
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e39362e302f31392d3234203d3e2039333034.roa
File: 3138302e3232332e39362e302f31392d3234203d3e2039333034.roa (raw, json)
Hash identifier: fYc2yVgm0TX8dCjEXiHG41HjqLCtywOzCJ6sK8jn8Eg=
Subject key identifier: A3:FF:B0:33:A2:8D:C2:35:5F:83:CC:FF:98:40:AE:60:B9:D7:43:0D
Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial: 200D0093AEE5FB5896C9DCEA60188F5C5283C42A
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e39362e302f31392d3234203d3e2039333034.roa
Signing time: Tue 26 May 2026 08:08:48 +0000
ROA not before: Tue 26 May 2026 08:03:48 +0000
ROA not after: Tue 25 May 2027 08:08:48 +0000
asID: 9304
IP address blocks: 180.223.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 11:11:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:0d:00:93:ae:e5:fb:58:96:c9:dc:ea:60:18:8f:5c:52:83:c4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Validity
Not Before: May 26 08:03:48 2026 GMT
Not After : May 25 08:08:48 2027 GMT
Subject: CN=A3FFB033A28DC2355F83CCFF9840AE60B9D7430D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:53:95:4a:e9:6f:1f:7e:14:81:c0:d6:8b:6e:
49:c3:0d:e6:9c:ec:32:5b:d0:d9:61:22:da:07:ef:
a6:bd:2d:b6:29:b7:7d:dd:fa:fa:6c:04:20:bc:e3:
62:9b:88:31:56:9d:28:3b:df:43:4b:ec:c0:d8:13:
f2:ac:a3:37:fd:07:c2:13:12:86:e8:1b:11:c8:03:
43:46:59:db:58:94:2c:95:aa:53:c2:27:3c:21:88:
60:c9:94:10:f8:a6:fa:ea:1e:63:f3:d8:1b:a3:a5:
c0:54:74:0a:93:69:16:5c:0b:ab:c3:e3:d2:a2:11:
54:27:1b:73:52:6a:8b:32:1a:bd:8c:26:e2:17:54:
ee:16:ad:fa:22:ba:03:0a:db:a9:d7:0c:8a:7b:6e:
f0:49:c1:ab:9c:a8:c4:c0:fc:a5:6a:fa:dc:3f:10:
5f:bc:07:e1:3c:72:7a:1a:4f:16:25:cf:01:44:75:
59:a9:33:1e:82:1d:75:e1:62:a1:b8:fd:00:8c:93:
7d:e1:02:54:3b:40:81:98:d1:b9:7b:44:da:8b:1c:
24:af:cb:79:88:d6:00:48:53:80:cf:ad:e2:6f:c0:
70:c6:72:c1:47:5f:3e:2c:d4:32:1d:dc:86:cf:73:
92:3d:c4:b5:14:cc:f8:c2:0b:f6:36:fb:3b:1f:86:
76:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FF:B0:33:A2:8D:C2:35:5F:83:CC:FF:98:40:AE:60:B9:D7:43:0D
X509v3 Authority Key Identifier:
keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e39362e302f31392d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.223.96.0/19
Signature Algorithm: sha256WithRSAEncryption
00:f9:39:d1:d1:f3:1a:96:14:35:86:a1:c3:f6:78:66:78:51:
f5:a6:c0:b0:97:f8:cc:0e:b6:bb:c9:c0:5c:40:64:3e:c3:d6:
56:af:ba:3f:8f:47:43:39:38:ac:f0:34:4c:71:a1:9f:cf:9e:
d4:41:b8:f8:b0:02:1b:4e:f3:82:ba:0f:97:91:94:27:09:02:
48:e2:64:d8:bc:c3:fa:f3:4c:06:29:81:8c:53:41:d7:75:43:
fc:19:0f:bd:c6:f8:9c:16:dc:ad:e3:c3:dd:e7:7d:22:41:9b:
3d:b5:01:9b:a2:b5:1d:95:99:f9:4b:88:37:5b:f6:b6:29:27:
39:94:4c:ad:46:36:10:2f:7f:47:76:e8:4a:23:51:79:52:43:
b9:a7:2d:d4:4a:58:5d:5c:18:d1:02:4e:d9:90:1d:2a:f0:46:
df:24:85:ff:51:32:03:b8:f3:25:f1:84:0a:0b:bb:33:f7:c5:
43:6a:ac:ee:e9:59:47:cd:7e:6e:c5:46:2a:52:f8:65:61:58:
1d:25:e0:c9:b1:78:69:24:50:ea:ca:e6:ce:1f:bd:1d:31:1a:
fe:6a:20:74:11:5f:f8:e2:3f:8c:89:82:3b:b6:f2:7b:70:75:
b3:20:ea:0d:6f:8c:03:c2:3e:a2:0c:fe:aa:c2:97:63:68:a4:
fe:e4:bc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 20:51:12 2026 by rpki-client