
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3131362e36362e36342e302f31392d3139203d3e2030.roa
File: 3131362e36362e36342e302f31392d3139203d3e2030.roa (raw, json)
Hash identifier: iXic9QsPCgNhQwzKKNPoIkJAYXI9V9gKXFUDqaHrlF4=
Subject key identifier: D0:D2:34:E1:F1:8F:06:49:FA:FE:C6:8F:50:91:81:BD:BB:04:C5:C6
Certificate issuer: /CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A
Certificate serial: 2818145890376A9DAEFDB878A72A606A31556B34
Authority key identifier: AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3131362e36362e36342e302f31392d3139203d3e2030.roa
Signing time: Wed 22 Apr 2026 07:51:41 +0000
ROA not before: Wed 22 Apr 2026 07:46:41 +0000
ROA not after: Wed 21 Apr 2027 07:51:41 +0000
asID: 0
IP address blocks: 116.66.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl
rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Apr 2026 23:41:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:18:14:58:90:37:6a:9d:ae:fd:b8:78:a7:2a:60:6a:31:55:6b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A
Validity
Not Before: Apr 22 07:46:41 2026 GMT
Not After : Apr 21 07:51:41 2027 GMT
Subject: CN=D0D234E1F18F0649FAFEC68F509181BDBB04C5C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ca:8f:b9:17:e9:66:c9:53:95:c5:68:f4:6a:
b4:12:c9:5d:23:38:45:3d:51:03:b1:49:55:2c:ed:
fd:61:1b:eb:e5:68:98:ba:43:89:4a:d4:ac:b5:aa:
e5:c5:54:90:3a:cb:ab:7c:c3:cb:14:32:b0:de:17:
5b:9a:eb:0f:b1:85:7a:6c:2b:a9:05:07:79:98:b7:
b6:63:2f:5c:b6:c4:39:13:3b:a5:9e:09:da:c3:29:
ae:2d:d0:47:7c:86:6d:c1:c0:ec:f1:28:94:5a:d3:
66:2b:e0:69:9f:3a:19:f1:e0:ab:c5:7c:e0:c3:00:
72:8d:0f:ce:fd:19:89:26:f4:84:d5:54:12:0b:8c:
60:6e:60:2b:11:ff:70:1a:1b:33:c9:a9:d2:ef:ba:
d9:37:a7:0f:1b:9c:5c:c0:39:59:fa:66:a5:89:58:
55:06:1e:47:62:70:36:02:24:bd:e5:ec:3a:d4:3e:
a5:ec:8d:d7:fa:be:5d:ed:e6:be:55:1f:b7:39:38:
9b:16:d1:d4:bb:f1:f5:47:20:ad:80:61:2c:22:3f:
bf:eb:72:86:b3:a1:be:2e:51:55:8d:f6:59:65:9f:
37:12:69:ea:89:a8:54:6c:ee:86:3c:74:ab:b2:fc:
eb:8b:c4:4c:83:62:0f:fa:25:8d:2f:93:ab:a8:f0:
d2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D2:34:E1:F1:8F:06:49:FA:FE:C6:8F:50:91:81:BD:BB:04:C5:C6
X509v3 Authority Key Identifier:
keyid:AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3131362e36362e36342e302f31392d3139203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.66.64.0/19
Signature Algorithm: sha256WithRSAEncryption
02:33:8d:33:24:e1:2d:83:0f:56:e3:f0:3e:32:2e:7f:51:41:
