
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e3235352e302f32342d3234203d3e2034383038.roa
File: 3130312e3139392e3235352e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier: oy20RE6AX00LsUCI48Ffykt12MYk6Glg4X8rSKWnH6k=
Subject key identifier: 79:3E:51:BF:BC:2A:9B:CE:D1:8A:BF:58:19:95:F5:60:77:50:FD:D7
Certificate issuer: /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Certificate serial: 4556612A4C2815EA62C0080E2999E1A3D0A2D39B
Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e3235352e302f32342d3234203d3e2034383038.roa
Signing time: Tue 02 Jun 2026 16:11:40 +0000
ROA not before: Tue 02 Jun 2026 16:06:40 +0000
ROA not after: Tue 01 Jun 2027 16:11:40 +0000
asID: 4808
IP address blocks: 101.199.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:56:61:2a:4c:28:15:ea:62:c0:08:0e:29:99:e1:a3:d0:a2:d3:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Validity
Not Before: Jun 2 16:06:40 2026 GMT
Not After : Jun 1 16:11:40 2027 GMT
Subject: CN=793E51BFBC2A9BCED18ABF581995F5607750FDD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:87:df:87:f8:a8:91:35:09:5e:36:b8:f5:43:
05:f9:dc:53:c9:0e:1b:fa:aa:92:e4:6c:45:77:ef:
a1:de:77:34:0e:f5:27:18:ac:3d:46:af:37:d2:ff:
75:3f:bb:35:9c:57:ae:57:ac:e0:16:3f:d9:43:aa:
81:41:f9:e1:a1:7d:5a:be:df:9c:ba:4e:74:7e:ed:
a7:38:e5:26:13:b6:2f:50:9f:21:64:86:39:e8:c5:
63:7a:25:bf:d9:8a:dd:81:ea:f3:4f:69:e6:21:52:
a2:37:26:d5:d6:6c:3b:da:6b:9e:8e:91:e0:5d:21:
c1:4c:bc:5f:9e:29:41:16:07:9d:ef:d5:a5:d4:a8:
e3:43:dc:4d:f5:01:82:74:d0:1b:59:18:03:a3:79:
94:b1:61:61:17:c7:9e:4d:5d:b2:6d:7c:53:db:f8:
df:1d:99:88:c4:94:9e:6d:5a:ee:e7:db:43:a6:0b:
84:07:c2:c2:21:e7:1c:92:fc:fe:22:80:2f:dc:fa:
8f:bb:3d:41:98:f2:0a:a7:49:2e:96:b0:35:db:17:
f7:ee:73:18:d3:ba:eb:ff:e2:53:9a:38:5b:03:53:
9f:ec:8f:ab:c1:b9:b6:09:10:82:8f:4f:24:08:d0:
c3:dc:5d:14:e8:bd:b9:4a:b8:77:ff:0f:af:da:59:
c0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3E:51:BF:BC:2A:9B:CE:D1:8A:BF:58:19:95:F5:60:77:50:FD:D7
X509v3 Authority Key Identifier:
keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e3235352e302f32342d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.199.255.0/24
Signature Algorithm: sha256WithRSAEncryption
93:7b:1f:be:17:05:42:5c:f1:33:60:e9:4f:1d:be:b1:11:6c:
fc:dc:e4:05:95:90:f2:3b:ee:7d:43:e5:18:56:21:b1:d9:c7:
54:92:43:26:31:56:26:bd:6d:e8:54:ca:4c:59:11:9e:49:24:
55:6c:15:e0:15:71:d3:fb:c7:7e:fa:44:88:dd:3d:23:c9:30:
f5:f5:47:22:12:78:2b:8e:32:f5:ef:29:45:fc:e1:2e:35:bf:
34:fd:a0:7f:2f:85:ef:ec:2e:3c:46:a4:b5:5f:dd:13:0f:bd:
f4:38:d5:19:66:36:5c:d1:08:f4:97:cd:2a:f6:09:53:21:50:
25:01:83:31:af:0d:78:e8:c7:d7:d1:9e:9e:a9:da:54:b8:6a:
76:b7:63:a3:e6:d8:04:31:49:8b:10:81:90:c3:0d:53:5e:69:
e6:8e:a3:1d:4b:6a:d2:78:07:2e:4f:ba:f6:8b:a8:8d:f6:c0:
1f:35:62:8d:9d:51:8a:4a:ff:d7:2e:aa:c0:3d:9f:42:d8:84:
a3:d2:39:48:65:de:ea:04:ba:06:51:7f:b2:77:a3:d9:fc:06:
5e:d4:e4:99:e5:c7:d9:a0:05:a0:29:65:b6:7d:14:3c:d2:78:
41:aa:9e:a3:aa:6e:5c:72:5a:47:1f:d3:61:02:c3:a8:6d:dd:
e6:03:c3:54
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:24 2026 by rpki-client