
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e35362e302f32312d3231203d3e2034383337.roa
File: 3130312e3139392e35362e302f32312d3231203d3e2034383337.roa (raw, json)
Hash identifier: VMR7srnpmhF4DhLqolfvF0UZv7L1zTlyAradc9tEWbY=
Subject key identifier: 0E:A9:F5:CB:D9:9D:73:7A:D5:45:FB:7B:00:00:C4:0F:29:41:F1:97
Certificate issuer: /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Certificate serial: 36C87225A602B45E8A6F8BAB28777F67101CC3E4
Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e35362e302f32312d3231203d3e2034383337.roa
Signing time: Wed 17 Jun 2026 16:13:27 +0000
ROA not before: Wed 17 Jun 2026 16:08:27 +0000
ROA not after: Wed 16 Jun 2027 16:13:27 +0000
asID: 4837
IP address blocks: 101.199.56.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 19:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:c8:72:25:a6:02:b4:5e:8a:6f:8b:ab:28:77:7f:67:10:1c:c3:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Validity
Not Before: Jun 17 16:08:27 2026 GMT
Not After : Jun 16 16:13:27 2027 GMT
Subject: CN=0EA9F5CBD99D737AD545FB7B0000C40F2941F197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:22:e0:69:2f:dc:43:af:4b:77:f3:61:52:54:
02:a6:a1:36:e8:7e:b2:fc:f0:40:b6:13:70:28:b3:
d3:60:49:b4:6e:93:9c:66:b7:ef:bc:3a:1f:e5:80:
ed:8f:14:63:d0:97:79:33:4d:07:85:50:5b:16:5d:
92:31:5b:80:12:be:ab:c5:62:24:4a:fb:ae:99:e2:
df:73:d4:df:18:d9:c5:b7:a7:29:38:91:5a:9b:b1:
a4:cf:e1:67:e9:4b:35:b0:99:f9:d8:05:30:3f:e1:
51:c3:dc:d0:78:38:1c:90:c7:9d:94:d6:78:55:20:
00:59:45:5b:ba:e0:46:29:b9:b5:0e:b8:83:aa:da:
96:95:5a:cf:6a:97:24:8e:3e:ca:19:5d:1f:d0:9d:
74:60:7b:e7:0c:29:61:69:6d:ba:85:d7:81:6d:b2:
a9:fe:10:60:19:40:57:b2:9b:e3:44:80:5a:53:62:
66:40:6b:e7:fc:4e:45:bf:5c:6f:b0:ea:5d:35:64:
35:f5:29:44:f1:b6:ba:37:6f:b0:f3:6c:79:7d:01:
2c:48:f4:bf:17:54:13:80:36:0e:57:a5:58:59:6d:
62:58:ff:db:e7:6b:8c:ab:05:fb:f9:31:05:6f:47:
80:ec:dc:5b:db:4b:a9:c6:34:14:f1:85:60:0e:4b:
7d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A9:F5:CB:D9:9D:73:7A:D5:45:FB:7B:00:00:C4:0F:29:41:F1:97
X509v3 Authority Key Identifier:
keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139392e35362e302f32312d3231203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.199.56.0/21
Signature Algorithm: sha256WithRSAEncryption
23:2b:d9:28:81:fc:58:e2:2a:bb:7b:58:0c:e3:bd:a1:1b:a0:
21:d6:88:b5:cd:ab:85:ea:32:15:c2:56:19:40:d0:de:b0:74:
