
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3139362e302f32342d3234203d3e203535393932.roa
File: 3130312e3139382e3139362e302f32342d3234203d3e203535393932.roa (raw, json)
Hash identifier: VohxkKOhVkXH0Jn9uu32ZUBbqjXOmzSD/8VxMh1ApP8=
Subject key identifier: 6C:56:13:38:D1:D6:AB:D8:D7:9F:C5:D5:15:0A:AC:56:8C:EA:D8:41
Certificate issuer: /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Certificate serial: 1236740CB48473517C6F2923AD4631373AD3B2E0
Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3139362e302f32342d3234203d3e203535393932.roa
Signing time: Wed 17 Jun 2026 16:10:38 +0000
ROA not before: Wed 17 Jun 2026 16:05:38 +0000
ROA not after: Wed 16 Jun 2027 16:10:38 +0000
asID: 55992
IP address blocks: 101.198.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 19:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:36:74:0c:b4:84:73:51:7c:6f:29:23:ad:46:31:37:3a:d3:b2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Validity
Not Before: Jun 17 16:05:38 2026 GMT
Not After : Jun 16 16:10:38 2027 GMT
Subject: CN=6C561338D1D6ABD8D79FC5D5150AAC568CEAD841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:39:4f:31:11:e7:79:68:e6:6a:af:a9:ee:86:
6b:c0:ed:2b:7a:01:70:d8:dd:d3:19:0f:e9:f0:2c:
b4:48:f0:ea:37:88:30:e5:19:16:ea:2d:fc:64:7a:
f5:bf:e0:52:fd:56:b0:a3:36:10:86:dc:5f:93:cb:
44:ea:b8:23:dd:fb:34:30:00:3e:45:43:e8:94:7f:
9f:de:ea:40:9d:eb:12:f3:c2:ee:1c:f3:c2:77:d7:
1f:a5:4a:f9:4b:99:2e:2c:07:5b:ea:cc:33:e7:dd:
25:d4:99:bb:86:f6:e1:46:73:12:ad:ba:c2:7d:c2:
ea:d3:47:0a:0c:d2:ab:05:d4:b2:0a:f0:bd:d0:c9:
0f:a5:4d:92:c8:34:21:24:b5:0d:f8:db:98:44:c5:
99:79:8e:02:c3:90:61:57:87:a3:dc:64:2a:8d:b8:
e5:12:8e:f9:ba:f1:78:e6:ca:47:87:b0:67:43:11:
51:bd:dd:55:fa:4b:23:c2:ba:6d:e1:a9:ca:0a:28:
4c:86:07:7e:fc:75:f8:9b:2f:17:40:2a:46:2e:f6:
30:f9:ad:b8:ad:61:49:e6:d5:b1:66:48:d8:5b:d3:
bb:a5:b5:81:d1:4e:de:3a:87:03:f6:d7:0d:12:1f:
40:c9:f3:23:73:fb:7f:5d:8e:67:0e:2a:6e:fc:0d:
67:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:56:13:38:D1:D6:AB:D8:D7:9F:C5:D5:15:0A:AC:56:8C:EA:D8:41
X509v3 Authority Key Identifier:
keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3139362e302f32342d3234203d3e203535393932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.198.196.0/24
Signature Algorithm: sha256WithRSAEncryption
98:67:10:5e:ba:ad:77:a4:58:33:3e:24:01:6e:1a:8c:dc:22:
c9:71:b8:91:7f:c3:3c:a9:bf:2a:e6:e0:20:6a:b3:cf:e0:fd:
8f:2b:3d:a5:b2:a9:91:9e:b6:bd:6a:cd:dc:7d:f3:7a:60:88:
fa:86:69:a4:4f:97:83:56:3b:f2:0d:7a:5d:7f:83:79:6e:35:
9b:f8:ae:ad:4f:47:9f:0e:dc:a3:70:26:91:b9:f2:89:2f:46:
a7:ed:cc:f7:6c:f3:34:73:48:46:1e:29:fc:7c:cb:a7:f2:d7:
a5:61:80:ba:ae:29:8e:77:5c:de:1e:4d:ab:66:25:d4:b7:8c:
b9:14:51:5c:86:7e:9b:a0:44:13:a7:7c:a3:ce:7d:3b:c7:89:
ec:58:d7:31:c1:9b:95:4c:8b:a4:ae:60:d2:71:a2:59:12:73:
67:50:f8:36:fb:c4:79:60:1e:4f:f5:bd:51:84:10:b6:b1:20:
b2:21:2b:0e:c9:af:59:4f:72:4e:68:b3:99:0a:db:7a:f7:64:
ba:b5:ce:60:c7:9a:cb:be:99:b2:56:50:6b:40:5d:5b:a7:a8:
9d:4a:1e:53:41:df:43:e2:13:84:8f:56:c9:5d:91:39:a7:ef:
aa:4e:1c:9f:ce:9d:2d:90:26:dd:33:ce:12:e5:30:79:b2:3f:
b3:02:1d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 21:56:45 2026 by rpki-client