
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3139322e302f32342d3234203d3e203535393932.roa
File: 3130312e3139382e3139322e302f32342d3234203d3e203535393932.roa (raw, json)
Hash identifier: jyHQjcp5HjgWZqQ57iQ8IZl87RXeiRb/GsNTWwc/wEs=
Subject key identifier: D3:64:BA:EF:DF:F0:19:A1:DB:92:83:20:30:B0:13:39:FA:10:19:2F
Certificate issuer: /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Certificate serial: 24F082A0F44F80A0E8A690C9E02ED722FCBE1078
Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3139322e302f32342d3234203d3e203535393932.roa
Signing time: Wed 17 Jun 2026 16:25:10 +0000
ROA not before: Wed 17 Jun 2026 16:20:10 +0000
ROA not after: Wed 16 Jun 2027 16:25:10 +0000
asID: 55992
IP address blocks: 101.198.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 19:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:f0:82:a0:f4:4f:80:a0:e8:a6:90:c9:e0:2e:d7:22:fc:be:10:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Validity
Not Before: Jun 17 16:20:10 2026 GMT
Not After : Jun 16 16:25:10 2027 GMT
Subject: CN=D364BAEFDFF019A1DB92832030B01339FA10192F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e1:07:d4:51:e5:c7:3a:db:aa:27:0b:d8:a3:
4e:47:44:1a:2a:c9:e7:93:e6:e2:7a:d5:7a:cb:47:
d3:e8:27:29:4e:3f:25:8d:18:29:60:7f:e5:58:b2:
8e:c8:9b:b4:79:0a:48:a7:35:2d:dc:6b:29:15:42:
26:8c:7b:bd:e7:bd:57:a6:1c:58:7a:e8:6b:49:ca:
4d:fe:ac:8f:fd:17:95:95:ae:fc:28:a8:86:fb:34:
eb:b4:b8:b9:68:c1:2f:ae:b3:3b:69:54:83:bd:52:
b6:18:c8:bd:4a:5f:92:6a:b2:67:ad:42:e9:52:45:
fc:bc:c6:65:a1:60:47:8b:22:3c:26:47:c4:9c:24:
b4:05:c6:42:c6:bb:da:fb:8b:9e:51:bd:91:00:ce:
1a:2d:d8:2d:2a:af:15:3f:66:b9:d1:97:19:b6:1e:
5f:ad:28:0c:06:c8:f2:53:44:a4:30:09:31:58:6e:
b2:c4:7a:01:9b:c5:ac:d9:b5:7e:9f:d6:7f:ae:9e:
f3:15:78:64:ca:c5:0f:66:64:53:79:46:86:4c:94:
06:48:15:96:eb:d1:7e:79:ea:90:f8:d0:b5:95:d8:
36:ae:f1:16:d7:13:40:a4:a6:c5:a9:cf:08:73:b0:
5d:96:b0:43:4d:87:99:12:73:70:53:4e:eb:8f:ac:
c9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:64:BA:EF:DF:F0:19:A1:DB:92:83:20:30:B0:13:39:FA:10:19:2F
X509v3 Authority Key Identifier:
keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3139322e302f32342d3234203d3e203535393932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.198.192.0/24
Signature Algorithm: sha256WithRSAEncryption
30:32:28:90:fb:5a:43:10:31:5e:33:a6:9a:a2:33:b0:d4:c9:
60:1f:7d:0c:59:fd:b5:99:c8:b4:d1:e7:86:f0:50:d4:1b:ca:
