
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3130312e3235312e3132382e302f32312d3231203d3e20313431373731.roa
File: 3130312e3235312e3132382e302f32312d3231203d3e20313431373731.roa (raw, json)
Hash identifier: 6yVmF5UXwT0Zy29lHo408LotN65LtQRq0nhucRSO5vw=
Subject key identifier: DE:3B:B1:08:56:E0:5E:53:54:03:00:54:A8:AE:C6:F9:62:5B:3D:08
Certificate issuer: /CN=EA1B92DE3A39218C88302E877CD7677E74606B38
Certificate serial: 73C5468399CEBCFFB83175ADBF9C2EAA54D44E67
Authority key identifier: EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3130312e3235312e3132382e302f32312d3231203d3e20313431373731.roa
Signing time: Wed 27 May 2026 05:36:03 +0000
ROA not before: Wed 27 May 2026 05:31:03 +0000
ROA not after: Wed 26 May 2027 05:36:03 +0000
asID: 141771
IP address blocks: 101.251.128.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl
rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:c5:46:83:99:ce:bc:ff:b8:31:75:ad:bf:9c:2e:aa:54:d4:4e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA1B92DE3A39218C88302E877CD7677E74606B38
Validity
Not Before: May 27 05:31:03 2026 GMT
Not After : May 26 05:36:03 2027 GMT
Subject: CN=DE3BB10856E05E5354030054A8AEC6F9625B3D08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:39:0e:e6:88:15:88:04:d3:02:38:fd:55:d6:
ac:a4:d2:78:36:08:c3:5d:ff:c8:47:f5:3b:39:08:
76:5c:46:60:27:89:a0:99:d7:2a:b8:92:a5:8b:cc:
5f:43:a7:33:ea:f4:6a:92:0f:dd:be:a0:39:47:5a:
7e:51:cc:b3:cc:46:f1:eb:35:14:62:74:41:e9:11:
09:9b:73:e5:83:09:5e:44:4b:0b:eb:b3:a8:c7:75:
73:f2:f5:d2:92:e6:df:97:d1:b0:9c:e0:fa:1f:16:
7a:6c:70:fb:d2:b3:48:d2:d9:5b:c9:f9:f3:11:6f:
30:ae:53:7f:8c:7d:36:81:12:51:f5:52:23:e7:2a:
7a:64:b9:fb:3b:8d:9a:c9:22:d8:8c:29:7d:50:84:
96:85:73:ff:2b:f3:90:5c:f7:ea:86:99:90:17:84:
c3:de:1b:a0:0d:fd:ea:88:53:78:e9:c1:5e:63:06:
e3:12:c1:7d:25:1c:ec:7b:ca:08:92:59:20:c8:06:
fa:12:8c:f9:12:2b:c1:53:50:42:fb:68:ad:38:7b:
97:b6:93:7f:e0:1e:bd:9f:a3:33:23:72:68:b2:1e:
51:b0:dd:24:0a:1c:f6:0a:33:f6:04:63:53:54:a0:
95:cf:c1:c2:fb:a3:f0:87:33:a4:e8:7f:fa:55:9e:
3f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:3B:B1:08:56:E0:5E:53:54:03:00:54:A8:AE:C6:F9:62:5B:3D:08
X509v3 Authority Key Identifier:
keyid:EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3130312e3235312e3132382e302f32312d3231203d3e20313431373731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.251.128.0/21
Signature Algorithm: sha256WithRSAEncryption
85:7b:22:d5:6e:c3:f2:44:3e:12:82:0a:61:f9:c6:a4:04:e4:
97:f2:6f:82:34:39:f8:d8:c5:ed:f2:68:14:2e:23:60:35:4c:
25:aa:fa:74:05:c3:94:2e:d8:29:f3:52:5b:68:53:b0:7b:64:
47:0c:ac:af:be:da:55:ee:e3:5d:c3:eb:67:b6:ef:60:30:ee:
52:61:f4:dc:78:3f:5f:34:78:d8:1a:db:96:33:33:cc:b1:0c:
cc:67:7b:f3:47:2a:66:df:e7:fd:3d:25:ed:f9:52:b4:f5:5b:
14:29:b3:e7:98:ed:0f:32:5f:23:39:ad:b2:d4:51:1b:62:fa:
71:d6:88:c2:fc:8f:3a:27:5b:26:d1:56:75:c0:75:3f:fd:83:
b4:21:e2:a3:ac:9e:5c:72:66:0d:79:03:ef:93:e3:06:62:13:
2d:f5:d5:66:b0:3b:54:c2:7a:87:52:cb:de:1a:a2:10:38:b3:
49:01:51:40:4d:c8:44:9f:c1:0a:d4:e7:9e:e0:ff:aa:b6:a5:
1a:c9:41:18:60:ba:67:37:45:e3:9f:2c:33:b0:eb:ed:a2:a9:
54:3c:c4:3b:9e:fc:9c:7b:54:33:70:10:4e:f2:e9:ec:ad:62:
03:d4:0e:a5:0e:cc:97:3a:94:4c:ce:07:96:b9:c2:39:24:c0:
79:fe:f8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:57:31 2026 by rpki-client