
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3231312e3135352e3233382e302f32332d3233203d3e2030.roa
File: 3231312e3135352e3233382e302f32332d3233203d3e2030.roa (raw, json)
Hash identifier: eLkwRpmTQ5phlkLILCwKyS1r8DYPePQxhxRfIWk9W68=
Subject key identifier: 1C:24:15:48:E2:FB:4A:F2:52:17:2B:04:08:CD:B8:56:5B:5E:AE:21
Certificate issuer: /CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3
Certificate serial: 63E0775924D9AA677BD4248040E12BB6A58F0FB7
Authority key identifier: EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3231312e3135352e3233382e302f32332d3233203d3e2030.roa
Signing time: Thu 28 May 2026 02:08:46 +0000
ROA not before: Thu 28 May 2026 02:03:46 +0000
ROA not after: Thu 27 May 2027 02:08:46 +0000
asID: 0
IP address blocks: 211.155.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl
rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:e0:77:59:24:d9:aa:67:7b:d4:24:80:40:e1:2b:b6:a5:8f:0f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3
Validity
Not Before: May 28 02:03:46 2026 GMT
Not After : May 27 02:08:46 2027 GMT
Subject: CN=1C241548E2FB4AF252172B0408CDB8565B5EAE21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:37:bc:85:9f:d1:af:03:e1:b0:b2:70:59:68:
c8:97:53:ff:3a:ea:4d:ae:09:5e:28:7c:59:a6:c4:
6c:49:a5:a9:20:d9:fc:cb:0e:bf:a2:94:a8:16:3d:
61:84:67:cb:c2:7c:e5:af:53:5a:f6:f3:5f:e7:77:
d4:80:91:33:b0:6d:86:fd:58:e4:43:5b:32:e8:9d:
ad:a9:5f:70:43:21:d1:f4:65:1b:a1:df:6a:17:49:
35:78:f8:24:69:c3:59:13:e3:25:8e:87:66:94:a1:
05:04:3c:87:49:c0:bd:bc:35:8c:02:df:99:9e:d4:
4c:4e:17:93:40:36:c2:2e:76:0e:6c:55:29:20:29:
ff:90:2a:7d:2a:db:91:19:6c:ce:62:c3:f8:9d:df:
36:a9:76:6e:10:13:69:b1:a5:93:fb:79:54:19:10:
68:db:76:ac:e6:50:cb:fd:ea:55:e3:00:18:4d:12:
98:ce:d0:bb:62:d6:75:69:45:11:c1:08:b4:e5:6e:
e8:72:12:4c:e9:a0:73:38:3f:b4:dc:09:f4:ad:96:
27:30:60:f5:c4:0d:f9:16:18:46:67:70:c6:e4:aa:
e5:8e:17:32:35:12:4f:c6:cf:57:76:be:db:83:01:
57:cf:6b:78:15:a9:69:1d:ae:05:ba:94:dd:c5:6f:
ae:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:24:15:48:E2:FB:4A:F2:52:17:2B:04:08:CD:B8:56:5B:5E:AE:21
X509v3 Authority Key Identifier:
keyid:EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3231312e3135352e3233382e302f32332d3233203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.155.238.0/23
Signature Algorithm: sha256WithRSAEncryption
85:85:d0:71:35:60:82:71:f5:92:bf:9f:97:14:8b:b8:6c:7b:
c9:55:ea:04:79:1d:7c:a3:4a:8e:f8:a1:4f:93:e7:d6:c4:ea:
7a:71:a1:d9:b2:6b:01:23:27:90:f0:42:07:11:99:37:89:29:
03:82:d4:b9:00:6c:7a:cd:22:59:4a:07:ec:97:be:82:84:a8:
d0:da:da:fe:01:e1:e0:4a:42:a0:98:4c:18:8b:02:eb:6e:b8:
6d:fd:65:00:33:85:fa:1f:7c:e6:d4:55:26:a5:ab:fa:7f:40:
a1:01:3b:c0:27:0f:d8:a9:ef:3b:ff:78:9d:a1:78:af:31:51:
eb:82:bb:60:7b:11:8d:83:1a:12:fb:db:b1:6d:53:44:38:6d:
20:9a:4a:d3:61:47:9a:02:f6:63:6d:41:35:d3:4e:15:3d:be:
f2:b6:0d:fd:b8:ea:1b:73:52:4e:72:1c:a5:11:76:1f:a2:3a:
08:79:cc:8a:76:2d:b0:30:2b:52:b7:83:65:a0:7a:ef:2c:e6:
d0:29:96:76:78:e7:20:5e:d9:c5:90:6e:da:1f:29:14:06:be:
d6:95:ae:d9:e4:64:b9:79:ad:f1:02:d6:16:04:d4:4c:c3:f2:
8a:88:cb:ee:42:f8:a3:28:47:e3:54:09:33:cd:f8:03:81:8f:
1b:17:25:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:50:00 2026 by rpki-client