
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e39362e302f31392d3234203d3e2033343931.roa
File: 3138302e3232332e39362e302f31392d3234203d3e2033343931.roa (raw, json)
Hash identifier: ZFYzklmQBo9moCZv7O0n70dtUurrYs+w65TT57+CFXs=
Subject key identifier: AA:69:29:F1:03:AE:79:AF:4F:84:D7:04:4F:17:40:1B:18:84:21:87
Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial: 11C9FACEB2B18E990274AE2C161FFB307A9147F0
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e39362e302f31392d3234203d3e2033343931.roa
Signing time: Tue 26 May 2026 08:08:48 +0000
ROA not before: Tue 26 May 2026 08:03:48 +0000
ROA not after: Tue 25 May 2027 08:08:48 +0000
asID: 3491
IP address blocks: 180.223.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Jun 2026 23:56:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:c9:fa:ce:b2:b1:8e:99:02:74:ae:2c:16:1f:fb:30:7a:91:47:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Validity
Not Before: May 26 08:03:48 2026 GMT
Not After : May 25 08:08:48 2027 GMT
Subject: CN=AA6929F103AE79AF4F84D7044F17401B18842187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:a8:6d:e3:38:02:e6:9c:57:04:51:df:f7:b3:
1d:43:7e:5e:e1:e4:d4:88:4d:79:76:f6:f0:f0:03:
9c:02:7d:87:fd:37:57:6a:11:ef:e0:ca:f2:ef:00:
8e:95:3f:25:f6:de:d2:fd:60:11:7f:dc:24:69:6e:
50:62:77:a4:04:73:b9:31:94:fb:ac:f0:1c:a9:45:
dd:de:09:5c:8b:fe:9e:88:c3:6c:30:47:9c:ed:1b:
73:a3:e5:c4:ba:20:30:7d:17:a9:cc:63:b5:2e:b0:
75:7f:10:e2:57:3c:86:c3:92:ad:e6:27:0b:33:ac:
19:47:92:b5:76:14:af:64:6f:44:17:ac:38:4b:05:
64:0b:8d:16:a5:5b:6a:ce:29:73:d9:c2:b3:b1:ae:
bd:72:d2:c8:75:da:ac:5b:8b:f4:eb:fc:bd:ef:c8:
5e:71:2c:68:96:75:3a:ae:e8:5f:37:29:c2:e8:ee:
77:76:40:8d:3a:7a:59:b9:a7:86:e6:1e:5d:72:29:
48:a7:42:e5:81:a3:fb:e7:44:09:a4:44:4e:a7:89:
bc:8b:d5:2e:86:bf:4d:53:e9:32:2a:7c:b8:c2:f9:
0c:31:1a:ff:34:31:cb:a7:c6:17:54:17:af:50:ad:
1e:ae:8f:dc:4b:12:9a:ed:d8:ba:a7:6d:88:14:ab:
da:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:69:29:F1:03:AE:79:AF:4F:84:D7:04:4F:17:40:1B:18:84:21:87
X509v3 Authority Key Identifier:
keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e39362e302f31392d3234203d3e2033343931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.223.96.0/19
Signature Algorithm: sha256WithRSAEncryption
29:dd:37:65:4f:eb:22:3e:b3:7d:55:02:e9:ad:09:11:65:c6:
5f:00:6c:90:b9:94:ee:50:d4:8d:7f:96:e7:97:35:00:30:0a:
d9:c8:68:d0:fd:4b:64:1f:5a:b6:f7:9d:35:62:e5:44:73:fb:
7e:31:b9:25:bd:58:59:6c:2b:20:46:a0:f6:67:89:fd:27:7e:
e9:13:da:3d:a5:a8:53:30:1f:fc:3f:37:9e:05:26:1c:5e:4d:
c7:17:23:7e:8f:8e:bf:1c:d5:03:e2:6f:a8:60:ba:57:a5:10:
ee:de:24:35:16:5b:5a:ff:af:52:13:70:3a:d8:36:c9:5b:12:
cf:8b:1b:98:cc:d3:6c:b0:f0:db:6c:35:ff:56:8f:bd:53:47:
91:10:dd:be:a8:3b:ee:ad:73:e2:4f:c8:8f:b5:94:20:91:5b:
20:af:a8:e4:7d:b9:93:68:4a:a4:e3:bb:1e:ae:3a:d5:b9:f6:
39:9c:95:d9:68:0a:c1:04:67:85:19:ef:68:f3:4e:8c:5a:5d:
92:5a:11:3b:6b:91:53:9e:dd:ce:11:6e:6a:be:7d:a3:00:35:
f8:73:3d:a7:e0:bc:be:93:c9:b4:f6:77:5f:82:88:ef:83:fc:
15:24:c1:7e:f3:a7:26:22:b8:7c:e2:fc:d9:5f:69:ae:f8:c3:
04:dd:09:e0
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUEcn6zrKxjpkCdK4sFh/7MHqRR/AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw
NkNERDJDRTAeFw0yNjA1MjYwODAzNDhaFw0yNzA1MjUwODA4NDhaMDMxMTAvBgNV
BAMTKEFBNjkyOUYxMDNBRTc5QUY0Rjg0RDcwNDRGMTc0MDFCMTg4NDIxODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8qG3jOALmnFcEUd/3sx1Dfl7h
5NSITXl29vDwA5wCfYf9N1dqEe/gyvLvAI6VPyX23tL9YBF/3CRpblBid6QEc7kx
lPus8BypRd3eCVyL/p6Iw2wwR5ztG3Oj5cS6IDB9F6nMY7UusHV/EOJXPIbDkq3m
JwszrBlHkrV2FK9kb0QXrDhLBWQLjRalW2rOKXPZwrOxrr1y0sh12qxbi/Tr/L3v
yF5xLGiWdTqu6F83KcLo7nd2QI06elm5p4bmHl1yKUinQuWBo/vnRAmkRE6nibyL
1S6Gv01T6TIqfLjC+QwxGv80McunxhdUF69QrR6uj9xLEprt2LqnbYgUq9qJAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUqmkp8QOuea9PhNcETxdAGxiEIYcwHwYDVR0j
BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0
RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNTk2OTI5LzAvMzEzODMwMmUzMjMy
MzMyZTM5MzYyZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMzM0MzkzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBbTfYDANBgkqhkiG9w0BAQsFAAOCAQEAKd03ZU/rIj6zfVUC6a0JEWXGXwBs
kLmU7lDUjX+W55c1ADAK2cho0P1LZB9atvedNWLlRHP7fjG5Jb1YWWwrIEag9meJ
/Sd+6RPaPaWoUzAf/D83ngUmHF5Nxxcjfo+OvxzVA+JvqGC6V6UQ7t4kNRZbWv+v
UhNwOtg2yVsSz4sbmMzTbLDw22w1/1aPvVNHkRDdvqg77q1z4k/Ij7WUIJFbIK+o
5H25k2hKpOO7Hq461bn2OZyV2WgKwQRnhRnvaPNOjFpdkloRO2uRU57dzhFuar59
owA1+HM9p+C8vpPJtPZ3X4KI74P8FSTBfvOnJiK4fOL82V9prvjDBN0J4A==
-----END CERTIFICATE-----
Generated at Sat Jun 6 14:54:15 2026 by rpki-client