
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e332e302f32342d3234203d3e203233373234.roa
File: 3130312e3139382e332e302f32342d3234203d3e203233373234.roa (raw, json)
Hash identifier: ZpWUyrhrm00WMdHwUYMCArdQHBDWw8grrK9mX3s+XA8=
Subject key identifier: A2:F8:1E:04:30:A8:A8:1B:A6:DA:A3:02:52:13:CC:8D:58:92:47:2C
Certificate issuer: /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Certificate serial: 7655AF35E0D7683C6E5FAAC6DF02D979495EC02D
Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e332e302f32342d3234203d3e203233373234.roa
Signing time: Thu 21 May 2026 16:09:56 +0000
ROA not before: Thu 21 May 2026 16:04:56 +0000
ROA not after: Thu 20 May 2027 16:09:56 +0000
asID: 23724
IP address blocks: 101.198.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:38:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:55:af:35:e0:d7:68:3c:6e:5f:aa:c6:df:02:d9:79:49:5e:c0:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Validity
Not Before: May 21 16:04:56 2026 GMT
Not After : May 20 16:09:56 2027 GMT
Subject: CN=A2F81E0430A8A81BA6DAA3025213CC8D5892472C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:64:5d:d4:11:a2:49:c2:22:69:0a:91:c2:a4:
1b:b6:7c:78:51:f4:ff:2b:a7:68:64:2b:3c:84:f0:
19:9b:0e:68:0b:17:12:5e:a2:e3:fd:13:2b:47:f0:
0c:a4:79:aa:27:73:78:25:1d:4c:db:be:4c:a5:a3:
db:0a:a7:b3:34:9b:24:d4:dd:81:f4:e6:14:6e:59:
5a:20:4f:a7:1a:ed:46:23:8c:66:78:60:f9:ba:23:
3c:56:b4:af:50:d7:02:f4:e0:42:20:b4:dc:f6:fd:
7a:6c:f2:e8:bb:a5:19:90:e5:9b:0e:50:2a:ed:68:
9f:21:5b:eb:e9:f0:8e:8c:9f:0f:0b:39:31:11:8b:
14:cf:0b:3c:f6:b7:38:c5:b2:6e:62:43:06:18:3b:
18:2b:3e:42:e0:6b:8c:d1:76:0a:b7:90:f9:17:49:
93:80:7c:d3:99:2f:08:01:d5:b0:61:32:88:40:7a:
67:dd:9a:d0:ca:a1:65:09:e3:a6:ac:84:b4:f1:e3:
a8:8d:bf:97:91:82:71:73:0e:23:6f:3f:c0:67:1a:
f0:8a:8c:3b:0e:21:a2:50:46:1e:6e:46:af:be:ce:
18:d0:6f:bf:e5:1a:27:54:e9:d4:a7:b7:fe:3a:1b:
87:be:af:4a:a5:04:38:48:ac:09:c1:52:d2:7d:f6:
ac:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F8:1E:04:30:A8:A8:1B:A6:DA:A3:02:52:13:CC:8D:58:92:47:2C
X509v3 Authority Key Identifier:
keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e332e302f32342d3234203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.198.3.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:6d:7d:a7:86:02:29:ff:8e:c8:47:24:c9:1e:13:e4:4b:b1:
fa:12:37:f8:5a:4e:47:7b:1c:37:8d:22:94:70:f0:e2:9c:e0:
68:b9:97:8d:a3:36:19:38:c1:3d:ab:ec:64:1f:d9:2c:6f:90:
f1:1d:4f:68:05:05:20:1b:7e:36:49:9e:14:8f:a3:d6:4d:0d:
d5:09:22:bc:13:f3:3c:e0:52:33:ed:94:2c:5b:0b:74:87:d6:
06:45:5c:4b:a3:7e:c5:a8:e6:df:04:b2:95:ff:2d:a7:0a:1f:
2a:2f:55:ae:3d:4d:04:02:0a:21:fa:d4:5e:93:6a:25:5c:df:
0a:a4:f3:47:f5:9c:c4:80:cd:f0:af:c5:82:fb:42:82:58:20:
e8:22:fb:75:68:b5:b0:51:74:ed:27:d0:81:71:69:89:2a:52:
95:ec:57:27:78:7e:07:c1:75:7c:27:84:88:7e:95:25:8b:54:
56:c7:62:e9:01:35:43:4c:6a:fd:5c:ca:f2:5d:70:4f:a6:46:
af:c1:a0:d3:32:b9:7d:4e:f4:91:ac:ab:94:0d:e2:5d:7f:18:
9c:e5:ea:ef:39:cd:03:16:8f:ec:84:91:ae:f5:ba:e9:16:f7:
18:7a:70:49:6c:cb:27:be:4d:5d:39:9b:2c:84:dc:2d:08:0b:
d2:55:a4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:59 2026 by rpki-client