
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e3139382e302f32332d3233203d3e2034383337.roa
File: 3130312e3139392e3139382e302f32332d3233203d3e2034383337.roa (raw, json)
Hash identifier: hXLIcJcy737tZrcx3ywDz4kyXv8MumdRjeEQBM2kR+k=
Subject key identifier: 5A:B1:CE:07:19:90:56:CB:4C:0C:A8:09:B0:9B:C5:34:88:D9:E7:D8
Certificate issuer: /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Certificate serial: 02CB19218D2E5FF72632F9D4837CC8D3AD9AEB20
Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e3139382e302f32332d3233203d3e2034383337.roa
Signing time: Wed 17 Jun 2026 16:12:33 +0000
ROA not before: Wed 17 Jun 2026 16:07:33 +0000
ROA not after: Wed 16 Jun 2027 16:12:33 +0000
asID: 4837
IP address blocks: 101.199.198.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 19:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:cb:19:21:8d:2e:5f:f7:26:32:f9:d4:83:7c:c8:d3:ad:9a:eb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Validity
Not Before: Jun 17 16:07:33 2026 GMT
Not After : Jun 16 16:12:33 2027 GMT
Subject: CN=5AB1CE07199056CB4C0CA809B09BC53488D9E7D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:27:96:2e:df:5b:b8:f0:90:3b:16:e2:55:
df:40:28:bd:62:f6:6b:73:7b:2a:71:30:4a:5f:15:
fb:f5:d7:92:f4:66:5b:73:98:41:77:f4:bc:3f:a6:
ed:20:68:0a:4b:13:09:7a:c6:b6:64:8c:2f:09:48:
6a:bd:70:b6:62:60:9e:7b:92:0c:e6:7a:8e:e0:0d:
e9:ce:66:68:14:86:ca:9e:8b:ac:31:65:53:bc:8e:
13:03:c6:4c:9d:f6:a2:c5:85:3b:fa:40:4b:8e:a8:
cf:34:81:02:1c:1e:64:0f:57:e1:be:33:ab:c1:9c:
d2:c2:46:74:76:7b:d3:7d:ea:53:b8:74:9e:ec:06:
37:f0:1d:70:68:a1:61:d6:1a:e1:96:0c:a1:58:f1:
41:7a:0e:b7:51:4d:b0:f9:d1:c8:6a:86:e2:b1:4a:
83:b3:43:71:8f:85:6f:fe:30:87:ec:94:57:c7:eb:
b2:ae:84:1b:82:61:48:e6:66:1a:dc:33:33:28:26:
d6:56:60:2d:9a:3e:d8:79:bd:87:7e:84:35:4b:d6:
54:84:d3:eb:c9:e8:4e:95:2a:b4:59:d5:6d:82:9a:
c5:c0:22:ab:7a:b4:64:f8:30:29:37:6f:e1:ac:f3:
95:89:b5:fc:3e:c3:d7:02:d8:48:e9:65:95:d8:3e:
12:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B1:CE:07:19:90:56:CB:4C:0C:A8:09:B0:9B:C5:34:88:D9:E7:D8
X509v3 Authority Key Identifier:
keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e3139382e302f32332d3233203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.199.198.0/23
Signature Algorithm: sha256WithRSAEncryption
05:a4:b9:4d:96:9d:3f:f7:cd:b7:4c:a5:94:7d:31:7f:f2:7a:
7c:8c:09:93:01:d4:ec:ff:82:b7:e4:fd:a8:02:cc:15:57:74:
53:0c:95:68:02:74:09:d4:79:ca:58:3b:96:e9:6f:fc:fa:83:
32:d4:c3:56:fd:a5:2f:86:b0:b3:d8:89:db:d5:b6:f0:15:84:
05:1e:d6:e2:f1:03:3a:c7:3b:5b:2b:59:fb:fe:ba:df:0d:b8:
dd:36:f0:91:b7:08:28:6b:85:3d:4e:15:1e:98:b8:25:21:c3:
04:94:01:e2:f1:fc:a1:f3:e3:42:30:25:25:67:1a:7c:37:e2:
50:cc:b1:1f:1c:b0:ee:6a:91:92:a0:91:9c:c1:36:c2:d1:ef:
2a:f4:e9:2a:73:88:47:6c:6b:51:50:23:2b:de:6f:df:98:f2:
57:22:49:ef:2d:3a:7c:af:5e:c8:40:68:9d:91:7e:33:54:71:
30:0d:35:02:d3:f7:c8:19:4c:45:cb:b6:80:ae:5a:38:95:64:
eb:3d:8d:c5:f1:2c:85:75:5f:53:ad:56:cc:58:bc:df:d4:b6:
d5:59:60:b1:dc:a2:f5:07:b4:ba:eb:18:39:d8:14:91:5c:eb:
d5:63:8e:64:a5:dd:05:b0:7b:12:4f:7e:a6:52:2f:9e:34:2e:
e9:b1:03:88
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:10 2026 by rpki-client