
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e342e302f32342d3234203d3e2030.roa
File: 3138322e31382e342e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: h9H58BH+JrIaknfswd3gcvON0UWG2mO0AwZMNgnNLIQ=
Subject key identifier: 71:31:CF:AC:84:51:F7:DD:EE:A6:E9:F9:6C:2A:14:E0:6F:5F:9F:19
Certificate issuer: /CN=EA1B92DE3A39218C88302E877CD7677E74606B38
Certificate serial: 7E00C2AF9E95BA4C9C3A37040D9CB8221D929CD1
Authority key identifier: EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e342e302f32342d3234203d3e2030.roa
Signing time: Wed 27 May 2026 05:58:26 +0000
ROA not before: Wed 27 May 2026 05:53:26 +0000
ROA not after: Wed 26 May 2027 05:58:26 +0000
asID: 0
IP address blocks: 182.18.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl
rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:00:c2:af:9e:95:ba:4c:9c:3a:37:04:0d:9c:b8:22:1d:92:9c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA1B92DE3A39218C88302E877CD7677E74606B38
Validity
Not Before: May 27 05:53:26 2026 GMT
Not After : May 26 05:58:26 2027 GMT
Subject: CN=7131CFAC8451F7DDEEA6E9F96C2A14E06F5F9F19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4d:98:ca:20:63:9a:79:47:34:8e:4c:56:81:
e1:cf:7d:be:a2:0e:ac:fa:14:8a:23:1e:54:14:73:
ac:98:4c:6b:06:c1:42:b7:d9:aa:b1:ad:29:ac:14:
06:53:f4:2a:18:5d:62:42:b5:1e:4f:fb:46:b1:80:
50:88:7b:aa:38:09:28:da:65:03:f3:50:d2:f0:4f:
7d:ed:88:41:73:a0:f3:88:47:5c:ae:51:84:ec:30:
8b:7b:d5:8b:33:fc:95:09:bf:ff:a5:19:15:65:5b:
56:02:92:e5:a8:b6:f7:31:59:ce:b5:2c:e4:c0:8c:
c3:e1:c4:80:16:6b:59:0c:b5:88:d0:17:ad:f5:9f:
1f:ce:7e:dc:0b:7f:3f:e3:93:f8:22:b6:2e:7f:6d:
16:93:b0:9a:b1:f6:7a:ad:82:9b:95:cb:09:ce:17:
68:a1:ae:c6:53:ee:1a:bc:eb:a8:ee:fd:6e:99:df:
a3:76:55:61:c1:2b:8c:6a:12:de:74:82:59:12:87:
7b:ee:ca:67:c7:11:8f:aa:67:bf:e3:bd:6e:95:5d:
fd:29:1c:17:96:31:70:b8:ca:21:4f:4d:a8:9c:68:
ca:85:eb:2c:2f:33:9e:f8:64:dd:f4:7a:52:93:44:
c4:c3:d5:5e:16:0f:19:f1:e2:d5:74:eb:a2:05:ab:
51:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:31:CF:AC:84:51:F7:DD:EE:A6:E9:F9:6C:2A:14:E0:6F:5F:9F:19
X509v3 Authority Key Identifier:
keyid:EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e342e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.18.4.0/24
Signature Algorithm: sha256WithRSAEncryption
86:42:c3:b3:3c:78:29:37:3c:81:6e:e4:c2:e6:f2:ae:61:dc:
b2:cb:64:aa:1b:89:fb:89:a5:ee:3b:01:df:d5:57:e3:c1:62:
40:0d:50:aa:ed:e1:14:af:4d:52:d8:a6:bf:9b:67:e5:c0:55:
e1:c7:04:2b:08:48:35:60:4a:bd:99:d0:7c:c9:1b:24:4b:1b:
22:b5:f0:a8:02:df:fc:db:e3:ce:f9:f2:e4:73:00:71:55:16:
23:5f:96:56:79:1a:27:d1:57:3c:46:fb:a4:2b:ba:ad:d5:cc:
ec:42:d0:26:b4:47:40:d3:2d:29:ea:6e:48:41:0c:f3:db:64:
01:ee:7c:5f:75:c1:41:cb:df:22:92:34:72:63:ea:ee:4e:83:
30:3d:d1:a6:29:5e:63:28:cf:76:35:da:a4:e3:ce:7c:56:8e:
91:88:da:e9:a2:f6:dd:e1:fc:71:b6:b9:a6:a3:28:9e:71:ac:
c2:2a:57:28:42:78:d3:0d:87:17:64:03:00:d3:92:76:9c:93:
11:60:20:f8:3b:69:61:e9:cc:1a:3f:b3:d8:18:04:1d:74:38:
ff:7a:c7:40:32:b6:48:2b:fa:b2:7e:d3:25:83:dd:87:da:77:
cd:92:0a:92:d7:ee:25:c4:f2:fe:37:13:f3:e4:94:eb:ea:14:
5a:cb:6c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:55:59 2026 by rpki-client