203d3e2033343931.roa
File: 3138302e3232332e3132382e302f31372d3234203d3e2033343931.roa (raw, json)
Hash identifier: FWv12ML8J8YCAYp2fdIpIl0q0MenjCZzWuv+OjRnfv4=
Subject key identifier: 16:99:9F:29:91:AD:66:48:7F:22:80:51:3C:2C:8E:3B:7E:60:37:DC
Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial: 054B05F787D99E9E8D4B57EA79C2E830AAD7366C
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132382e302f31372d3234203d3e2033343931.roa
Signing time: Tue 26 May 2026 08:11:51 +0000
ROA not before: Tue 26 May 2026 08:06:51 +0000
ROA not after: Tue 25 May 2027 08:11:51 +0000
asID: 3491
IP address blocks: 180.223.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Jun 2026 23:56:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:4b:05:f7:87:d9:9e:9e:8d:4b:57:ea:79:c2:e8:30:aa:d7:36:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Validity
Not Before: May 26 08:06:51 2026 GMT
Not After : May 25 08:11:51 2027 GMT
Subject: CN=16999F2991AD66487F2280513C2C8E3B7E6037DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:92:a0:7d:b7:9d:ad:83:c8:e3:50:da:dd:5d:
75:83:6d:ba:f3:a7:e7:b7:84:45:42:99:14:31:c9:
5d:86:30:95:fd:d0:c6:cc:c8:a5:fc:04:ab:dd:c2:
c4:95:a2:50:88:de:3f:a9:2e:ee:30:bb:0f:ed:33:
5d:58:d5:8d:09:04:80:77:ac:1c:d4:7d:5b:af:65:
fa:ba:cb:82:ea:83:ce:3d:5b:70:ec:32:68:87:63:
76:19:1c:1b:72:5a:bb:18:f3:8e:86:0d:0d:77:9c:
6b:17:e2:46:a3:67:84:ea:2a:d2:37:84:2d:45:c7:
3a:0f:13:01:52:90:84:37:4a:ed:f9:0e:99:31:4a:
8e:de:5e:2a:ab:03:fa:ad:c3:52:5b:3a:3a:73:86:
8d:8d:83:23:4d:14:00:69:64:69:cb:21:74:ed:aa:
3d:d2:af:9c:11:64:e7:9e:cd:3f:6a:ee:6c:75:ed:
10:4a:27:b2:e4:6a:45:e0:62:2f:4f:30:c6:cb:1c:
05:7c:32:48:e1:82:31:c5:ac:b7:9d:7e:4a:85:5e:
ab:ef:0a:8f:77:9c:f9:f9:c3:10:3b:bb:ab:65:4d:
26:a1:50:98:30:75:01:40:b9:c5:d0:84:d3:96:49:
2f:06:35:60:37:30:fe:b5:29:b8:93:d1:31:df:d4:
db:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:99:9F:29:91:AD:66:48:7F:22:80:51:3C:2C:8E:3B:7E:60:37:DC
X509v3 Authority Key Identifier:
keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132382e302f31372d3234203d3e2033343931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.223.128.0/17
Signature Algorithm: sha256WithRSAEncryption
43:94:36:9c:99:a6:43:37:8b:a8:56:2c:54:dc:a0:e3:c3:d2:
8f:9d:b3:f9:bf:72:57:d3:1b:10:e8:68:e1:e8:78:26:96:b2:
67:fd:ca:85:74:6b:ac:60:39:4b:ea:b3:7b:22:ca:48:36:e7:
c1:c9:97:9e:63:05:01:0c:19:58:e1:70:c1:4b:14:79:d5:9b:
f1:08:ee:b2:e6:b6:f3:42:78:9c:12:22:e0:a1:31:4e:b5:a3:
a1:f2:d5:bc:68:0d:aa:43:ae:9e:d6:5c:7a:47:c7:a2:f8:f7:
31:57:ca:f1:69:76:94:3b:01:74:65:50:38:35:0c:7e:0c:05:
54:b0:84:c1:51:d6:47:d0:5e:88:9b:8e:82:86:2c:72:92:d2:
6a:f4:d5:83:61:17:80:29:bb:82:34:87:6d:33:82:07:ae:cb:
ae:3d:da:07:22:b7:c7:bc:1c:d9:de:d3:62:bb:2e:01:4a:ba:
70:9f:94:72:0e:6d:d1:83:ce:62:68:68:a9:e9:2b:c7:0b:71:
4e:b6:e3:bb:65:d3:12:f5:49:6e:13:2a:88:da:e6:21:65:c8:
56:c6:b4:74:65:23:0a:9d:7a:f7:7a:fc:e9:b2:96:6b:98:f4:
36:c5:96:b9:c6:67:44:44:94:d2:ab:3a:0e:b3:f9:18:6c:30:
70:4b:8b:4a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 6 14:54:41 2026 by rpki-client