
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e3235332e302f32342d3234203d3e2034383038.roa
File: 3130312e3139392e3235332e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier: 16MiGpCSDIiz9xXR/I2Dvtn/+/EmEZ2e8EJ+7bOhnqU=
Subject key identifier: 15:03:01:65:5D:1C:5B:EC:43:3F:2F:4E:9D:98:80:EF:7E:BE:AC:77
Certificate issuer: /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Certificate serial: 09F44AA22DB03F60B5E3EC327941DCE1B2C0C3FA
Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e3235332e302f32342d3234203d3e2034383038.roa
Signing time: Tue 02 Jun 2026 16:11:40 +0000
ROA not before: Tue 02 Jun 2026 16:06:40 +0000
ROA not after: Tue 01 Jun 2027 16:11:40 +0000
asID: 4808
IP address blocks: 101.199.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:f4:4a:a2:2d:b0:3f:60:b5:e3:ec:32:79:41:dc:e1:b2:c0:c3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Validity
Not Before: Jun 2 16:06:40 2026 GMT
Not After : Jun 1 16:11:40 2027 GMT
Subject: CN=150301655D1C5BEC433F2F4E9D9880EF7EBEAC77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:71:bd:fe:73:42:a9:54:13:90:03:87:af:13:
0a:3b:28:f7:f3:e3:b6:dc:73:b2:58:ed:04:bc:3e:
ea:e6:05:25:45:ad:ad:04:4c:73:ae:1e:a8:a0:4a:
f6:6e:fe:48:23:1c:f0:58:67:51:e8:c0:41:38:f4:
7e:8f:b3:21:e9:9d:ee:bc:38:36:e5:a7:9a:e8:79:
3f:1e:64:b8:31:7f:c8:bf:5b:f0:d3:da:54:4c:12:
c3:94:f4:a9:f8:42:ad:0d:5a:a1:68:ca:b2:75:54:
d4:53:3d:a9:70:ef:c1:b2:6e:70:88:a2:a1:95:b5:
bb:64:e3:90:fb:3c:d9:0a:2a:ef:40:5f:12:b8:4c:
49:1c:01:76:25:7f:d9:24:4e:ea:e7:b3:00:86:d5:
2a:f2:5c:af:cf:12:51:1a:ed:62:29:00:3c:2c:e2:
92:5e:d7:98:1d:2a:42:cb:4e:b9:7d:06:1a:19:a8:
ad:30:15:dc:cd:0d:d1:14:1f:fd:18:f1:be:19:7a:
8a:6e:9a:7a:80:34:12:07:a9:f2:95:e5:fa:0c:27:
fa:f2:85:8c:c2:72:44:6d:13:3d:b6:d2:db:d9:e6:
8a:f6:47:47:90:f4:69:c7:83:9c:a8:fc:32:9c:e1:
e8:43:40:b6:ae:b9:2f:9a:7c:3a:ae:76:e5:25:63:
3f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:03:01:65:5D:1C:5B:EC:43:3F:2F:4E:9D:98:80:EF:7E:BE:AC:77
X509v3 Authority Key Identifier:
keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e3235332e302f32342d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.199.253.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:85:da:d7:e5:03:0d:16:f0:2d:d5:1c:15:2b:31:3b:47:aa:
0c:49:4b:f3:ad:2f:89:69:5d:11:dc:f8:36:6e:52:b9:6b:44:
b7:ab:3a:d2:30:16:b6:e1:dd:87:f2:2c:d0:f0:b0:9f:31:cd:
7a:58:f7:be:2e:54:03:29:d0:ab:9a:4f:66:3d:13:8c:3a:d0:
09:e6:38:b0:8c:0c:8e:4c:d4:45:a0:74:0b:41:e3:e7:75:08:
9a:5f:70:24:8a:4e:14:d6:00:ab:1d:51:84:13:d3:a5:80:4b:
d1:42:28:6d:05:3a:fc:e7:db:c3:06:b7:01:6a:85:36:13:ea:
f2:9d:78:e4:3e:de:e3:d0:35:84:bc:ba:e3:e9:5e:9e:64:bb:
fb:6a:cd:07:ea:44:2a:f6:26:82:48:6c:ee:e7:4f:7a:61:0f:
c0:97:eb:c8:0c:dd:8c:d6:c7:a3:a2:0f:2a:59:76:db:88:eb:
25:d6:d8:72:08:e0:19:1a:04:67:17:bb:77:4f:48:d3:80:6a:
22:0a:17:b9:dd:f4:e0:35:8e:ff:2c:bd:89:84:71:1d:7a:cf:
a8:99:31:bf:0a:c0:47:7a:1f:16:98:23:d6:2e:72:92:1e:c1:
70:dc:ef:7b:07:7e:fb:d9:11:b3:77:0e:b6:87:f8:56:d6:e1:
54:bd:9a:bf
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUCfRKoi2wP2C14+wyeUHc4bLAw/owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUyN0VFRjIyRUQ0QjkwMzQ5NDlDOTFFM0QzOUIyNEE2
OUZERjk4NDAeFw0yNjA2MDIxNjA2NDBaFw0yNzA2MDExNjExNDBaMDMxMTAvBgNV
BAMTKDE1MDMwMTY1NUQxQzVCRUM0MzNGMkY0RTlEOTg4MEVGN0VCRUFDNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbcb3+c0KpVBOQA4evEwo7KPfz
47bcc7JY7QS8PurmBSVFra0ETHOuHqigSvZu/kgjHPBYZ1HowEE49H6PsyHpne68
ODblp5roeT8eZLgxf8i/W/DT2lRMEsOU9Kn4Qq0NWqFoyrJ1VNRTPalw78GybnCI
oqGVtbtk45D7PNkKKu9AXxK4TEkcAXYlf9kkTurnswCG1SryXK/PElEa7WIpADws
4pJe15gdKkLLTrl9BhoZqK0wFdzNDdEUH/0Y8b4ZeopumnqANBIHqfKV5foMJ/ry
hYzCckRtEz220tvZ5or2R0eQ9GnHg5yo/DKc4ehDQLauuS+afDquduUlYz9rAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUFQMBZV0cW+xDPy9OnZiA736+rHcwHwYDVR0j
BBgwFoAUxSfu8i7UuQNJSckePTmySmn9+YQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
Njc2NzA4NDkyNDE3NDM1NS8wL0M1MjdFRUYyMkVENEI5MDM0OTQ5QzkxRTNEMzlC
MjRBNjlGREY5ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzUyN0VFRjIyRUQ0QjkwMzQ5NDlDOTFFM0QzOUIyNEE2OUZERjk4NC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwNjc2NzA4NDkyNDE3NDM1NS8wLzMxMzAzMTJlMzEz
OTM5MmUzMjM1MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzAzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGXH/TANBgkqhkiG9w0BAQsFAAOCAQEAHYXa1+UDDRbwLdUcFSsxO0eq
DElL860viWldEdz4Nm5SuWtEt6s60jAWtuHdh/Is0PCwnzHNelj3vi5UAynQq5pP
Zj0TjDrQCeY4sIwMjkzURaB0C0Hj53UIml9wJIpOFNYAqx1RhBPTpYBL0UIobQU6
/Ofbwwa3AWqFNhPq8p145D7e49A1hLy64+lenmS7+2rNB+pEKvYmgkhs7udPemEP
wJfryAzdjNbHo6IPKll224jrJdbYcgjgGRoEZxe7d09I04BqIgoXud304DWO/yy9
iYRxHXrPqJkxvwrAR3ofFpgj1i5ykh7BcNzvewd++9kRs3cOtof4VtbhVL2avw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:23 2026 by rpki-client