
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e34382e302f32302d3234203d3e2033343931.roa
File: 3138302e3232332e34382e302f32302d3234203d3e2033343931.roa (raw, json)
Hash identifier: vRO6k5SoXgkzaUH41pyCkcMFyJ9tXAFa2lgWQ9z0Jqw=
Subject key identifier: 0F:2C:9A:70:83:00:B4:6F:5F:E5:17:76:11:8B:06:9E:A3:8B:01:D5
Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial: 46CDE48BA38878E7EC0D55BE563A765F8E0B0239
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e34382e302f32302d3234203d3e2033343931.roa
Signing time: Tue 26 May 2026 08:07:40 +0000
ROA not before: Tue 26 May 2026 08:02:40 +0000
ROA not after: Tue 25 May 2027 08:07:40 +0000
asID: 3491
IP address blocks: 180.223.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Jun 2026 23:56:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:cd:e4:8b:a3:88:78:e7:ec:0d:55:be:56:3a:76:5f:8e:0b:02:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Validity
Not Before: May 26 08:02:40 2026 GMT
Not After : May 25 08:07:40 2027 GMT
Subject: CN=0F2C9A708300B46F5FE51776118B069EA38B01D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:76:a1:b4:da:0c:8a:72:98:88:ab:f5:2b:bd:
82:33:ff:39:c7:e4:92:ec:64:91:f2:2c:e5:f2:49:
f7:b6:fb:61:46:d2:4b:61:18:f9:96:ef:f9:d2:3e:
2f:46:22:df:42:dd:33:6c:60:ae:f1:50:e4:ad:2b:
ac:21:b8:d1:59:4d:35:a4:e5:82:71:53:a3:c4:f9:
01:01:18:ad:1b:e7:09:9d:38:60:d2:03:fc:1f:be:
b4:44:8c:e4:6a:1a:64:15:7d:38:74:8d:eb:ff:f8:
ff:46:3e:0e:37:76:70:9c:ef:85:6a:ae:37:55:8c:
02:b6:4e:28:36:19:68:da:34:72:df:fe:60:98:ed:
ca:3a:60:37:08:aa:98:83:39:14:c4:12:98:2c:42:
32:e0:ee:44:74:aa:a3:51:d2:d8:69:42:63:fa:11:
e5:6f:73:84:1e:a2:7f:70:1e:b5:e7:67:44:0a:27:
9b:d7:c8:a2:05:d5:48:e5:8e:11:3c:4f:dc:fe:f6:
16:00:88:77:9f:a9:09:5f:a1:91:3f:3d:7b:26:97:
47:34:f6:0f:e3:38:5f:e9:62:64:6a:1a:2f:42:bd:
2d:fd:4e:84:64:e3:5e:59:cc:09:64:c1:3a:a9:e5:
20:e2:25:b8:a0:de:5a:92:3f:80:49:78:bb:39:a1:
11:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2C:9A:70:83:00:B4:6F:5F:E5:17:76:11:8B:06:9E:A3:8B:01:D5
X509v3 Authority Key Identifier:
keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e34382e302f32302d3234203d3e2033343931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.223.48.0/20
Signature Algorithm: sha256WithRSAEncryption
02:06:b2:ff:55:f6:ef:dd:ed:f4:a2:14:e4:1b:f2:d8:9f:98:
03:4d:2b:03:c1:a6:90:bd:3e:e9:4f:b6:fc:06:8b:10:bb:6b:
08:40:be:f0:4a:9b:f0:58:12:f8:14:88:41:8e:3a:18:07:8e:
ec:d8:90:ce:47:08:94:28:2a:8f:e9:b1:ab:90:07:a9:2e:a3:
1d:91:96:0e:d2:59:83:1f:75:66:35:8e:7e:9b:4f:20:e5:c8:
b2:f2:03:06:53:e7:87:36:0c:42:ba:d6:4a:f5:cd:e8:49:d1:
58:ca:d8:9d:07:7d:f4:63:0d:c0:dc:66:53:89:7b:c8:16:bc:
26:e6:fb:c3:6c:df:1e:0f:49:04:57:1c:21:94:6e:be:8d:f7:
65:44:e1:12:59:69:ac:dc:c1:e5:ef:fe:5f:93:94:34:89:fd:
9b:46:28:5f:f6:8f:4e:5d:63:d3:39:2e:a6:e4:66:8d:01:13:
19:e6:96:69:7a:37:6a:76:eb:ea:b8:79:df:4f:c6:ab:50:d0:
bf:81:69:ee:99:63:a4:a0:12:fe:68:4f:f7:b3:7a:12:6f:86:
9b:3d:cb:50:d4:8f:f3:61:54:db:9d:8a:78:08:1a:e0:56:1a:
72:03:17:d9:54:1f:67:da:b0:c5:97:cf:01:97:ee:09:c5:ab:
20:55:4c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:54:16 2026 by rpki-client