
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106035279619293197/0/3231392e3233352e3136302e302f32302d3230203d3e20313339313336.roa
File: 3231392e3233352e3136302e302f32302d3230203d3e20313339313336.roa (raw, json)
Hash identifier: i/zkFXcymWj1ilcUnjaFPRxtEDvzA2tRDGJGmQw8u4g=
Subject key identifier: 77:1A:3E:D1:86:DD:EB:12:0D:0F:87:21:B7:95:3B:6C:0E:0C:48:15
Certificate issuer: /CN=90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415
Certificate serial: 2A9FB587B5FA1984F092AF805D08073AB4566569
Authority key identifier: 90:B9:0B:70:03:C4:49:7A:0D:82:CB:81:A2:BD:4D:A4:EE:9A:B4:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/3231392e3233352e3136302e302f32302d3230203d3e20313339313336.roa
Signing time: Wed 19 Aug 2026 09:09:43 +0000
ROA not before: Wed 19 Aug 2026 09:04:43 +0000
ROA not after: Wed 18 Aug 2027 09:09:43 +0000
asID: 139136
IP address blocks: 219.235.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.crl
rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 22 Aug 2026 15:13:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:9f:b5:87:b5:fa:19:84:f0:92:af:80:5d:08:07:3a:b4:56:65:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415
Validity
Not Before: Aug 19 09:04:43 2026 GMT
Not After : Aug 18 09:09:43 2027 GMT
Subject: CN=771A3ED186DDEB120D0F8721B7953B6C0E0C4815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:aa:12:4d:19:83:1f:ce:ab:e3:27:30:76:58:
9d:e9:8b:32:73:67:f3:99:d0:71:b5:16:55:d9:fb:
6e:21:d5:c5:f4:a2:a0:7f:59:82:d8:08:84:b5:c6:
3c:ae:a7:65:34:61:a1:17:00:ce:2d:20:51:80:16:
b8:6e:65:35:86:2b:36:92:05:cc:7a:77:4c:6d:5d:
af:e0:c2:9a:17:e2:61:de:a2:7e:84:3c:b9:53:a4:
65:25:c5:5b:35:d3:b6:5b:18:69:65:27:94:7a:b3:
42:ba:4f:de:e9:5c:2c:6d:15:c0:a4:8c:e4:e5:80:
03:17:4f:64:de:24:34:de:6d:5c:2a:57:be:3b:ab:
de:cf:6a:32:f6:c6:6f:45:e5:e7:02:0a:57:0d:bb:
c8:8d:94:a5:e2:e7:97:dd:b0:e0:38:fa:7d:fe:c5:
24:76:53:a0:7c:4c:09:8b:ad:3b:a3:66:e7:3f:fc:
7e:21:ae:ee:eb:44:ed:3d:c3:6c:c2:15:51:5e:4d:
0d:6a:a7:33:53:c0:7e:61:fd:d0:9a:d0:92:9c:cc:
18:95:09:70:7a:55:4f:c6:bc:25:95:61:56:95:02:
e8:11:49:6a:87:0b:84:e9:32:ef:d3:4e:f4:3e:6a:
85:64:f4:a5:1f:98:7a:f6:06:c7:39:8e:06:74:27:
ae:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1A:3E:D1:86:DD:EB:12:0D:0F:87:21:B7:95:3B:6C:0E:0C:48:15
X509v3 Authority Key Identifier:
keyid:90:B9:0B:70:03:C4:49:7A:0D:82:CB:81:A2:BD:4D:A4:EE:9A:B4:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/3231392e3233352e3136302e302f32302d3230203d3e20313339313336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
219.235.160.0/20
Signature Algorithm: sha256WithRSAEncryption
84:5e:8f:93:f3:ab:e5:83:ba:35:fe:e1:f7:6d:0c:d6:bb:2a:
81:cb:9b:99:b2:49:14:8a:f8:0d:fa:1b:f8:2d:7c:5e:c9:ba:
1f:68:22:35:61:a9:47:97:09:25:10:51:ed:fc:41:07:d6:2c:
00:2e:79:54:f9:d9:fc:80:d3:d0:52:3b:82:73:f0:63:75:19:
89:d4:c5:5c:b0:5b:ab:47:61:46:39:2d:f3:80:b7:ea:92:03:
95:3f:0e:f3:73:23:d4:ee:5c:bf:02:d9:17:6f:3d:08:f2:66:
d2:10:47:e3:62:66:12:31:7e:b5:a7:3d:69:8f:d9:6d:48:b8:
1d:28:5c:67:f4:34:52:b0:c9:24:73:e3:18:da:b9:0e:7e:65:
71:07:e0:13:80:7d:ed:97:1f:2f:a5:92:72:e8:37:40:7b:30:
c6:50:d0:ce:1e:e3:86:e0:7b:c7:41:aa:ce:ca:4b:7f:19:34:
cf:9c:1a:82:93:6c:bc:2d:49:07:fc:92:ef:1c:88:f3:a9:cb:
df:55:4a:89:dc:0a:a4:22:cb:c4:90:8a:a4:f7:ea:66:78:c0:
40:be:d9:63:a4:a9:a6:1d:e6:57:ff:f1:54:c7:ff:55:1c:c0:
52:77:1d:73:19:f5:2c:8a:d3:a5:58:08:d6:e5:fa:44:e0:97:
38:e1:d4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:08:05 2026 by rpki-client