
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e3130322e302f32342d3234203d3e20313334373633.roa
File: 3231312e39392e3130322e302f32342d3234203d3e20313334373633.roa (raw, json)
Hash identifier: WoNnfbEvSeXv/rO+sJ4h+rg/mbciJqW7egJ3cM6pkX0=
Subject key identifier: 66:4F:4C:0C:8A:72:08:94:9C:DD:AE:56:85:64:7B:F8:EC:AE:0A:4F
Certificate issuer: /CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
Certificate serial: 2A37B7F6B918B5862C777E28A6C6346D2EFA1096
Authority key identifier: 53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e3130322e302f32342d3234203d3e20313334373633.roa
Signing time: Wed 03 Jun 2026 09:27:08 +0000
ROA not before: Wed 03 Jun 2026 09:22:08 +0000
ROA not after: Wed 02 Jun 2027 09:27:08 +0000
asID: 134763
IP address blocks: 211.99.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl
rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 13:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:37:b7:f6:b9:18:b5:86:2c:77:7e:28:a6:c6:34:6d:2e:fa:10:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
Validity
Not Before: Jun 3 09:22:08 2026 GMT
Not After : Jun 2 09:27:08 2027 GMT
Subject: CN=664F4C0C8A7208949CDDAE5685647BF8ECAE0A4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:37:40:2a:f0:4e:fb:c8:4b:e9:52:2d:2b:38:
93:f8:37:4e:76:21:b8:90:66:17:6d:d4:b9:14:59:
db:99:4d:c1:28:df:a2:c4:53:69:b9:ff:e1:16:7d:
ab:54:f0:85:c6:ca:ce:59:9c:9c:ab:cc:1b:f6:24:
f9:b5:88:d5:5f:95:6f:cf:b8:91:47:9c:25:ab:36:
76:cc:f4:53:6c:1a:05:90:2c:7d:fc:14:06:f8:ab:
2d:a6:76:d1:34:bf:c8:3b:ef:57:0c:a7:7a:4a:32:
80:68:10:40:42:e0:06:10:29:df:3b:dd:5a:9f:eb:
1f:72:6c:df:ad:6a:f6:62:1d:13:72:3d:89:30:59:
6d:ac:cc:da:27:d1:83:8a:6c:4f:78:48:7f:26:9e:
4e:a2:0e:ef:80:8b:c7:23:cc:71:36:c2:c9:7c:68:
46:45:5e:0f:64:82:55:ef:b2:f7:50:13:2d:c5:2a:
4b:44:86:1e:9d:76:86:6b:45:12:e3:e8:1c:8a:2f:
bb:7e:02:b2:86:c0:69:50:39:5e:56:da:72:3e:f8:
dd:a7:6c:99:2f:0c:64:fa:21:07:89:c5:be:52:7f:
0f:3e:83:93:02:02:00:f4:97:d2:3e:93:70:ef:1d:
00:bc:d7:7e:5a:fd:da:89:89:c7:0f:0f:ac:e9:01:
bf:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4F:4C:0C:8A:72:08:94:9C:DD:AE:56:85:64:7B:F8:EC:AE:0A:4F
X509v3 Authority Key Identifier:
keyid:53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e3130322e302f32342d3234203d3e20313334373633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.99.102.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:c8:0d:11:2c:46:d8:a6:4f:4e:46:1b:25:c1:d1:2c:32:ae:
e7:96:21:d6:d3:9a:9b:9b:8a:a7:bf:b5:8e:5f:fa:fa:24:96:
c0:15:46:d3:98:c2:e6:c4:32:66:44:46:bd:69:36:18:bc:2f:
c0:91:fd:af:98:23:61:85:f8:8f:67:20:8a:1b:81:ee:e9:9c:
4a:b0:f1:4c:fd:db:19:e8:0b:69:62:6f:da:99:44:08:02:08:
9c:6f:26:d9:06:06:97:b3:32:5b:35:14:58:e4:45:93:cb:d3:
ab:2a:64:eb:ae:d0:93:55:f3:c9:ed:95:f3:d2:c7:5e:f5:bd:
96:0b:9b:64:3d:71:43:be:dc:b1:c9:6b:e3:cb:a0:58:73:c5:
66:5b:bd:26:58:da:91:a4:a6:c4:c5:5e:7f:43:6e:41:ac:d3:
dc:99:ac:01:b7:ff:0b:0a:82:c6:22:e7:3a:7f:cb:27:31:75:
e3:64:d7:cb:52:f1:9c:71:20:29:90:ec:de:f3:e1:68:a6:d3:
18:27:0d:ab:1c:7c:d4:61:9e:04:69:e9:80:72:95:fb:9f:f9:
f9:d8:b4:82:0f:bb:db:ff:83:1d:af:67:de:ea:7f:b3:53:41:
6c:69:c3:0f:7c:9c:02:6d:44:d1:72:e5:75:0e:cc:17:89:fe:
65:ff:78:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:22 2026 by rpki-client