54:83:77:6a:89:ec:f8:c2:6f:1e:c8:12:ac:a1:ee:46:02:73:
6e:80:e9:3e:04:17:39:b9:d1:64:5a:3c:a5:10:40:63:41:16:
00:c4:0c:56:0b:46:a8:58:2f:21:6b:83:ca:a2:6f:1e:cd:d4:
0d:3f:48:b1:c9:d1:32:12:b8:59:1c:ee:e7:1a:85:90:60:5e:
5e:ea:b9:1c:79:b9:fc:44:87:c3:27:9e:cd:a4:c2:4a:d8:87:
6f:d8:7b:69:96:93:59:34:f6:68:4d:ec:8e:b4:1c:1b:72:55:
ee:f7:b8:c0:4c:43:27:fb:32:54:f4:c3:c0:5c:c0:e1:e2:ce:
dd:d5:1f:62:81:56:2a:b3:d4:0a:31:75:d6:e9:02:ce:70:bc:
ff:48:62:99:ac:0f:23:07:b1:f9:d4:52:64:22:ba:99:b8:64:
4a:1b:73:89:08:cd:08:ee:57:47:21:fb:65:a8:dd:09:12:98:
f9:e6:b7:5c:ea:ca:3a:06:8c:57:87:f1:e3:96:e9:de:94:15:
9c:1b:04:ee:3c:29:93:38:d4:da:94:e5:7c:f6:cb:c4:fe:ca:
52:f6:65:20:13:93:7f:de:db:7f:e8:73:66:e2:4e:ba:68:54:
1f:95:55:51
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUKBgUWJA3ap2u/bh4pypgajFVazQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVCNjE0QzI0RkZDMkE2QkUwRTJEQjFDN0EzRTBBQUY2
NDFFNkE4QTAeFw0yNjA0MjIwNzQ2NDFaFw0yNzA0MjEwNzUxNDFaMDMxMTAvBgNV
BAMTKEQwRDIzNEUxRjE4RjA2NDlGQUZFQzY4RjUwOTE4MUJEQkIwNEM1QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnyo+5F+lmyVOVxWj0arQSyV0j
OEU9UQOxSVUs7f1hG+vlaJi6Q4lK1Ky1quXFVJA6y6t8w8sUMrDeF1ua6w+xhXps
K6kFB3mYt7ZjL1y2xDkTO6WeCdrDKa4t0Ed8hm3BwOzxKJRa02Yr4GmfOhnx4KvF
fODDAHKND879GYkm9ITVVBILjGBuYCsR/3AaGzPJqdLvutk3pw8bnFzAOVn6ZqWJ
WFUGHkdicDYCJL3l7DrUPqXsjdf6vl3t5r5VH7c5OJsW0dS78fVHIK2AYSwiP7/r
coazob4uUVWN9lllnzcSaeqJqFRs7oY8dKuy/OuLxEyDYg/6JY0vk6uo8NKdAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQU0NI04fGPBkn6/saPUJGBvbsExcYwHwYDVR0j
BBgwFoAUrrYUwk/8Kmvg4tscej4Kr2QeaoowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
OTE5MjU1MjM5NDg1MDMwNy8wL0FFQjYxNEMyNEZGQzJBNkJFMEUyREIxQzdBM0Uw
QUFGNjQxRTZBOEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUVCNjE0QzI0RkZDMkE2QkUwRTJEQjFDN0EzRTBBQUY2NDFFNkE4QS5jZXIw
gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk5MTkyNTUyMzk0ODUwMzA3LzAvMzEzMTM2MmUzNjM2
MmUzNjM0MmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV0QkAw
DQYJKoZIhvcNAQELBQADggEBAAIzjTMk4S2DD1bj8D4yLn9RQVSDd2qJ7PjCbx7I
Eqyh7kYCc26A6T4EFzm50WRaPKUQQGNBFgDEDFYLRqhYLyFrg8qibx7N1A0/SLHJ
0TISuFkc7ucahZBgXl7quRx5ufxEh8Mnns2kwkrYh2/Ye2mWk1k09mhN7I60HBty
Ve73uMBMQyf7MlT0w8BcwOHizt3VH2KBViqz1AoxddbpAs5wvP9IYpmsDyMHsfnU
UmQiupm4ZEobc4kIzQjuV0ch+2Wo3QkSmPnmt1zqyjoGjFeH8eOW6d6UFZwbBO48
KZM41NqU5Xz2y8T+ylL2ZSATk3/e23/oc2biTrpoVB+VVVE=
-----END CERTIFICATE-----
Generated at Mon Apr 27 10:59:26 2026 by rpki-client