
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e34382e302f32302d3234203d3e20323037353530.roa
File: 3138302e3232332e34382e302f32302d3234203d3e20323037353530.roa (raw, json)
Hash identifier: gOPAMZNit+RNDLfB6yEqZ/9+gfV39dqlTS0VsB9igoQ=
Subject key identifier: F7:DA:63:BF:EE:FA:FE:C3:16:64:DF:2D:20:E4:CB:0C:B2:75:A8:13
Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial: 6FB67BB0C6BBA1ADAB54E15C08A72A2B2B5FD2EF
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e34382e302f32302d3234203d3e20323037353530.roa
Signing time: Tue 02 Jun 2026 10:39:22 +0000
ROA not before: Tue 02 Jun 2026 10:34:22 +0000
ROA not after: Tue 01 Jun 2027 10:39:22 +0000
asID: 207550
IP address blocks: 180.223.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 11:11:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:b6:7b:b0:c6:bb:a1:ad:ab:54:e1:5c:08:a7:2a:2b:2b:5f:d2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Validity
Not Before: Jun 2 10:34:22 2026 GMT
Not After : Jun 1 10:39:22 2027 GMT
Subject: CN=F7DA63BFEEFAFEC31664DF2D20E4CB0CB275A813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3e:49:c0:b4:7b:80:f3:cc:49:20:70:89:68:
27:e3:18:bc:42:31:4e:dc:26:91:18:c3:6f:20:e2:
72:53:8b:3d:ef:1f:43:e3:8f:03:ba:23:62:6b:41:
4c:26:36:29:e4:95:18:eb:0d:fb:f4:b6:56:9f:04:
7f:52:a7:fb:dd:1d:18:4d:26:7b:e6:c6:86:5d:e6:
03:85:35:ab:fa:15:e0:f9:4d:e7:dd:08:66:ae:30:
2e:28:95:e4:1d:21:a9:c0:1c:71:e8:66:a5:c4:48:
a0:6b:af:3b:83:c0:b3:e7:d0:48:f4:b1:6a:e6:14:
4c:4b:ad:5d:82:d3:92:8c:cf:7c:5e:3c:61:5a:ab:
0c:11:8c:c8:7d:ae:6d:47:7c:3a:dc:76:20:71:94:
cd:70:4b:02:5f:37:98:27:0b:d9:fb:d7:11:c7:f9:
1a:4a:e5:ab:50:92:37:16:3a:26:29:ad:b1:1d:fa:
82:d4:82:43:b6:32:2c:ad:ac:ff:55:3b:7c:2c:bf:
b4:77:fe:de:be:0e:c3:b2:a4:73:e9:5d:c9:bb:79:
f6:c9:75:06:a6:8e:ce:6e:01:73:ac:16:61:4e:1d:
d1:fd:2b:b9:e2:81:1a:4a:f2:f7:ad:4a:58:6e:86:
dc:12:3b:af:59:03:14:8b:78:e9:4e:2a:96:da:a2:
80:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DA:63:BF:EE:FA:FE:C3:16:64:DF:2D:20:E4:CB:0C:B2:75:A8:13
X509v3 Authority Key Identifier:
keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e34382e302f32302d3234203d3e20323037353530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.223.48.0/20
Signature Algorithm: sha256WithRSAEncryption
90:8a:1e:52:82:96:34:2f:a0:fa:f1:a7:01:59:f1:3d:e4:89:
96:4f:9c:0a:a1:da:86:8c:f2:71:57:1f:ec:12:a5:c2:a9:53:
17:62:e7:a0:5d:5b:4c:8c:9a:1d:67:26:48:78:63:3b:d9:ed:
54:52:37:fb:f7:58:89:30:e6:08:b7:70:1e:bc:e9:9d:12:c7:
fb:cf:d7:5d:32:19:d1:e8:3c:f7:a3:48:16:93:fd:20:85:1b:
25:e8:0f:07:a2:4c:b1:24:12:1e:cd:4a:ad:c0:02:a6:d8:36:
15:e2:0e:86:78:63:0b:66:fa:b1:57:ff:d7:78:c9:97:81:3d:
ff:86:10:77:d6:50:2b:88:f7:4c:85:9b:ea:9a:60:09:7a:f4:
b3:76:6d:4c:d3:b9:7f:19:ea:d0:95:86:61:42:1d:98:92:ef:
53:fc:21:61:45:11:f3:ee:d3:87:fc:43:44:b9:95:61:b6:11:
9b:84:cd:2b:96:f8:1b:11:22:49:dc:b4:f5:8f:f0:a7:03:29:
09:c4:eb:76:a1:91:ab:02:e7:71:04:a8:00:ee:1d:01:b2:cc:
9c:6b:e7:33:c2:4b:fe:13:a7:e3:77:fc:79:12:78:75:35:1c:
b6:b7:3e:ca:4a:5d:4b:0c:77:34:ff:4d:50:e2:31:96:02:e8:
26:47:9b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:25:18 2026 by rpki-client