
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e34302e302f32312d3234203d3e20313532313739.roa
File: 3138302e3232332e34302e302f32312d3234203d3e20313532313739.roa (raw, json)
Hash identifier: tax5XTIY8II7jeMRO0jBHWB22zEe3n32i+5+WO8wUhc=
Subject key identifier: 30:50:B1:A9:DF:CB:AB:E7:69:14:0B:94:68:08:64:68:8F:75:28:15
Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial: 24B6F1179E39430499B61627343CDAE56B5E1796
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e34302e302f32312d3234203d3e20313532313739.roa
Signing time: Wed 27 May 2026 02:54:46 +0000
ROA not before: Wed 27 May 2026 02:49:46 +0000
ROA not after: Wed 26 May 2027 02:54:46 +0000
asID: 152179
IP address blocks: 180.223.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Jun 2026 10:19:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:b6:f1:17:9e:39:43:04:99:b6:16:27:34:3c:da:e5:6b:5e:17:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Validity
Not Before: May 27 02:49:46 2026 GMT
Not After : May 26 02:54:46 2027 GMT
Subject: CN=3050B1A9DFCBABE769140B94680864688F752815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3a:37:2a:4a:0c:cd:ae:19:51:10:95:96:3c:
f9:fb:bb:99:0d:a4:27:84:44:74:86:c8:a8:fd:db:
ad:2f:81:56:15:0c:24:a4:a4:f6:13:bc:20:0e:b9:
1e:b1:e0:7b:9b:5f:af:74:8b:6c:80:66:a2:b5:7d:
23:02:e5:60:76:ae:c2:6e:f0:74:c8:79:5a:db:c4:
ee:5e:8f:df:3c:9e:f4:32:8d:3c:66:91:c8:49:72:
f3:ad:82:fe:47:e2:5b:e1:86:84:2a:ec:48:ea:99:
59:1b:8a:71:1c:9b:ac:81:5a:c4:05:db:59:51:58:
da:f3:12:cb:b5:02:ec:65:72:2c:7b:77:f9:55:5e:
a1:7a:81:01:cd:cc:50:d5:8c:c1:e9:2e:56:c9:ab:
09:75:2e:13:03:92:43:7e:bf:50:d2:99:7c:a4:b8:
19:f3:a7:00:cd:73:d4:de:2f:6a:7c:7a:03:d3:e6:
d8:1a:5f:7a:ee:c1:0d:4e:09:8a:79:b5:f9:17:82:
6e:6c:05:73:ab:da:2b:22:3b:d3:15:b8:54:95:ad:
73:59:6f:b4:a5:47:c2:65:f4:b4:0d:77:a6:36:24:
8a:6b:60:52:ea:93:c6:4d:8b:d7:52:aa:c8:2c:d2:
14:26:e9:4e:6a:8a:15:bc:91:4b:37:23:ac:8b:f5:
d4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:50:B1:A9:DF:CB:AB:E7:69:14:0B:94:68:08:64:68:8F:75:28:15
X509v3 Authority Key Identifier:
keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e34302e302f32312d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.223.40.0/21
Signature Algorithm: sha256WithRSAEncryption
84:93:bd:23:23:67:9f:a3:3d:ab:a4:39:84:61:78:97:86:fa:
cd:32:fb:d6:a4:de:b7:94:1b:8a:33:dc:8a:c9:01:6a:c9:14:
ef:43:c8:d3:c5:2a:ad:f2:9a:36:0b:8e:21:5e:0c:26:97:88:
54:59:9b:77:56:38:18:c7:22:0e:e1:bb:d3:77:55:73:ae:3e:
b0:c9:c8:70:c2:17:9b:36:81:28:80:4e:c8:28:1c:21:61:b1:
bb:4a:2e:71:1f:00:31:f3:0e:0b:ea:42:a3:9b:7a:bd:18:f2:
5a:af:3d:59:74:02:31:e2:d6:31:c5:d4:b9:b9:bb:42:9f:c6:
43:52:26:ba:25:b4:57:0c:c9:ac:5b:3f:90:6f:16:fa:66:6d:
f8:5a:56:ec:43:86:98:96:87:29:b7:96:8c:c6:81:cb:88:41:
64:04:c9:3f:0b:41:b8:29:0c:6c:3b:96:d2:62:f9:f0:a7:80:
09:54:cf:f4:01:6e:4f:72:17:50:b4:f3:2a:5e:59:f0:9f:06:
48:da:97:fa:fe:51:35:80:d6:d3:6e:47:78:73:97:c7:1a:b0:
93:3c:bb:10:fe:37:9d:80:70:c9:a5:b0:d0:56:95:b1:b5:b1:
a4:51:cb:0a:e4:68:c4:80:b2:cd:03:a0:f6:2e:03:79:6e:73:
80:c7:d3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 03:20:23 2026 by rpki-client