
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e3132382e302f32342d3234203d3e2034383038.roa
File: 3130312e3139392e3132382e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier: 8EhkML7yzSAo4Otqe1dSqfh96e+xLJk4ybJKhG0AZmw=
Subject key identifier: E1:C2:63:12:C6:41:8F:39:55:32:88:A3:22:BC:1E:DD:CD:BB:62:0D
Certificate issuer: /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Certificate serial: 6F649B32797EB9D78F89A174CBDF56F08104D5B0
Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e3132382e302f32342d3234203d3e2034383038.roa
Signing time: Tue 02 Jun 2026 16:11:40 +0000
ROA not before: Tue 02 Jun 2026 16:06:40 +0000
ROA not after: Tue 01 Jun 2027 16:11:40 +0000
asID: 4808
IP address blocks: 101.199.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:64:9b:32:79:7e:b9:d7:8f:89:a1:74:cb:df:56:f0:81:04:d5:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Validity
Not Before: Jun 2 16:06:40 2026 GMT
Not After : Jun 1 16:11:40 2027 GMT
Subject: CN=E1C26312C6418F39553288A322BC1EDDCDBB620D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2a:27:e6:20:ba:bf:75:8a:2b:d2:3c:79:aa:
b2:e9:4e:86:f9:ec:c8:63:78:f5:7a:f3:34:89:d7:
77:b2:2f:ea:ab:25:5a:a3:13:b4:9e:bb:6b:4f:2d:
e8:e3:97:2c:51:80:c4:bf:68:cf:31:cb:da:e8:d7:
4b:d6:5e:8d:f7:9a:8f:7c:1f:c9:46:4b:12:21:c4:
d6:fa:13:2c:ad:84:a4:cc:92:65:72:f2:38:4b:d6:
5e:56:c0:d0:09:e0:d1:72:53:ed:9f:88:42:51:77:
93:8d:b2:87:37:57:1f:3d:75:80:7f:43:f1:3a:7a:
52:c4:0d:83:ae:8c:a5:6a:a9:33:58:9e:35:01:17:
68:14:2c:e9:d5:41:84:28:85:52:ce:b9:60:3c:99:
ea:73:5c:d8:3d:71:55:3a:6a:96:48:54:0c:cd:0f:
12:6b:bc:77:1f:c1:12:64:f7:4c:68:14:fe:cc:9b:
ef:15:35:8c:e4:50:ac:2b:b3:00:87:38:fa:12:c5:
a7:ab:b8:e4:54:da:5d:22:d7:32:87:ee:01:f1:1d:
91:98:92:0e:0b:f5:30:37:de:b9:d4:bc:fe:6c:7a:
ff:29:ab:c2:9b:cd:4b:c4:0e:17:30:b9:01:78:4d:
f3:2d:3c:37:c1:d7:bb:13:50:a0:58:91:fe:6f:e0:
cc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C2:63:12:C6:41:8F:39:55:32:88:A3:22:BC:1E:DD:CD:BB:62:0D
X509v3 Authority Key Identifier:
keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e3132382e302f32342d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.199.128.0/24
Signature Algorithm: sha256WithRSAEncryption
35:37:16:1c:e1:f6:02:7d:6e:c7:19:ab:9a:bc:a0:f9:bf:60:
5b:fd:bb:05:03:07:c4:93:72:46:f7:1e:15:d0:40:ab:0a:e0:
1d:fb:66:51:71:5e:df:ff:7a:30:38:cc:b6:f2:86:cf:18:fa:
c7:c9:03:f1:08:96:5a:96:f8:6e:ef:9e:92:d5:49:bb:b0:81:
c8:3b:6b:99:c0:19:0c:05:48:ea:eb:54:d8:9b:16:f3:8e:bc:
7e:c3:75:52:bf:fc:3d:b0:fd:71:22:bf:30:5c:b7:1b:55:a2:
17:5e:78:f3:4c:d4:54:44:73:0b:e2:8c:bc:99:b6:c9:be:74:
d6:44:a5:5f:6d:28:5c:fc:3e:a0:48:67:2a:25:3a:36:bb:f3:
ac:27:aa:2a:18:35:2b:4d:d7:47:03:05:97:c3:46:e4:e7:f1:
3e:b6:e0:fa:2c:24:22:84:3f:b6:61:37:ad:69:87:28:67:02:
4a:0a:5a:c8:fb:d6:92:0e:d1:50:76:a0:84:c3:59:66:cd:9d:
ca:b3:a1:51:d5:02:17:39:56:f3:be:49:55:aa:67:46:cf:26:
25:73:08:26:12:6f:28:e7:0d:55:c2:ab:52:14:22:2f:80:aa:
44:9e:2c:ed:c8:19:60:ac:01:fc:20:ef:95:82:f7:1d:81:43:
cc:f7:22:c5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:11 2026 by rpki-client