
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3231312e3135352e3233372e302f32342d3234203d3e2030.roa
File: 3231312e3135352e3233372e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: 0EzglXpArwUVhyolEnsV0yKJ1qVFbYV874R7xNgVBTc=
Subject key identifier: 33:E3:41:6F:60:4A:7E:8C:70:B4:ED:0E:4A:3B:86:33:8D:24:80:6B
Certificate issuer: /CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3
Certificate serial: 5506A0AF05BDE7ACD3925B75E8C0EC0D3721DF27
Authority key identifier: EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3231312e3135352e3233372e302f32342d3234203d3e2030.roa
Signing time: Thu 28 May 2026 02:08:29 +0000
ROA not before: Thu 28 May 2026 02:03:29 +0000
ROA not after: Thu 27 May 2027 02:08:29 +0000
asID: 0
IP address blocks: 211.155.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl
rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:06:a0:af:05:bd:e7:ac:d3:92:5b:75:e8:c0:ec:0d:37:21:df:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3
Validity
Not Before: May 28 02:03:29 2026 GMT
Not After : May 27 02:08:29 2027 GMT
Subject: CN=33E3416F604A7E8C70B4ED0E4A3B86338D24806B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:6a:13:61:f0:76:18:4d:db:b7:06:c5:88:
b5:e9:3f:39:e2:06:d2:6c:54:bd:17:6a:31:24:35:
20:a6:4f:b1:c0:c3:e9:a2:fa:ae:e3:6a:94:f3:b8:
ff:7b:ec:d6:78:3e:b0:67:17:6d:98:ff:9b:d3:91:
ab:9c:6a:81:19:85:17:d8:5d:f9:04:e9:ad:d2:23:
60:a6:2c:7d:70:b0:b4:7c:44:ee:a8:cf:eb:26:38:
35:30:c2:5e:86:48:01:44:b0:3d:01:1d:18:6f:c8:
2a:23:61:d0:1f:94:e8:f5:28:cd:01:e0:d7:53:69:
1d:fe:ec:c9:a4:4d:44:f9:4a:c0:aa:f8:56:fb:9f:
7b:9a:70:9d:cc:21:76:5b:39:dc:74:92:61:9b:f1:
81:5d:49:e8:1c:7b:5a:3d:e3:51:97:08:16:da:16:
e9:27:a8:ff:9b:b2:e9:a0:8b:0a:b5:cd:4b:97:d2:
52:10:3d:61:87:08:b2:d5:69:c7:ec:ab:89:8f:2e:
20:b4:98:94:6c:0f:46:43:e4:c0:47:ec:9a:8e:75:
11:52:9c:9c:ba:bf:90:cf:d2:87:3c:5c:87:b9:d5:
9d:e1:e3:3a:14:ac:80:b4:a7:c2:f5:91:f7:94:5e:
4b:33:56:8b:02:fa:bf:59:66:3b:2c:3c:da:80:2f:
e7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E3:41:6F:60:4A:7E:8C:70:B4:ED:0E:4A:3B:86:33:8D:24:80:6B
X509v3 Authority Key Identifier:
keyid:EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3231312e3135352e3233372e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.155.237.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:2f:bc:17:f9:a3:bf:a5:8f:4b:90:25:59:b2:bb:01:df:95:
dd:4e:4e:1c:dd:f8:d2:01:39:ed:c8:ff:f8:b8:d3:d8:7d:cd:
92:24:cc:90:ef:ae:98:c9:a4:f4:8f:6a:6a:a9:0f:da:b7:1a:
3e:12:fe:24:88:15:3b:b5:61:c7:75:cf:76:8d:1e:2c:4d:03:
97:67:78:29:55:97:5a:72:fb:37:bf:5d:17:46:c7:b6:6c:76:
56:2e:9d:e2:47:2e:58:7d:af:c4:9c:87:ab:2b:c1:af:f7:bc:
c9:80:d6:15:22:79:a5:4c:ee:3a:ef:04:d3:4b:c6:98:03:53:
66:6e:1c:78:58:11:92:5c:6d:e2:79:aa:6d:d9:3d:8f:3c:0b:
c4:b3:fe:af:e0:29:17:18:59:6d:14:65:59:a7:70:e5:86:56:
25:fe:45:4b:ac:29:54:1e:5d:ed:40:f1:c3:b1:07:19:28:3d:
12:47:cd:fe:9f:26:30:3f:e8:e8:92:03:fb:fa:19:dd:67:90:
73:19:d4:77:5a:08:f1:13:c1:0f:e0:97:fe:44:a7:42:2f:19:
76:36:7e:cd:d1:23:3d:76:2f:25:cd:58:e9:8a:fd:f3:af:7d:
23:3f:40:7b:18:ae:50:e3:9e:40:64:ca:a0:f0:7b:51:81:70:
d0:65:b8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:28 2026 by rpki-client