
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3139342e302f32342d3234203d3e203535393932.roa
File: 3130312e3139382e3139342e302f32342d3234203d3e203535393932.roa (raw, json)
Hash identifier: HEMTZ/imYKDaHDukP4qMnt19VtpfkK3Uezh2m4lX6RE=
Subject key identifier: E4:0F:1C:38:1C:16:43:80:11:FB:B4:19:54:B0:57:29:D5:92:13:7F
Certificate issuer: /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Certificate serial: 259CA09BC7442AB15D68CB5EF2DCAC9DC9DA31A4
Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3139342e302f32342d3234203d3e203535393932.roa
Signing time: Wed 17 Jun 2026 16:25:10 +0000
ROA not before: Wed 17 Jun 2026 16:20:10 +0000
ROA not after: Wed 16 Jun 2027 16:25:10 +0000
asID: 55992
IP address blocks: 101.198.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 19:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:9c:a0:9b:c7:44:2a:b1:5d:68:cb:5e:f2:dc:ac:9d:c9:da:31:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Validity
Not Before: Jun 17 16:20:10 2026 GMT
Not After : Jun 16 16:25:10 2027 GMT
Subject: CN=E40F1C381C16438011FBB41954B05729D592137F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:ca:27:7a:2d:ae:39:c3:71:3f:c8:64:90:
23:38:35:aa:58:18:91:77:8f:20:ef:0e:ec:ac:2f:
f1:ae:76:6f:66:b7:bc:9f:e8:49:3c:10:cc:3f:b9:
3d:ee:b5:bf:ab:b8:bf:01:b9:f3:b9:7d:f8:cb:18:
d4:1c:de:18:3f:9d:9c:47:c3:18:78:82:29:40:98:
dc:e9:eb:51:70:c8:0b:bd:56:44:dc:41:e7:90:1f:
17:6a:c7:65:b5:fe:45:85:0b:b9:ac:73:8e:15:a9:
f0:b4:4d:52:ee:17:8a:3f:12:f4:85:8c:2b:c4:0e:
3f:a0:e8:81:20:73:64:26:bc:3c:14:96:50:54:c8:
35:77:cc:e3:14:ce:13:fa:ff:66:40:2d:e4:49:d2:
f7:c4:65:81:44:b5:61:22:c0:49:5f:90:70:7d:e4:
ba:0e:99:1f:31:05:58:59:5c:26:50:fe:53:63:16:
a5:ff:4e:b5:9e:22:21:c6:a8:6d:6e:fa:7e:4e:46:
4d:af:e7:3f:cf:7f:c3:ea:70:6d:2c:c0:2c:0a:a8:
83:e8:75:6e:c9:69:8c:e4:06:e8:a7:60:1b:89:f1:
8c:9a:c6:c2:77:b7:9a:75:cb:32:53:45:b5:44:ab:
a8:05:fb:9e:b9:bf:a5:84:56:7f:f6:0e:68:00:35:
5e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0F:1C:38:1C:16:43:80:11:FB:B4:19:54:B0:57:29:D5:92:13:7F
X509v3 Authority Key Identifier:
keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3139342e302f32342d3234203d3e203535393932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.198.194.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:05:7e:1a:18:71:27:e4:81:93:9f:d5:61:ee:5e:c8:e6:57:
14:43:43:39:06:df:f7:af:f7:70:b3:77:c3:12:a4:67:28:50:
a5:46:27:5d:89:04:71:8d:2c:27:5d:e1:06:54:61:10:61:63:
79:5b:a0:36:70:94:8a:c1:97:64:ee:66:9f:e3:22:98:e5:f2:
af:6a:86:0c:b5:5f:93:bf:f9:ed:e2:c2:6d:d4:cb:c5:c8:8b:
10:6b:0e:5f:2e:d6:21:ba:1e:4d:b7:86:48:d0:38:39:98:7b:
94:57:e1:9f:60:b0:2a:4d:b8:75:4e:59:be:93:74:32:4b:ca:
d4:ec:93:a8:75:c3:98:ce:0c:c4:a7:59:6b:12:26:11:ba:82:
62:68:1b:0c:68:78:96:0c:1d:fb:eb:a5:db:3b:01:e1:b3:fa:
48:15:81:d8:31:3f:f6:e6:09:f2:e0:8c:e2:f7:00:a3:7a:12:
5f:6f:a1:1a:12:9c:74:67:d5:4b:9b:d0:08:d9:6c:55:bc:6f:
d5:23:63:f3:ec:b2:c2:c6:df:f1:7e:b7:1a:93:bf:e6:45:ad:
9c:39:01:20:93:1a:23:44:15:31:b2:2e:a2:3f:5c:e6:f7:eb:
47:c5:a5:92:5b:c3:b1:58:c8:ef:77:1f:d0:da:32:4c:6b:15:
78:2f:df:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 21:56:30 2026 by rpki-client