
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3231312e3135352e3232342e302f32312d3231203d3e2034313334.roa
File: 3231312e3135352e3232342e302f32312d3231203d3e2034313334.roa (raw, json)
Hash identifier: L5ghtiuZZHocfAsh6/BljEIarx+57jviXMV8Dwamu28=
Subject key identifier: 09:52:A7:8A:24:58:FA:7D:5F:26:0E:47:E9:78:A6:34:22:E4:B4:23
Certificate issuer: /CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3
Certificate serial: 13781C7E82EDA2821A1D0B1ADE4D7925FBD7FE58
Authority key identifier: EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3231312e3135352e3232342e302f32312d3231203d3e2034313334.roa
Signing time: Thu 28 May 2026 05:32:43 +0000
ROA not before: Thu 28 May 2026 05:27:43 +0000
ROA not after: Thu 27 May 2027 05:32:43 +0000
asID: 4134
IP address blocks: 211.155.224.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl
rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:78:1c:7e:82:ed:a2:82:1a:1d:0b:1a:de:4d:79:25:fb:d7:fe:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3
Validity
Not Before: May 28 05:27:43 2026 GMT
Not After : May 27 05:32:43 2027 GMT
Subject: CN=0952A78A2458FA7D5F260E47E978A63422E4B423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b4:29:84:6e:35:7f:42:d5:27:42:12:d2:74:
85:a9:a7:51:58:41:63:ee:2c:98:58:55:10:88:eb:
57:2e:c9:cf:32:bc:ba:59:61:e6:77:1b:2a:4e:9b:
d4:fb:87:9c:61:25:87:d6:59:c4:1b:0e:c1:5b:ed:
d1:ab:29:39:f9:19:0f:69:53:d0:84:eb:48:b8:c4:
b3:b0:3d:d0:8e:62:c4:a1:6b:9a:b9:cb:5d:1c:ac:
07:4c:78:88:fb:b7:3f:e1:6d:ea:24:49:e6:1c:17:
7e:f5:f9:52:ec:7d:10:f6:7c:f0:17:c9:0b:12:81:
09:2e:27:32:af:ea:59:88:cb:58:77:b8:ea:6f:65:
a6:70:02:95:ce:bf:44:4e:76:8f:da:76:f5:39:b5:
11:75:d4:c8:58:05:5d:b6:a7:2f:f1:95:4c:6f:36:
e3:91:11:ab:f4:97:e4:13:20:db:69:61:82:af:06:
a0:38:a3:6a:c7:e2:b7:23:37:8f:00:11:e8:f5:18:
3f:32:5c:98:a2:88:ac:73:db:7e:f8:78:30:ba:87:
f3:d3:f8:bb:e0:f0:e7:ce:2e:61:e0:16:49:cc:af:
8e:e5:5b:51:99:39:5b:53:c1:c8:74:26:9e:aa:a3:
35:1b:c3:02:22:9e:26:d1:2c:2f:a9:75:8a:01:fb:
71:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:52:A7:8A:24:58:FA:7D:5F:26:0E:47:E9:78:A6:34:22:E4:B4:23
X509v3 Authority Key Identifier:
keyid:EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3231312e3135352e3232342e302f32312d3231203d3e2034313334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.155.224.0/21
Signature Algorithm: sha256WithRSAEncryption
05:fc:0d:09:64:dd:20:fa:7a:9a:64:b5:5e:c0:77:1e:3a:06:
80:45:6d:f1:6a:e7:59:d0:13:ea:b8:be:39:18:9c:e5:cd:8d:
f0:d3:36:fb:b1:f8:55:cd:1e:a1:c0:61:ce:62:23:f6:1a:bf:
88:17:92:03:cc:09:ae:a2:7f:80:02:ee:de:dc:26:ec:4a:35:
1f:ec:af:bb:10:0c:74:13:1c:2e:29:57:20:59:93:6d:e6:12:
9f:b6:99:5b:55:5e:d4:d5:4e:53:a1:3c:a3:8d:e7:fe:b4:98:
01:e1:61:c9:e3:c8:b2:b5:ec:95:f5:e7:e8:f8:f6:58:89:fd:
6a:a7:83:86:b6:ba:4e:b0:fd:1c:f8:fa:f1:a6:c7:42:31:fc:
44:c9:0d:b1:c4:6e:ae:61:6c:cf:0b:6e:3e:c7:78:49:f5:a2:
fb:2e:1c:e5:e6:20:44:43:8f:36:0e:7a:1d:b4:08:c0:bf:86:
4a:19:32:df:a5:5c:ea:cb:88:ed:bf:9d:8f:a5:f3:b3:6d:e3:
5a:87:2f:8a:56:ac:7d:84:4d:bc:7a:4b:33:01:47:a8:3f:73:
64:3f:ea:35:da:d4:69:e2:6b:b3:43:d9:b2:9b:41:07:09:be:
6e:da:f7:e6:99:10:5e:84:19:97:f0:db:3f:38:f3:63:f0:07:
f1:aa:f2:61
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:52:16 2026 by rpki-client