
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e34302e302f32312d3234203d3e2033343931.roa
File: 3138302e3232332e34302e302f32312d3234203d3e2033343931.roa (raw, json)
Hash identifier: tmEi6jZJxmCYZPQCtmnP2KJzYj9hVfqEsQkUF/tisK4=
Subject key identifier: 75:F9:86:25:05:6C:97:42:65:26:17:4D:5C:78:70:2E:CC:2F:1C:DD
Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial: 190283429F755BC0FE819DCFC7ED8E3376DD92D7
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e34302e302f32312d3234203d3e2033343931.roa
Signing time: Tue 26 May 2026 08:06:43 +0000
ROA not before: Tue 26 May 2026 08:01:43 +0000
ROA not after: Tue 25 May 2027 08:06:43 +0000
asID: 3491
IP address blocks: 180.223.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Jun 2026 23:56:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:02:83:42:9f:75:5b:c0:fe:81:9d:cf:c7:ed:8e:33:76:dd:92:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Validity
Not Before: May 26 08:01:43 2026 GMT
Not After : May 25 08:06:43 2027 GMT
Subject: CN=75F98625056C97426526174D5C78702ECC2F1CDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:76:08:2d:c1:18:f4:f8:79:e2:b4:34:ee:66:
1f:93:85:d5:38:7d:df:c1:2c:b7:32:91:84:ea:e2:
bf:6c:19:3f:e7:1c:a5:39:26:cd:bc:a6:9e:e9:ec:
95:e0:bd:a3:a0:b1:d7:1e:c9:9c:a9:cf:b1:f6:82:
7b:fc:51:53:96:be:3b:b3:a1:42:cf:ec:d0:d0:be:
d5:ff:53:cf:42:d6:27:cd:b8:1a:37:08:bf:13:79:
b2:4b:f6:d9:6b:5e:36:b0:f3:db:26:ea:eb:f8:00:
77:93:43:8a:47:57:16:78:64:52:c2:72:28:6b:ed:
5b:ea:5b:cf:43:46:17:7c:ea:63:a1:e1:5e:6d:a2:
67:2b:61:c6:01:cd:03:a4:4f:b3:e9:4b:7d:44:95:
de:f7:3a:ef:fb:ac:2b:8b:4b:27:38:34:85:c8:a0:
b0:1f:56:1f:34:d8:03:06:f4:92:81:c3:f7:67:96:
49:bc:e0:9b:dd:c8:e4:b7:ce:bb:1a:94:6e:fe:f5:
ec:9c:3b:bc:66:37:d7:32:59:40:7a:b1:f1:68:ec:
94:fc:dd:bf:2d:dc:52:b3:bc:d8:1a:4f:cf:93:c6:
f5:30:51:49:82:81:72:67:61:01:05:a0:7d:b0:af:
99:c0:8a:5b:3f:ce:0d:d1:04:62:02:87:15:4c:46:
a6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F9:86:25:05:6C:97:42:65:26:17:4D:5C:78:70:2E:CC:2F:1C:DD
X509v3 Authority Key Identifier:
keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e34302e302f32312d3234203d3e2033343931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.223.40.0/21
Signature Algorithm: sha256WithRSAEncryption
39:1d:54:ec:d4:dd:84:cb:b4:77:32:f8:44:31:53:1b:7d:69:
26:9a:1d:7d:17:19:25:38:24:88:e4:46:a9:93:a8:88:aa:c9:
cc:58:1c:d1:8b:99:4f:2d:e0:fc:06:b3:01:c0:d9:d3:ae:db:
7b:1a:c4:de:8a:50:e3:b4:52:3e:96:f1:cc:42:1b:d8:25:5e:
e3:51:21:9f:e8:98:f5:b5:48:cb:42:47:cb:6f:41:b4:3c:4d:
35:5a:90:6c:db:c4:fe:4a:4b:fd:70:12:e0:38:97:10:55:a6:
3d:94:d5:ec:d0:c5:1e:d5:49:22:e5:96:80:12:53:a5:a4:7d:
38:5e:1b:25:37:b3:c1:61:83:4c:7b:d4:7f:da:57:70:98:92:
ba:ac:34:40:d0:48:e5:88:45:74:36:50:20:56:15:ea:7a:da:
3c:5f:db:36:1d:32:14:69:58:2b:83:7b:7b:7e:8f:20:e5:16:
1c:5d:d5:a4:87:3d:ae:84:e7:6e:42:86:ff:c1:79:74:0c:36:
2c:54:cd:b5:55:62:f7:03:c9:df:57:cb:8e:40:fd:71:67:b5:
cb:9f:e3:5b:e1:d1:8a:6d:ef:f9:10:39:0a:b7:3a:db:ea:47:
69:35:6e:a0:04:d0:94:8c:73:65:1c:99:33:64:55:ef:1c:7d:
50:43:19:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:54:15 2026 by rpki-client