
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e34382e302f32312d3231203d3e2034383337.roa
File: 3130312e3139392e34382e302f32312d3231203d3e2034383337.roa (raw, json)
Hash identifier: eD96fEmuPrh0dXQBvg4gq6iXa3p0ypKLHeVtrbSjm7w=
Subject key identifier: FC:92:B4:69:3B:31:60:D8:EF:C0:79:CA:A4:7A:37:EC:71:91:D8:30
Certificate issuer: /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Certificate serial: 2034652C1144D403D5709F0E4908DBAD4FC7D3C8
Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e34382e302f32312d3231203d3e2034383337.roa
Signing time: Wed 17 Jun 2026 16:13:27 +0000
ROA not before: Wed 17 Jun 2026 16:08:27 +0000
ROA not after: Wed 16 Jun 2027 16:13:27 +0000
asID: 4837
IP address blocks: 101.199.48.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 19:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:34:65:2c:11:44:d4:03:d5:70:9f:0e:49:08:db:ad:4f:c7:d3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Validity
Not Before: Jun 17 16:08:27 2026 GMT
Not After : Jun 16 16:13:27 2027 GMT
Subject: CN=FC92B4693B3160D8EFC079CAA47A37EC7191D830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3c:bb:e5:b4:02:19:f8:69:6e:9b:f0:18:d5:
74:67:aa:8a:0b:da:98:2d:ba:8e:e5:2b:de:55:6b:
89:28:6d:28:8e:1b:76:84:f5:c5:3e:e0:53:11:f3:
20:5a:3c:3d:1c:5c:3a:f3:5b:d3:40:f7:4f:aa:66:
e1:23:e2:ea:56:5d:88:9d:e3:f0:d0:20:7d:77:cb:
db:d7:08:a4:39:ac:23:ba:3f:76:34:73:92:d8:a8:
22:f9:b5:1e:64:86:85:34:e9:ad:de:7a:4a:70:f7:
d4:d7:48:6b:4a:3d:07:a1:e1:6c:43:83:97:a7:e8:
35:0f:e4:ad:6e:ba:b5:03:eb:0a:a0:ae:02:7f:fe:
13:80:b9:e4:06:31:c7:e6:c5:11:68:7e:f9:fb:ef:
31:92:aa:26:51:79:18:95:28:db:85:51:a5:ae:57:
bb:e1:50:e6:3e:ed:be:c8:91:2d:da:d6:00:bc:4e:
55:dd:d6:ae:95:c1:fc:7b:cd:f0:f4:3a:d9:53:d8:
6e:72:1d:8f:81:f9:0b:4b:d0:46:b3:83:97:8d:06:
ef:30:66:43:cb:d7:0b:dd:03:86:3e:c4:9f:2f:72:
4d:ae:e3:8f:a5:dd:41:90:29:79:aa:18:4c:eb:fa:
21:d6:7c:cd:3b:8f:1f:43:31:f6:47:a5:a8:51:71:
49:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:92:B4:69:3B:31:60:D8:EF:C0:79:CA:A4:7A:37:EC:71:91:D8:30
X509v3 Authority Key Identifier:
keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e34382e302f32312d3231203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.199.48.0/21
Signature Algorithm: sha256WithRSAEncryption
11:e2:4a:4a:64:f4:51:1b:b4:8f:79:db:0f:97:9e:6c:49:4e:
5f:12:98:ab:73:05:c9:0d:f9:4c:a4:13:16:5a:07:8f:79:24:
78:a1:99:a2:fe:4e:78:33:ef:3c:43:2d:be:c1:39:7c:b8:66:
24:8e:93:42:6d:aa:be:ab:6b:60:14:f6:25:6a:17:fb:04:37:
47:5f:1b:d7:c1:8c:b3:6d:2b:cd:db:8f:e8:51:5b:19:e1:54:
91:c8:bd:48:4f:f3:92:9b:2f:38:c3:74:ff:16:56:f0:47:35:
e8:66:bb:15:15:d9:76:6f:fe:98:b8:f8:05:41:3c:20:ac:4a:
15:94:f0:ce:ee:ab:3d:4c:d5:37:85:39:8d:1a:ea:83:cb:34:
99:30:3b:5c:bc:c2:8e:59:bc:98:a5:ac:10:cb:25:3f:b5:4e:
10:12:9d:4d:1d:7c:5b:32:55:d7:89:91:bd:fe:ef:7f:eb:96:
a6:6e:3f:b4:7a:32:13:95:e0:04:3e:db:22:c5:52:35:99:51:
a8:73:ce:75:b5:7b:b4:bf:98:fb:f6:a4:e6:8b:56:46:fb:89:
44:e0:bf:aa:7f:7b:0c:4f:08:b5:c0:35:4b:26:63:29:84:e4:
d8:d3:a6:bd:25:b6:ae:56:78:97:1d:79:8a:7e:50:ac:07:f0:
74:fa:d6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:15 2026 by rpki-client