
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e39362e302f31392d3234203d3e2036303937.roa
File: 3138302e3232332e39362e302f31392d3234203d3e2036303937.roa (raw, json)
Hash identifier: e0JMlPp9SSnruVp1oGT8MJ1xUEipRtf4PQix3Wn7zlU=
Subject key identifier: E0:6B:18:C0:8F:C6:33:E8:5B:C0:D2:04:4B:F8:F5:53:56:59:40:32
Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial: 6ABB18233E7F1F9DB7D1E01F309C624F09DF2411
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e39362e302f31392d3234203d3e2036303937.roa
Signing time: Tue 26 May 2026 08:08:48 +0000
ROA not before: Tue 26 May 2026 08:03:48 +0000
ROA not after: Tue 25 May 2027 08:08:48 +0000
asID: 6097
IP address blocks: 180.223.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 13:22:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:bb:18:23:3e:7f:1f:9d:b7:d1:e0:1f:30:9c:62:4f:09:df:24:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Validity
Not Before: May 26 08:03:48 2026 GMT
Not After : May 25 08:08:48 2027 GMT
Subject: CN=E06B18C08FC633E85BC0D2044BF8F55356594032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:af:1b:72:16:e4:f0:9e:d9:d2:6e:b4:28:68:
13:0f:ab:42:52:4b:1f:6e:18:3e:71:a3:a1:d1:11:
46:2c:86:b2:aa:17:6e:8f:90:ff:38:98:28:10:01:
57:57:4d:a1:4d:16:39:49:ae:c0:24:08:99:fb:b7:
0e:c0:fb:1d:82:7b:b6:d0:85:3b:67:b4:7d:f7:d4:
9c:1a:b4:a9:28:3a:a8:24:eb:d6:90:e4:2e:6e:46:
a2:98:15:16:eb:27:b7:c7:09:d7:14:28:4f:a5:16:
4b:39:80:3e:95:04:da:01:61:32:52:90:82:7a:c5:
d6:cc:22:ac:e0:15:bf:ed:c5:be:ab:ff:89:d6:d4:
7b:db:f7:78:46:3f:86:67:05:f6:cb:65:95:e7:3a:
4c:4a:4e:08:8d:c7:01:ae:6b:ed:e2:63:ad:7b:73:
7f:d3:6e:a4:d9:4f:11:dc:3b:fc:de:42:11:61:80:
58:5b:76:e0:7b:bb:10:da:5d:5b:30:3c:04:2c:94:
32:21:12:15:9b:d8:04:15:60:7c:57:04:bd:ef:05:
8c:fe:49:07:a3:4a:58:1f:d6:4a:b9:2d:9d:f7:59:
f6:dd:ac:55:8c:95:15:ba:21:9f:ad:93:70:dc:2d:
b7:10:e0:6b:dd:d2:61:ce:3e:27:49:f8:45:27:5d:
77:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6B:18:C0:8F:C6:33:E8:5B:C0:D2:04:4B:F8:F5:53:56:59:40:32
X509v3 Authority Key Identifier:
keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e39362e302f31392d3234203d3e2036303937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.223.96.0/19
Signature Algorithm: sha256WithRSAEncryption
93:b8:c3:f6:fd:55:6c:2a:d2:81:6c:0d:4c:8b:60:aa:c7:f4:
57:bc:d4:f5:e2:2f:93:bb:e1:02:ca:17:3d:7f:c9:e2:2b:20:
0f:91:64:7d:ca:62:da:f5:57:0f:2a:b0:2f:2f:a0:12:5b:bb:
f5:91:d2:98:67:a1:43:c6:05:e4:c5:5c:5b:ee:1b:94:dd:2d:
b0:d8:37:e5:16:7d:6e:41:07:d4:14:ad:e2:96:9d:56:2c:05:
f1:fb:15:59:1b:b2:2e:93:6a:c9:4f:30:96:70:0d:12:07:86:
7a:60:6f:dc:8f:75:30:97:79:2e:2e:cc:6c:21:d2:90:42:01:
c9:cd:4b:ab:db:43:af:22:5a:87:1d:d6:50:9c:1f:f7:e9:dd:
9d:ba:81:f6:66:b9:58:4a:f5:a8:35:c2:68:bd:a8:cb:5c:3f:
2b:74:02:eb:ec:f5:b9:bd:d7:7f:f3:e5:e9:e0:a1:ee:4c:58:
a0:52:4b:2f:de:8e:f4:9e:92:90:1c:49:fa:bb:72:b5:13:2e:
5c:f0:49:09:de:2e:db:36:5f:d4:18:e9:c3:d7:f6:fd:21:b1:
66:7b:38:47:29:e9:f0:59:87:83:07:7e:b9:18:49:5f:97:47:
c5:7f:90:b0:83:37:9b:7f:63:11:1e:0b:2d:65:9b:4f:7a:4f:
a0:92:a4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 00:42:20 2026 by rpki-client