
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106035279619293197/0/3231392e3233352e3136302e302f32302d3230203d3e20313331343839.roa
File: 3231392e3233352e3136302e302f32302d3230203d3e20313331343839.roa (raw, json)
Hash identifier: cC/N1wyIaryDSW045krlpIDwVjQkJtsGPqqfCMLQJ2Q=
Subject key identifier: 8D:05:3C:C0:67:85:D0:AD:C1:DD:7E:26:83:82:03:FE:1C:B4:B9:F8
Certificate issuer: /CN=90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415
Certificate serial: 497AD2D01D653A3ED22D3015C5061E53413F48A2
Authority key identifier: 90:B9:0B:70:03:C4:49:7A:0D:82:CB:81:A2:BD:4D:A4:EE:9A:B4:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/3231392e3233352e3136302e302f32302d3230203d3e20313331343839.roa
Signing time: Wed 19 Aug 2026 09:09:43 +0000
ROA not before: Wed 19 Aug 2026 09:04:43 +0000
ROA not after: Wed 18 Aug 2027 09:09:43 +0000
asID: 131489
IP address blocks: 219.235.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.crl
rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 22 Aug 2026 15:13:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:7a:d2:d0:1d:65:3a:3e:d2:2d:30:15:c5:06:1e:53:41:3f:48:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415
Validity
Not Before: Aug 19 09:04:43 2026 GMT
Not After : Aug 18 09:09:43 2027 GMT
Subject: CN=8D053CC06785D0ADC1DD7E26838203FE1CB4B9F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:31:6d:c6:e4:73:a0:e2:62:1a:cf:b9:5f:ea:
0f:90:31:4b:ec:ca:76:1c:e9:33:f5:fe:9d:62:c4:
6f:bf:ea:6c:5f:74:de:f6:fa:09:08:02:f5:28:96:
c6:10:fd:3f:05:3b:ac:65:1d:6b:e2:7b:d1:65:35:
79:ef:e8:c9:27:59:62:b9:88:01:8d:19:b0:36:25:
66:79:af:ee:da:a5:7b:cf:e5:54:11:82:a5:25:09:
00:3b:6e:93:43:eb:02:0a:dc:62:e9:9b:ac:1b:ff:
da:68:28:70:29:a1:86:a3:fb:cf:94:a1:87:ae:95:
85:8c:89:93:0a:1f:9e:6b:b8:76:5e:1e:60:36:a4:
0b:ec:2d:01:63:dd:ce:bf:62:f7:cb:06:ef:33:87:
c9:35:13:1e:72:ae:2c:55:0a:e2:cb:e7:57:72:2e:
18:ff:0c:0f:1d:79:be:f5:95:53:93:76:cf:3d:a1:
04:8d:fe:de:95:53:76:7f:55:1e:f5:ae:62:5b:1a:
49:41:c5:bc:50:16:f3:33:e1:88:fe:1c:25:6d:f4:
b3:7e:68:c0:68:64:4b:eb:f3:f6:b0:2a:f9:15:c7:
eb:07:d7:22:d2:14:aa:b1:fe:51:a9:6e:69:73:62:
a6:a4:4e:a8:cd:f6:98:9c:26:32:51:b0:57:8a:ff:
e8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:05:3C:C0:67:85:D0:AD:C1:DD:7E:26:83:82:03:FE:1C:B4:B9:F8
X509v3 Authority Key Identifier:
keyid:90:B9:0B:70:03:C4:49:7A:0D:82:CB:81:A2:BD:4D:A4:EE:9A:B4:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/3231392e3233352e3136302e302f32302d3230203d3e20313331343839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
219.235.160.0/20
Signature Algorithm: sha256WithRSAEncryption
