
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e3235322e302f32342d3234203d3e2034383038.roa
File: 3130312e3139392e3235322e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier: qkpXuB3ObAmsS0MDXmhY8WRgGSD85ciV076Rhsykp/k=
Subject key identifier: 7B:C1:15:A3:40:1E:4D:3F:13:9A:91:8F:0F:61:E8:3C:8B:79:02:06
Certificate issuer: /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Certificate serial: 12BD096353952F47A54FC7BA2202F7A97E709D4A
Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e3235322e302f32342d3234203d3e2034383038.roa
Signing time: Tue 02 Jun 2026 16:11:39 +0000
ROA not before: Tue 02 Jun 2026 16:06:39 +0000
ROA not after: Tue 01 Jun 2027 16:11:39 +0000
asID: 4808
IP address blocks: 101.199.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:bd:09:63:53:95:2f:47:a5:4f:c7:ba:22:02:f7:a9:7e:70:9d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Validity
Not Before: Jun 2 16:06:39 2026 GMT
Not After : Jun 1 16:11:39 2027 GMT
Subject: CN=7BC115A3401E4D3F139A918F0F61E83C8B790206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:80:98:ee:ff:9a:64:1e:ea:bf:83:42:b8:e2:
00:db:70:2b:f6:8f:d4:9f:24:b5:f4:40:df:54:54:
b9:9a:81:00:7f:ad:ab:e4:79:0d:90:85:d6:d1:11:
f6:d6:a1:0d:19:80:d9:54:61:ba:09:bd:66:a6:31:
1f:25:4f:6f:c5:6b:18:df:02:67:9c:f6:16:6a:ea:
dd:be:10:5f:f1:b9:fb:16:7c:05:d0:df:ed:f6:a1:
a0:90:e9:26:ba:8b:bd:ee:31:6c:b3:ba:21:c8:47:
99:b0:2b:db:78:d0:90:eb:cf:bf:b4:32:37:bd:22:
ce:d6:fe:48:8a:d9:a6:5f:b6:5b:8a:1e:78:3d:e6:
4b:56:1d:b2:fa:d9:a9:5e:7b:24:55:7c:23:40:60:
a6:55:2b:ed:8b:b2:a9:0d:d9:fd:70:f8:8a:54:02:
34:84:cd:50:60:a2:a1:85:65:08:55:c7:3b:20:13:
4c:c4:cb:ef:53:d5:1d:8e:fb:cb:4a:5f:47:b4:fa:
0c:1d:0d:99:6f:5a:96:c8:73:d4:ef:53:54:dc:dc:
16:f4:51:98:cd:81:52:53:67:02:f1:a0:c7:ff:cb:
d5:3b:b9:82:e2:71:70:fa:f5:29:b2:18:76:24:73:
5d:17:7f:b3:bd:64:5e:06:fd:06:b0:ca:b8:36:62:
97:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C1:15:A3:40:1E:4D:3F:13:9A:91:8F:0F:61:E8:3C:8B:79:02:06
X509v3 Authority Key Identifier:
keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e3235322e302f32342d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.199.252.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:ba:b3:89:c2:b8:42:f1:b2:9f:d9:30:f2:36:6a:54:67:48:
35:9f:2d:4a:f6:3e:d6:e9:25:20:37:6e:86:49:f3:6a:42:69:
09:09:de:f5:15:01:c0:05:0d:5d:5a:3b:88:1d:66:10:0b:35:
b8:cf:c6:c4:a8:b3:61:41:96:91:6b:cd:c5:65:20:5c:71:df:
60:a4:38:bb:d5:a8:67:17:f7:c6:79:d8:63:f9:6f:10:b3:1a:
ba:2a:78:4b:d2:0b:1d:37:8c:26:13:86:1f:ba:40:88:44:3c:
07:dd:57:ec:29:3b:f7:86:05:1e:c2:6c:ae:8a:c0:93:3c:4d:
df:b9:24:46:c9:c4:6f:fb:71:bb:4b:77:7f:4d:c9:9a:1f:8e:
f5:91:39:13:3c:36:8e:cf:15:ae:eb:1c:f6:66:8b:df:be:48:
04:ec:ed:d6:9e:48:46:b9:d2:0e:98:c6:df:fc:a9:04:38:df:
5a:7f:61:e3:bc:55:89:7a:2f:0c:3d:7e:71:5a:c4:73:0c:1d:
aa:c9:81:b5:6b:85:8b:8a:d7:a5:28:c0:35:99:7e:70:5a:1e:
70:5c:fa:e0:05:36:7e:97:e7:c5:71:80:11:64:24:7e:82:75:
3e:45:f6:0e:50:e0:74:cd:74:41:9e:45:83:f8:c1:32:1e:26:
10:87:de:66
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:25 2026 by rpki-client