
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111857844975566867/1/3136302e32322e3134382e302f32332d3233203d3e2030.roa
File: 3136302e32322e3134382e302f32332d3233203d3e2030.roa (raw, json)
Hash identifier: c1jKmTjVWS1Ssy7RhbjqcS9tXZ98rv8e/VAjHzXLQos=
Subject key identifier: 54:F6:C6:BD:C7:2F:F6:34:63:A1:B9:27:41:1F:A1:1A:72:D0:21:33
Certificate issuer: /CN=4FC053560F4D1C49194F692E10C37F5A5CF08392
Certificate serial: 5BCF53DE0C22CB466021C31437720BBC3AE40435
Authority key identifier: 4F:C0:53:56:0F:4D:1C:49:19:4F:69:2E:10:C3:7F:5A:5C:F0:83:92
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4FC053560F4D1C49194F692E10C37F5A5CF08392.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/3136302e32322e3134382e302f32332d3233203d3e2030.roa
Signing time: Thu 25 Jun 2026 05:57:29 +0000
ROA not before: Thu 25 Jun 2026 05:52:29 +0000
ROA not after: Thu 24 Jun 2027 05:57:29 +0000
asID: 0
IP address blocks: 160.22.148.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.crl
rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4FC053560F4D1C49194F692E10C37F5A5CF08392.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 07 Jul 2026 18:16:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:cf:53:de:0c:22:cb:46:60:21:c3:14:37:72:0b:bc:3a:e4:04:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FC053560F4D1C49194F692E10C37F5A5CF08392
Validity
Not Before: Jun 25 05:52:29 2026 GMT
Not After : Jun 24 05:57:29 2027 GMT
Subject: CN=54F6C6BDC72FF63463A1B927411FA11A72D02133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e1:67:de:0d:91:67:83:35:ab:5c:96:cb:6f:
20:c7:e0:cf:36:0b:96:96:07:20:e3:dd:87:61:3e:
95:83:df:eb:f0:66:23:9c:75:e9:98:bb:db:0b:bd:
9d:0f:d8:04:ff:4a:84:fa:9d:d6:8f:48:e3:97:9e:
2b:c2:05:06:11:58:fa:c1:99:6b:90:79:e5:a0:6d:
42:2d:96:43:80:d3:c5:aa:fe:b6:84:e0:dc:e5:ac:
e7:03:a6:2f:2f:aa:8a:99:5a:e2:ce:cc:54:88:59:
ec:fe:f2:0e:39:9e:50:2d:93:de:05:c6:96:6f:9d:
bd:c0:76:ef:44:e1:3f:33:1a:9e:2b:05:b3:ac:37:
9b:9d:54:76:d4:18:09:b3:cb:8f:04:2a:f9:9c:be:
46:46:20:29:77:73:f7:0a:d9:8d:2d:b5:bb:7d:77:
0f:f4:06:e6:f1:af:a4:c8:50:3c:a3:47:04:37:83:
88:16:40:a6:1b:40:36:97:7c:8b:23:19:81:31:4b:
f2:3a:f6:3f:cd:ba:98:58:f0:0c:aa:d1:1e:d2:f5:
3e:3f:e2:eb:4c:f5:34:a9:5d:2f:5a:ef:66:a4:6f:
ad:54:19:b6:37:fe:dc:c4:c3:3e:8b:7e:d2:7d:96:
bc:aa:cb:b1:5c:cc:02:68:e5:29:a8:c2:0d:ae:63:
56:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F6:C6:BD:C7:2F:F6:34:63:A1:B9:27:41:1F:A1:1A:72:D0:21:33
X509v3 Authority Key Identifier:
keyid:4F:C0:53:56:0F:4D:1C:49:19:4F:69:2E:10:C3:7F:5A:5C:F0:83:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4FC053560F4D1C49194F692E10C37F5A5CF08392.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/3136302e32322e3134382e302f32332d3233203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.148.0/23
Signature Algorithm: sha256WithRSAEncryption
91:8b:9f:13:be:01:43:ff:08:fe:8a:18:70:b3:5d:42:df:75:
f7:6b:60:c9:e1:3a:bc:2f:9e:f3:e8:e2:8d:ef:82:68:e7:ca:
e2:8b:0d:a0:7f:29:b3:a7:d5:49:3a:f2:43:e1:86:ba:39:1b:
d2:ce:2b:12:e9:b1:05:79:de:4e:b5:3a:03:e4:bd:bc:1b:9b:
2b:d1:e1:8a:85:a2:bf:21:69:f0:62:47:b1:ee:14:2b:44:b9:
65:db:29:29:dd:20:eb:d4:6c:14:cb:29:0b:50:e2:11:7d:27:
d2:75:03:95:dd:95:d3:5b:f1:f4:04:8a:1d:62:1d:2e:40:d9:
8c:04:36:1a:4e:34:1c:da:ac:f1:b6:de:93:fd:48:ae:2d:b1:
96:7e:ff:dd:7c:b6:17:96:21:d2:c9:56:f7:73:ef:d1:3e:de:
0f:50:61:6c:c9:ef:4a:e1:b2:da:b8:f4:cf:52:1a:e6:6e:04:
b8:df:75:90:63:58:0e:00:a1:c7:30:ed:7c:df:83:2c:46:c8:
6a:ab:26:49:f3:68:f5:8c:a8:9c:64:41:5a:f8:08:d8:ce:aa:
cb:1a:30:33:e2:8b:07:64:34:44:50:db:3f:f9:73:4a:0c:be:
e5:f7:e6:f2:f4:b7:f9:a6:3e:9d:d0:de:76:6b:9c:57:a9:7b:
b4:9e:5c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 09:43:32 2026 by rpki-client