
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e3131342e302f32342d3234203d3e20313334353433.roa
File: 3231312e39392e3131342e302f32342d3234203d3e20313334353433.roa (raw, json)
Hash identifier: VDhEkG4rAzjDnGYl/ETV10Tu7BB9j1m/O1+aGVDt19o=
Subject key identifier: 36:EB:7C:2A:3A:8A:0E:E5:C5:00:76:D9:E1:10:E8:5C:12:7D:3A:F9
Certificate issuer: /CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
Certificate serial: 6FA310EDA21EC31C0C3E50DE6952C3E7AAD171B4
Authority key identifier: 53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e3131342e302f32342d3234203d3e20313334353433.roa
Signing time: Wed 27 May 2026 07:42:43 +0000
ROA not before: Wed 27 May 2026 07:37:43 +0000
ROA not after: Wed 26 May 2027 07:42:43 +0000
asID: 134543
IP address blocks: 211.99.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl
rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:14:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:a3:10:ed:a2:1e:c3:1c:0c:3e:50:de:69:52:c3:e7:aa:d1:71:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
Validity
Not Before: May 27 07:37:43 2026 GMT
Not After : May 26 07:42:43 2027 GMT
Subject: CN=36EB7C2A3A8A0EE5C50076D9E110E85C127D3AF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:62:e3:00:13:d5:0d:19:31:9b:47:bd:ad:e8:
19:89:b1:34:72:b9:65:1d:35:1f:00:c2:1a:6d:7e:
a6:00:17:98:73:24:4b:e0:fa:7e:48:9b:ae:e2:e3:
81:7f:72:ee:b9:f7:d0:1d:61:83:14:68:5e:20:2a:
9b:93:55:16:e7:30:da:15:1b:1e:42:29:99:16:5f:
93:5e:da:8e:25:6b:73:d5:8a:9f:78:6e:fc:2a:f3:
3d:57:75:12:c6:68:a0:0d:90:16:40:ab:16:bc:72:
a6:73:06:ae:12:a5:50:c7:6e:03:f0:b0:1c:de:b5:
b6:bd:c7:65:87:7c:bc:50:1f:3b:2f:80:25:9d:7f:
04:5c:95:e9:a1:b4:9c:2a:f4:98:d0:0f:9f:4b:c4:
be:dc:81:59:65:bd:35:be:63:2c:ba:2c:16:16:8c:
2a:01:80:37:36:b3:d5:fe:9e:05:e4:9d:2a:1f:2d:
7c:de:7d:76:2a:14:2d:d3:87:13:eb:8b:7e:ca:30:
e4:e6:e2:e2:95:10:cd:4d:10:a8:25:0c:c8:7c:79:
97:5d:51:22:30:08:ce:ed:33:6e:81:4d:dc:bb:30:
7c:b1:bd:7d:7b:d9:8e:ee:4d:1a:6f:7a:ad:af:52:
b8:9c:a8:6b:03:5b:43:fd:4d:a0:3b:e3:2d:81:56:
df:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EB:7C:2A:3A:8A:0E:E5:C5:00:76:D9:E1:10:E8:5C:12:7D:3A:F9
X509v3 Authority Key Identifier:
keyid:53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e3131342e302f32342d3234203d3e20313334353433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.99.114.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:a2:96:be:0a:53:63:fd:e8:13:96:5e:fb:d1:8a:4c:95:76:
4e:d2:73:05:ff:b5:34:78:e3:53:55:8d:e4:98:d7:b2:2c:2f:
19:e6:bc:ac:d0:61:a1:44:fe:ee:1e:64:4e:58:ae:a2:0d:03:
7f:38:b8:73:11:62:8f:ba:7f:91:ee:fd:74:4a:c7:95:8b:2e:
45:63:bf:dd:2d:20:0c:0f:ba:37:9f:af:6e:3e:c5:9e:7d:03:
84:32:0b:d9:72:d5:ec:7b:6c:32:d0:ea:ab:7f:1e:c4:5a:cc:
0f:33:4c:ea:25:5e:cc:ea:dc:72:cd:03:b0:16:ae:8d:37:d8:
64:21:b4:ea:ca:69:9b:80:53:e8:fd:4a:21:9e:93:b2:dd:84:
74:6b:e7:54:c1:e0:6e:ec:75:f5:b2:e6:11:14:62:74:1e:3b:
52:6e:2b:62:fb:e6:a7:c7:54:27:47:6a:59:ba:dc:0d:52:45:
14:a8:28:dd:aa:33:e6:ba:99:92:c4:44:6b:a8:da:62:74:82:
36:1e:c2:4c:cf:dd:9d:90:23:06:67:94:c6:23:94:21:2f:b9:
9b:ba:af:8c:26:84:b6:2e:85:05:da:5b:cf:ec:01:70:e3:fd:
6a:e0:64:33:20:92:36:89:a3:42:87:73:2a:c6:40:ad:74:d3:
c0:c6:06:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:51:22 2026 by rpki-client