
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3231312e3135352e3233322e302f32322d3232203d3e2034383337.roa
File: 3231312e3135352e3233322e302f32322d3232203d3e2034383337.roa (raw, json)
Hash identifier: qbIlGZuLW4EfB4pWvgRtnCiCxbiOFoJlF2Xs1LMwnwA=
Subject key identifier: 9C:E4:52:71:68:6E:CB:65:B2:0A:2D:44:F9:D2:21:E3:6D:CA:51:1C
Certificate issuer: /CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3
Certificate serial: 2B7A89B18A0E904FB657BD0454BFE8F7E16910E4
Authority key identifier: EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3231312e3135352e3233322e302f32322d3232203d3e2034383337.roa
Signing time: Wed 27 May 2026 09:10:00 +0000
ROA not before: Wed 27 May 2026 09:05:00 +0000
ROA not after: Wed 26 May 2027 09:10:00 +0000
asID: 4837
IP address blocks: 211.155.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl
rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:7a:89:b1:8a:0e:90:4f:b6:57:bd:04:54:bf:e8:f7:e1:69:10:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3
Validity
Not Before: May 27 09:05:00 2026 GMT
Not After : May 26 09:10:00 2027 GMT
Subject: CN=9CE45271686ECB65B20A2D44F9D221E36DCA511C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:18:78:75:40:ea:31:90:22:0c:90:ba:56:52:
c9:63:52:2a:67:ca:b1:eb:0f:50:44:0e:27:11:5f:
10:5a:a4:97:09:82:13:f4:16:06:df:e4:5c:a5:d5:
6c:c4:17:9c:af:ac:34:8b:3f:df:c0:85:4e:d4:4b:
b3:c5:45:e2:a5:c6:d8:cd:bd:c8:b6:bb:d2:9e:db:
27:34:33:04:c4:5d:b1:b1:42:b1:9d:f1:4d:e3:cb:
33:74:d6:d5:fa:e5:2e:5d:cb:c6:b5:86:6b:fb:30:
54:51:57:dd:d6:c3:5f:c2:a0:d9:32:ec:37:b0:91:
50:80:9b:f9:fc:35:67:44:de:80:8e:e6:5c:ce:df:
ea:17:a0:dc:eb:5d:7a:4c:c8:b3:e9:53:67:ee:83:
e2:53:a4:91:bb:14:95:07:2c:d9:1a:19:8b:d9:0f:
10:97:42:1d:12:ed:52:b2:01:0e:e9:dd:ba:48:db:
66:90:76:83:4c:4c:15:e9:61:c4:15:40:e2:af:a0:
5c:ff:cf:38:d4:23:21:1a:ee:70:8b:7c:2f:45:08:
57:c9:04:71:a9:45:4e:d9:1c:d0:1b:c1:3a:e6:87:
28:f8:79:73:a8:30:bb:aa:02:c5:a4:aa:78:29:69:
2d:45:91:17:d7:9f:4d:82:73:ae:d6:70:d6:a4:44:
e1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E4:52:71:68:6E:CB:65:B2:0A:2D:44:F9:D2:21:E3:6D:CA:51:1C
X509v3 Authority Key Identifier:
keyid:EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3231312e3135352e3233322e302f32322d3232203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.155.232.0/22
Signature Algorithm: sha256WithRSAEncryption
55:17:b3:4a:e7:de:4f:40:98:cb:e7:c9:ac:d2:8c:08:26:2f:
fc:d7:e9:89:32:3f:86:c5:d4:bf:6e:82:5f:bb:a4:ab:99:62:
ce:18:70:ff:1d:d4:6d:4f:fa:d8:7f:5a:03:99:18:26:00:a2:
ee:ee:43:3e:4b:1d:0c:4f:41:46:18:2a:f3:c4:48:f9:4b:40:
ca:6d:d3:97:be:5e:87:94:9e:14:45:df:0c:6f:e2:45:5a:24:
2d:98:55:fa:35:b8:36:79:65:8b:59:f0:60:2e:9e:44:3a:16:
7c:6f:2c:d5:e0:2b:1d:bb:15:f1:16:db:61:45:2e:d9:1a:84:
c2:2f:9e:0b:f7:db:fe:37:67:29:f2:c9:cd:7f:9e:6f:7a:af:
72:69:2a:fb:c3:a8:33:d5:8d:a2:b3:b1:62:eb:b2:37:50:91:
63:d9:27:63:2a:cc:fe:e6:7c:2c:59:0d:32:fe:d6:4e:21:75:
78:25:ff:b8:24:40:75:1c:b7:46:e7:d9:85:57:2d:e2:cf:c6:
04:5a:04:b8:89:e3:12:0b:a9:b6:9c:b8:e3:2e:fb:a9:fe:17:
f0:48:fa:73:a5:e5:d7:35:4c:63:06:ab:5b:cb:61:20:30:24:
13:03:5b:b9:39:43:14:13:71:d8:8f:86:48:04:58:58:32:05:
e2:a5:de:ec
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:53:09 2026 by rpki-client