
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e3132392e302f32342d3234203d3e2034383038.roa
File: 3130312e3139392e3132392e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier: vu1iNt+ZbIE8Ax1RaAhzHIosPltzEJR3LX+/VO1Jfpc=
Subject key identifier: FA:24:61:36:0C:FF:92:4D:75:2B:14:41:BC:94:24:D9:F2:41:9F:5B
Certificate issuer: /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Certificate serial: 7C30F6D7C94FA317BE070C1AC3A2F029EC7899E1
Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e3132392e302f32342d3234203d3e2034383038.roa
Signing time: Tue 02 Jun 2026 16:11:39 +0000
ROA not before: Tue 02 Jun 2026 16:06:39 +0000
ROA not after: Tue 01 Jun 2027 16:11:39 +0000
asID: 4808
IP address blocks: 101.199.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:30:f6:d7:c9:4f:a3:17:be:07:0c:1a:c3:a2:f0:29:ec:78:99:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Validity
Not Before: Jun 2 16:06:39 2026 GMT
Not After : Jun 1 16:11:39 2027 GMT
Subject: CN=FA2461360CFF924D752B1441BC9424D9F2419F5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d2:73:62:39:25:4c:98:28:4d:e1:3b:91:42:
67:03:dc:38:fd:85:1c:e7:c1:57:ac:82:12:3b:96:
0a:91:ff:39:62:d1:59:dc:e5:a2:8e:17:59:97:1f:
2f:39:7f:da:ae:a1:8c:af:d1:f9:d8:41:b6:da:7b:
9e:03:74:b2:c0:76:2f:20:91:51:25:cb:ea:dc:c1:
2e:13:73:72:8d:79:c8:2a:9d:f8:f5:28:9d:97:f4:
ee:fd:24:58:dc:21:f8:5c:00:88:31:24:72:f2:12:
40:2b:c5:34:4a:71:11:f6:c5:96:1c:d2:13:d2:4e:
68:8a:12:a0:10:d9:5a:aa:f3:69:a5:a4:cb:7d:09:
20:15:0c:10:6b:fb:98:3b:86:e8:45:75:1e:10:e1:
67:83:c5:71:ce:86:1f:25:dc:97:e1:67:25:15:f5:
31:93:8f:5b:31:aa:d1:1c:e7:c7:46:29:4c:5c:06:
47:f0:6d:f2:e4:e5:67:c1:92:e7:c4:2f:0b:71:c6:
7e:e7:08:8b:b5:71:25:0a:78:d6:a9:19:b2:db:00:
cd:a3:60:6d:b6:08:4e:65:7a:5b:f3:43:41:ea:fa:
2c:41:49:39:47:5f:5f:36:4c:16:cf:b4:64:4a:a9:
49:6a:1f:2b:85:d1:79:63:76:21:df:e4:1d:1e:36:
e7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:24:61:36:0C:FF:92:4D:75:2B:14:41:BC:94:24:D9:F2:41:9F:5B
X509v3 Authority Key Identifier:
keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e3132392e302f32342d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.199.129.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:8a:eb:ba:22:d0:37:05:b8:8f:6c:b3:32:f6:a8:15:1d:e3:
c1:da:eb:fd:12:da:18:31:92:86:66:13:0e:3a:24:17:06:f3:
3f:68:f9:31:c8:ac:e4:53:c9:a4:29:b4:88:d1:23:07:b7:9a:
e7:d9:57:93:76:db:22:ac:fd:39:26:cf:f4:20:6f:a6:8f:8c:
ec:1e:43:6c:70:d5:15:e6:ae:de:70:e7:c3:d4:4f:9d:53:1c:
c0:0e:ec:be:72:45:5a:f4:31:05:5b:22:43:5d:6f:48:0f:c1:
94:8c:bc:f1:d1:6c:d6:3c:1a:02:a6:5b:09:a8:60:94:f3:d0:
94:a8:df:62:2b:dc:61:26:9a:e1:d1:e3:b0:65:16:ab:8c:3d:
e6:dd:69:42:11:c5:59:1d:b1:18:58:89:9a:63:ab:5c:17:39:
bf:08:f7:e1:8c:24:8a:91:a0:fd:2d:f2:fb:48:76:70:8f:ea:
04:9f:fb:a8:92:d4:12:2f:f7:c6:11:22:5e:b5:2a:d3:0f:21:
2b:a6:fc:81:76:81:d4:e8:7f:02:66:0e:a2:3c:1e:01:ac:61:
59:f4:54:bc:b3:45:f5:5c:3f:50:b5:5e:eb:5a:e2:cb:30:02:
7f:7d:5d:17:3e:42:2e:fb:20:49:25:1c:43:59:8c:d1:dd:f4:
9b:4f:34:e7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:11 2026 by rpki-client