ff:ed:bf:b4:fa:5d:21:ee:9b:6e:d1:04:29:d3:69:62:a0:89:
75:ba:84:09:c7:c8:2c:2d:f4:48:12:da:25:39:78:db:c8:17:
bd:0e:8c:fc:1e:01:95:95:ba:9a:87:2c:2c:04:00:76:3c:f5:
94:68:a7:c2:c8:18:b6:0c:51:e4:e5:82:0f:1a:e3:fd:12:a6:
09:ed:04:d3:51:22:e0:7d:04:c9:53:9e:ab:a3:c3:c5:c7:aa:
5a:79:fb:2c:1a:83:5b:b4:2f:05:e1:db:1b:d4:e4:f2:8b:ea:
e9:9f:96:93:eb:66:22:c5:39:0a:26:11:bf:c2:d9:ac:3b:ad:
d4:66:67:b7:55:c1:c0:f4:56:b4:3e:21:5a:d5:91:c4:77:82:
b7:17:a3:c7:f7:ea:9d:22:19:a6:bb:58:3d:7d:45:04:16:bf:
9e:60:50:3f:b4:d8:32:ac:16:56:d7:1b:71:3a:95:af:2d:8f:
51:38:dd:08:a8:85:56:75:76:21:83:21:b4:9b:c0:ca:02:59:
fe:df:91:18:74:c2:12:49:a3:f9:77:49:1a:62:43:50:8f:aa:
20:b6:37:83
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUNshyJaYCtF6Kb4urKHd/ZxAcw+QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUyN0VFRjIyRUQ0QjkwMzQ5NDlDOTFFM0QzOUIyNEE2
OUZERjk4NDAeFw0yNjA2MTcxNjA4MjdaFw0yNzA2MTYxNjEzMjdaMDMxMTAvBgNV
BAMTKDBFQTlGNUNCRDk5RDczN0FENTQ1RkI3QjAwMDBDNDBGMjk0MUYxOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxIuBpL9xDr0t382FSVAKmoTbo
frL88EC2E3Aos9NgSbRuk5xmt++8Oh/lgO2PFGPQl3kzTQeFUFsWXZIxW4ASvqvF
YiRK+66Z4t9z1N8Y2cW3pyk4kVqbsaTP4WfpSzWwmfnYBTA/4VHD3NB4OByQx52U
1nhVIABZRVu64EYpubUOuIOq2paVWs9qlySOPsoZXR/QnXRge+cMKWFpbbqF14Ft
sqn+EGAZQFeym+NEgFpTYmZAa+f8TkW/XG+w6l01ZDX1KUTxtro3b7DzbHl9ASxI
9L8XVBOANg5XpVhZbWJY/9vna4yrBfv5MQVvR4Ds3FvbS6nGNBTxhWAOS33jAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUDqn1y9mdc3rVRft7AADEDylB8ZcwHwYDVR0j
BBgwFoAUxSfu8i7UuQNJSckePTmySmn9+YQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
Njc2NzA4NDkyNDE3NDM1NS8wL0M1MjdFRUYyMkVENEI5MDM0OTQ5QzkxRTNEMzlC
MjRBNjlGREY5ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzUyN0VFRjIyRUQ0QjkwMzQ5NDlDOTFFM0QzOUIyNEE2OUZERjk4NC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA2NzY3MDg0OTI0MTc0MzU1LzAvMzEzMDMxMmUzMTM5
MzkyZTM1MzYyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA2XHODANBgkqhkiG9w0BAQsFAAOCAQEAIyvZKIH8WOIqu3tYDOO9oRugIdaI
tc2rheoyFcJWGUDQ3rB0/+2/tPpdIe6bbtEEKdNpYqCJdbqECcfILC30SBLaJTl4
28gXvQ6M/B4BlZW6mocsLAQAdjz1lGinwsgYtgxR5OWCDxrj/RKmCe0E01Ei4H0E
yVOeq6PDxceqWnn7LBqDW7QvBeHbG9Tk8ovq6Z+Wk+tmIsU5CiYRv8LZrDut1GZn
t1XBwPRWtD4hWtWRxHeCtxejx/fqnSIZprtYPX1FBBa/nmBQP7TYMqwWVtcbcTqV
ry2PUTjdCKiFVnV2IYMhtJvAygJZ/t+RGHTCEkmj+XdJGmJDUI+qILY3gw==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:17 2026 by rpki-client