cf:73:f2:f5:8d:24:98:31:0c:9d:25:29:a0:88:ef:da:10:8a:
ed:64:9e:ea:67:a5:04:05:9c:54:ec:9d:7a:e1:01:3e:bc:27:
8d:c6:cb:77:c4:f1:4c:c2:45:2a:b8:43:ed:f9:d4:a5:70:df:
7c:f5:d2:4c:79:2c:a8:f5:de:08:69:cf:46:40:9f:3b:fd:35:
d3:78:c9:66:37:45:6a:8d:1f:1a:34:0c:0b:d8:a1:f3:fb:12:
9a:d2:9b:6e:08:7d:12:1e:28:f6:ff:69:4f:cb:5f:7f:af:44:
fc:50:71:f0:13:f8:77:d5:66:1a:67:2f:d6:01:7b:b9:37:40:
63:1c:7a:19:df:96:c7:d5:19:ee:a6:58:73:a8:39:c0:b4:6b:
66:70:a2:a9:4f:e9:ed:56:cd:1f:ae:c0:90:5d:2a:98:a7:fe:
84:af:22:a8:dd:20:d5:b5:fe:b4:52:ff:8f:8b:83:eb:15:29:
10:ad:31:0d:c8:42:f5:d5:2a:96:6b:53:6b:57:9f:9b:9c:42:
f0:3b:63:7f:fb:c7:4c:e0:aa:8b:85:44:e2:d2:e1:c7:e7:2d:
fa:7a:69:0f
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUJPCCoPRPgKDoppDJ4C7XIvy+EHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUyN0VFRjIyRUQ0QjkwMzQ5NDlDOTFFM0QzOUIyNEE2
OUZERjk4NDAeFw0yNjA2MTcxNjIwMTBaFw0yNzA2MTYxNjI1MTBaMDMxMTAvBgNV
BAMTKEQzNjRCQUVGREZGMDE5QTFEQjkyODMyMDMwQjAxMzM5RkExMDE5MkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq4QfUUeXHOtuqJwvYo05HRBoq
yeeT5uJ61XrLR9PoJylOPyWNGClgf+VYso7Im7R5CkinNS3caykVQiaMe73nvVem
HFh66GtJyk3+rI/9F5WVrvwoqIb7NOu0uLlowS+usztpVIO9UrYYyL1KX5Jqsmet
QulSRfy8xmWhYEeLIjwmR8ScJLQFxkLGu9r7i55RvZEAzhot2C0qrxU/ZrnRlxm2
Hl+tKAwGyPJTRKQwCTFYbrLEegGbxazZtX6f1n+unvMVeGTKxQ9mZFN5RoZMlAZI
FZbr0X556pD40LWV2Dau8RbXE0CkpsWpzwhzsF2WsENNh5kSc3BTTuuPrMmJAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQU02S679/wGaHbkoMgMLATOfoQGS8wHwYDVR0j
BBgwFoAUxSfu8i7UuQNJSckePTmySmn9+YQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
Njc2NzA4NDkyNDE3NDM1NS8wL0M1MjdFRUYyMkVENEI5MDM0OTQ5QzkxRTNEMzlC
MjRBNjlGREY5ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzUyN0VFRjIyRUQ0QjkwMzQ5NDlDOTFFM0QzOUIyNEE2OUZERjk4NC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMDY3NjcwODQ5MjQxNzQzNTUvMC8zMTMwMzEyZTMx
MzkzODJlMzEzOTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNTM5MzkzMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGXGwDANBgkqhkiG9w0BAQsFAAOCAQEAMDIokPtaQxAxXjOmmqIz
sNTJYB99DFn9tZnItNHnhvBQ1BvKz3Py9Y0kmDEMnSUpoIjv2hCK7WSe6melBAWc
VOydeuEBPrwnjcbLd8TxTMJFKrhD7fnUpXDffPXSTHksqPXeCGnPRkCfO/0103jJ
ZjdFao0fGjQMC9ih8/sSmtKbbgh9Eh4o9v9pT8tff69E/FBx8BP4d9VmGmcv1gF7
uTdAYxx6Gd+Wx9UZ7qZYc6g5wLRrZnCiqU/p7VbNH67AkF0qmKf+hK8iqN0g1bX+
tFL/j4uD6xUpEK0xDchC9dUqlmtTa1efm5xC8Dtjf/vHTOCqi4VE4tLhx+ct+npp
Dw==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:44 2026 by rpki-client