
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e37322e302f32322d3232203d3e20313431373731.roa
File: 3138322e31382e37322e302f32322d3232203d3e20313431373731.roa (raw, json)
Hash identifier: jEvk04Qxhq/r1aN/edrCUOXDxtNqn/KL+51+k2fp2jA=
Subject key identifier: 16:25:01:1D:5E:0E:B0:B8:C0:16:46:43:FF:94:41:4C:C3:5B:C9:A0
Certificate issuer: /CN=EA1B92DE3A39218C88302E877CD7677E74606B38
Certificate serial: 42E7EB098204845A7CF876C3E61185D4A000BE5A
Authority key identifier: EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e37322e302f32322d3232203d3e20313431373731.roa
Signing time: Wed 27 May 2026 05:29:09 +0000
ROA not before: Wed 27 May 2026 05:24:09 +0000
ROA not after: Wed 26 May 2027 05:29:09 +0000
asID: 141771
IP address blocks: 182.18.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl
rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:e7:eb:09:82:04:84:5a:7c:f8:76:c3:e6:11:85:d4:a0:00:be:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA1B92DE3A39218C88302E877CD7677E74606B38
Validity
Not Before: May 27 05:24:09 2026 GMT
Not After : May 26 05:29:09 2027 GMT
Subject: CN=1625011D5E0EB0B8C0164643FF94414CC35BC9A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b6:b2:53:91:a7:c5:67:0f:1d:52:20:4f:32:
4c:bd:7d:9a:00:b1:a2:0f:d4:47:e3:5f:78:fc:43:
ae:f7:d3:b3:07:7f:50:b7:40:56:b0:36:a8:8a:3d:
12:83:65:ce:d6:5e:54:54:8c:35:9e:ed:aa:eb:e2:
bc:c6:97:8f:8b:a6:9f:60:11:8f:8d:e1:af:ff:73:
e6:9e:85:e6:42:a3:80:67:49:60:5c:1d:11:6c:ba:
c5:86:88:a3:eb:23:07:c1:3c:0f:2a:45:c6:7c:77:
87:79:47:49:66:2b:53:a9:4a:ef:ef:ae:9c:9f:7f:
ef:8f:2f:d0:94:f6:f1:5a:c7:d9:9c:60:55:b2:28:
b1:04:98:ed:76:65:b4:b1:f4:4b:75:ae:96:f9:04:
d8:54:72:8d:4b:a1:cf:44:54:ad:90:80:97:37:91:
99:ef:84:23:33:30:4a:db:aa:1e:ff:9e:2b:39:5b:
8c:a6:d0:4b:0b:97:44:8b:8a:d7:ce:0c:67:cc:a6:
50:d3:0a:ed:f6:d9:84:b7:94:9a:d9:d3:96:eb:66:
31:bf:54:b4:27:ab:6e:b2:5f:df:73:d1:2a:e9:79:
36:db:65:e2:7c:51:d7:20:aa:93:e8:3f:a7:7d:dd:
e2:4f:23:66:14:b5:ce:f8:70:c2:ce:dc:50:07:8c:
80:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:25:01:1D:5E:0E:B0:B8:C0:16:46:43:FF:94:41:4C:C3:5B:C9:A0
X509v3 Authority Key Identifier:
keyid:EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e37322e302f32322d3232203d3e20313431373731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.18.72.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:25:aa:88:7d:e2:05:0b:0b:da:9f:94:07:c4:c7:ef:0b:56:
8f:c6:cb:d0:7d:3f:4d:4d:f1:1c:0e:3f:41:d2:7f:cb:ea:2d:
3c:20:24:37:72:e1:54:7b:3b:73:ce:1a:50:26:42:b4:9e:25:
40:75:c2:c7:a2:72:e8:4b:56:b7:a0:77:4a:f7:35:85:79:8d:
a5:0b:af:a4:5c:49:9c:46:0b:40:05:e4:e5:eb:ae:b7:8e:92:
8e:20:15:40:10:0a:59:20:cd:11:a5:be:86:02:b7:e2:99:b9:
00:1c:42:47:70:af:37:17:3c:f4:98:93:d1:a0:9a:b9:3e:9d:
b6:51:37:03:72:22:20:5e:de:58:be:95:54:86:6b:89:3f:00:
ac:b5:53:36:4c:4e:b7:6f:fb:da:66:7b:31:5e:df:0e:3d:97:
db:c3:ab:79:54:99:a6:67:72:6e:a0:d5:47:67:8a:d2:2d:10:
95:f0:f9:fa:be:c8:c8:5e:14:6d:93:33:71:76:bd:83:4a:96:
1f:8b:69:fb:b5:65:c1:cd:19:8f:24:42:01:18:f6:58:65:45:
9d:c1:5a:94:43:92:af:19:b1:9d:6b:c6:44:ff:e4:c4:5f:85:
88:07:4b:fe:08:57:1c:25:fb:e4:da:e4:f8:d5:3e:c1:c7:70:
23:66:23:c9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:25 2026 by rpki-client