
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e34382e302f32302d3230203d3e2034383337.roa
File: 3130312e3139392e34382e302f32302d3230203d3e2034383337.roa (raw, json)
Hash identifier: et9GtONlpBFQsXguDJe5GnXbV7W5I4DL6A4XhE657og=
Subject key identifier: C5:3A:C6:1E:6F:4A:58:62:89:E5:5A:77:12:0C:81:3F:06:8A:16:08
Certificate issuer: /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Certificate serial: 1626566B3A44C0666779F34721A86443CB68BF35
Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e34382e302f32302d3230203d3e2034383337.roa
Signing time: Wed 17 Jun 2026 16:13:53 +0000
ROA not before: Wed 17 Jun 2026 16:08:53 +0000
ROA not after: Wed 16 Jun 2027 16:13:53 +0000
asID: 4837
IP address blocks: 101.199.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 19:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:26:56:6b:3a:44:c0:66:67:79:f3:47:21:a8:64:43:cb:68:bf:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Validity
Not Before: Jun 17 16:08:53 2026 GMT
Not After : Jun 16 16:13:53 2027 GMT
Subject: CN=C53AC61E6F4A586289E55A77120C813F068A1608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:06:c9:c3:76:7c:79:c9:f1:f8:c6:d4:39:37:
9e:b5:0f:61:f9:62:f3:4b:28:30:e7:38:80:19:52:
8e:95:11:df:44:4b:01:5e:d3:53:66:08:9e:dd:7a:
4e:5a:d1:74:fd:27:e4:d4:f8:a2:46:51:bc:07:6d:
8e:fc:52:c3:6d:38:7c:5e:58:a7:bb:ba:c8:eb:2d:
ce:53:5f:21:22:c8:4e:de:b7:21:35:d3:cc:b1:67:
25:cd:3f:c0:b7:e7:b7:d0:5f:20:d3:e7:81:a2:e8:
31:01:e0:cb:19:32:f0:6a:13:29:30:0e:07:21:2a:
97:ac:5c:59:23:f0:e9:64:d9:a6:ab:9f:f5:6d:7e:
5a:f5:95:fe:41:a2:6b:ad:e7:9e:1c:cc:95:1f:a5:
eb:88:4f:23:5d:93:0c:71:57:35:4e:5d:91:e1:df:
fb:e3:4c:24:7b:bc:0d:9a:2e:9b:ef:28:28:32:41:
16:21:70:c1:66:de:f0:75:e7:ba:84:cc:30:65:55:
45:ea:19:e1:87:da:95:12:67:e0:48:18:28:ed:fe:
12:19:11:5a:59:0f:26:08:0c:38:27:9f:51:8a:9e:
fd:9f:83:15:dc:f0:81:c4:3b:18:e1:cc:4f:19:44:
d0:ab:f9:c6:37:80:46:40:32:0c:37:89:3e:39:20:
97:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3A:C6:1E:6F:4A:58:62:89:E5:5A:77:12:0C:81:3F:06:8A:16:08
X509v3 Authority Key Identifier:
keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e34382e302f32302d3230203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.199.48.0/20
Signature Algorithm: sha256WithRSAEncryption
54:a4:45:70:03:5f:7e:16:9c:25:b4:45:fa:88:c1:84:65:44:
82:50:0e:9e:1a:fa:27:6d:f0:39:54:83:bf:42:e7:e3:84:27:
81:9a:c9:ae:4b:4b:ae:67:1a:ea:77:a7:3c:07:12:dd:87:8d:
09:35:f8:a2:62:b8:21:98:68:c1:1c:f2:d7:36:01:cc:70:b2:
fd:a3:69:d3:52:fc:99:2d:68:1b:9b:c9:05:2c:43:8c:d9:58:
05:c2:90:f7:b7:37:02:2b:3b:37:df:81:b2:1f:86:c9:de:f6:
5a:81:6f:ba:0a:a8:cc:82:7f:99:4d:31:d5:eb:ce:60:6c:2e:
ca:96:85:d4:df:65:41:aa:31:6e:be:0f:32:13:53:82:05:5a:
ad:85:53:92:da:4a:a0:0d:b9:50:56:a3:fc:01:19:ca:04:92:
f0:34:dc:50:e6:18:1e:6e:44:1d:3e:bb:a3:65:31:79:6e:4f:
a9:8f:cb:f6:30:ee:1e:15:84:f1:9f:29:00:c7:8f:49:50:d1:
4f:f4:9d:03:4e:e6:26:44:f9:0f:aa:de:b8:83:8f:a0:2c:25:
e2:83:c9:68:c0:a3:b4:2f:ea:b0:b7:17:c1:bf:b4:e8:49:b3:
49:58:ab:fb:4b:5e:f3:0b:16:66:d4:cd:5a:fc:da:89:a4:25:
7e:9d:9c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:28 2026 by rpki-client