7e:60:79:87:97:24:29:fc:aa:fb:6e:ea:32:48:a7:22:b6:21:
24:24:10:f8:c0:ce:76:ea:6d:68:b0:d5:2d:e0:12:8e:5b:85:
c1:84:39:ab:53:7d:f1:69:91:55:cb:31:09:ff:bd:dd:0b:31:
12:09:8f:c4:9b:5a:78:27:27:5b:73:bb:81:01:bd:ae:ee:65:
67:f6:84:df:a5:b3:08:57:bd:dc:e1:f5:86:f7:9f:22:84:c3:
31:fa:0c:c8:f4:e5:81:e9:11:a5:da:43:a9:eb:26:db:c6:16:
f9:3b:e5:50:ca:81:de:17:b6:74:66:9a:92:9b:a7:d3:3b:9b:
21:29:3d:52:49:9e:e0:0d:3d:86:d1:2f:2a:d8:c1:19:ba:0c:
5f:5e:6e:c6:bb:91:3c:d0:c4:2a:b5:d1:0b:81:52:f5:b1:b6:
59:99:6c:23:fc:3c:6b:12:ad:f3:8e:b7:72:6b:4d:54:cb:a3:
c6:fe:f5:5c:cb:01:ca:77:a3:32:10:f9:c8:8f:f2:3b:f3:f1:
66:04:84:81:a4:6f:cf:1b:2d:f2:ec:8d:23:11:ea:fc:77:e5:
9c:51:3f:b4:27:37:ea:9d:56:f6:2d:a0:99:9c:4e:a2:69:7e:
c7:14:c7:c9:ed:d2:11:08:01:6b:96:ba:77:36:2d:a5:79:17:
f4:91:31:e4
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUSXrS0B1lOj7SLTAVxQYeU0E/SKIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBCOTBCNzAwM0M0NDk3QTBEODJDQjgxQTJCRDREQTRF
RTlBQjQxNTAeFw0yNjA4MTkwOTA0NDNaFw0yNzA4MTgwOTA5NDNaMDMxMTAvBgNV
BAMTKDhEMDUzQ0MwNjc4NUQwQURDMUREN0UyNjgzODIwM0ZFMUNCNEI5RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCMW3G5HOg4mIaz7lf6g+QMUvs
ynYc6TP1/p1ixG+/6mxfdN72+gkIAvUolsYQ/T8FO6xlHWvie9FlNXnv6MknWWK5
iAGNGbA2JWZ5r+7apXvP5VQRgqUlCQA7bpND6wIK3GLpm6wb/9poKHApoYaj+8+U
oYeulYWMiZMKH55ruHZeHmA2pAvsLQFj3c6/YvfLBu8zh8k1Ex5yrixVCuLL51dy
Lhj/DA8deb71lVOTds89oQSN/t6VU3Z/VR71rmJbGklBxbxQFvMz4Yj+HCVt9LN+
aMBoZEvr8/awKvkVx+sH1yLSFKqx/lGpbmlzYqakTqjN9picJjJRsFeK/+gbAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUjQU8wGeF0K3B3X4mg4ID/hy0ufgwHwYDVR0j
BBgwFoAUkLkLcAPESXoNgsuBor1NpO6atBUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NjAzNTI3OTYxOTI5MzE5Ny8wLzkwQjkwQjcwMDNDNDQ5N0EwRDgyQ0I4MUEyQkQ0
REE0RUU5QUI0MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTBCOTBCNzAwM0M0NDk3QTBEODJDQjgxQTJCRDREQTRFRTlBQjQxNS5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMTA2MDM1Mjc5NjE5MjkzMTk3LzAvMzIzMTM5MmUz
MjMzMzUyZTMxMzYzMDJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMxMzMzMTM0Mzgz
OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBNvroDANBgkqhkiG9w0BAQsFAAOCAQEAfmB5h5ckKfyq+27q
MkinIrYhJCQQ+MDOduptaLDVLeASjluFwYQ5q1N98WmRVcsxCf+93QsxEgmPxJta
eCcnW3O7gQG9ru5lZ/aE36WzCFe93OH1hvefIoTDMfoMyPTlgekRpdpDqesm28YW
+TvlUMqB3he2dGaakpun0zubISk9Ukme4A09htEvKtjBGboMX15uxruRPNDEKrXR
C4FS9bG2WZlsI/w8axKt8463cmtNVMujxv71XMsBynejMhD5yI/yO/PxZgSEgaRv
zxst8uyNIxHq/HflnFE/tCc36p1W9i2gmZxOoml+xxTHye3SEQgBa5a6dzYtpXkX
9JEx5A==
-----END CERTIFICATE-----
Generated at Fri Aug 21 23:08:06 2026 by rpki-client