
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/0/3136372e3138392e302e302f31362d3234203d3e2030.roa
File: 3136372e3138392e302e302f31362d3234203d3e2030.roa (raw, json)
Hash identifier: MXf+SARmeNUqmxYlPN54Ktu2L7cV6EQdIwRkz23xCxM=
Subject key identifier: CB:3A:4A:22:A0:3C:9B:29:D3:96:29:D5:47:16:F5:AF:C8:76:59:45
Certificate issuer: /CN=7C559A00840D00325B45D7F6A7C10EDBD2ED69AF
Certificate serial: 7EFD5B5D091A70BE6A4E9CE8E8CE14A27DE3E7B3
Authority key identifier: 7C:55:9A:00:84:0D:00:32:5B:45:D7:F6:A7:C1:0E:DB:D2:ED:69:AF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/3136372e3138392e302e302f31362d3234203d3e2030.roa
Signing time: Mon 18 May 2026 02:42:49 +0000
ROA not before: Mon 18 May 2026 02:37:49 +0000
ROA not after: Mon 17 May 2027 02:42:49 +0000
asID: 0
IP address blocks: 167.189.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.crl
rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 14:57:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:fd:5b:5d:09:1a:70:be:6a:4e:9c:e8:e8:ce:14:a2:7d:e3:e7:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C559A00840D00325B45D7F6A7C10EDBD2ED69AF
Validity
Not Before: May 18 02:37:49 2026 GMT
Not After : May 17 02:42:49 2027 GMT
Subject: CN=CB3A4A22A03C9B29D39629D54716F5AFC8765945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bd:7e:95:78:e2:f9:d6:7d:7d:8b:29:25:4e:
f9:40:92:2f:ae:89:e9:96:85:f0:f1:5c:cb:ea:44:
87:25:ca:90:33:31:e0:34:27:ef:dd:ae:a9:3b:38:
c3:7e:36:ec:5f:94:7a:d2:c5:ec:46:79:da:2c:e1:
66:f2:b3:7f:ed:f2:c6:04:4a:d2:c4:00:8e:3b:1b:
f0:6c:10:71:bf:22:0d:33:ba:eb:03:b0:9d:10:e1:
3f:94:0b:cb:e2:88:f3:e2:20:8f:9e:30:ed:a3:1c:
54:85:0f:86:54:b9:39:dd:56:a5:58:3b:e2:36:5e:
b5:6e:72:c3:1a:2e:e2:d6:0e:5e:ae:71:4d:8c:be:
f1:b1:fe:6c:4b:4b:56:4f:18:9a:ae:f7:4d:90:3d:
c2:60:13:ea:50:ab:76:f8:e7:b0:c5:a5:26:ac:2b:
2d:84:d3:5d:65:34:4e:e0:03:cc:8d:af:4c:f9:0f:
ea:d0:b0:12:19:39:97:8c:b7:ca:53:31:84:0d:85:
31:eb:92:c3:9d:9b:4d:25:20:c7:07:70:7d:bf:96:
08:e0:b6:2a:67:cf:c0:b8:68:c2:68:ad:ed:bb:ae:
d6:f6:fb:92:c8:93:28:be:ee:7f:a0:61:e5:13:8d:
eb:0c:f7:8f:97:c7:3a:79:ae:5a:48:f5:6a:7a:41:
e2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3A:4A:22:A0:3C:9B:29:D3:96:29:D5:47:16:F5:AF:C8:76:59:45
X509v3 Authority Key Identifier:
keyid:7C:55:9A:00:84:0D:00:32:5B:45:D7:F6:A7:C1:0E:DB:D2:ED:69:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/3136372e3138392e302e302f31362d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.189.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8e:4b:32:28:c4:e6:ea:ba:9c:32:6c:eb:3e:bf:34:27:a0:30:
25:a0:98:1a:e2:27:b2:65:4a:5c:90:8c:39:d4:fc:6c:de:e8:
f0:6a:75:64:ba:ea:43:e3:26:ff:0e:d6:e6:b5:b7:61:e5:8b:
6d:8c:2a:7a:be:68:ab:cc:ca:90:23:e7:9d:18:49:81:e0:19:
ce:8a:ee:00:5f:21:84:39:b1:c3:2f:14:df:39:59:19:c8:5f:
d2:c1:7f:e4:ba:46:88:57:23:d2:62:58:f7:54:f1:9e:6a:2b:
13:5d:5b:b0:a8:ab:f9:b2:a9:b0:b1:27:ab:80:20:b4:2b:29:
71:7c:d6:c5:4b:f0:2d:a3:03:74:f0:e4:1c:35:34:76:6f:ae:
fb:06:7e:a2:8e:5f:e6:05:92:71:dd:b0:be:18:b1:4e:73:d6:
1d:9f:e9:6e:53:9c:31:cf:70:d1:96:53:19:d6:2d:34:34:e1:
bc:fe:6a:05:0a:6c:e6:47:ba:be:23:b3:2e:d8:bc:95:51:0d:
2e:59:09:b2:53:dd:b8:36:ed:b9:89:f9:9f:7a:e8:f1:33:2c:
8b:da:34:65:b9:bb:d8:e6:02:00:54:09:fb:b2:bd:8a:d0:6b:
22:40:75:cb:a4:da:5f:c2:8d:72:fc:33:4e:98:e3:7f:ba:ab:
ee:25:ec:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:03:26 2026 by rpki-client