
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e39362e302f32342d3234203d3e20313334353433.roa
File: 3231312e39392e39362e302f32342d3234203d3e20313334353433.roa (raw, json)
Hash identifier: MdPvPYD+6zi0JmKfTNOLoaX73MobQOi/GaSfIasKe3k=
Subject key identifier: 0F:D7:66:E0:71:81:E0:37:E0:2B:6C:50:D5:0D:B6:62:1B:74:7A:E3
Certificate issuer: /CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
Certificate serial: 3D77C7CBC0862E2703565D2242FC5E696B145676
Authority key identifier: 53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e39362e302f32342d3234203d3e20313334353433.roa
Signing time: Wed 27 May 2026 07:39:04 +0000
ROA not before: Wed 27 May 2026 07:34:04 +0000
ROA not after: Wed 26 May 2027 07:39:04 +0000
asID: 134543
IP address blocks: 211.99.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl
rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:14:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:77:c7:cb:c0:86:2e:27:03:56:5d:22:42:fc:5e:69:6b:14:56:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
Validity
Not Before: May 27 07:34:04 2026 GMT
Not After : May 26 07:39:04 2027 GMT
Subject: CN=0FD766E07181E037E02B6C50D50DB6621B747AE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:53:7c:64:85:c5:b2:9c:97:8a:5f:9d:6c:3d:
58:7e:b8:9a:49:7f:1d:5c:0b:ee:12:c9:9e:40:22:
7c:41:66:27:ea:e0:0d:31:3e:8c:d2:85:7a:62:48:
b1:6d:ba:dd:8f:b5:d1:73:0d:10:ce:21:55:48:1a:
53:29:c1:77:32:a1:1b:bd:82:13:fa:db:ca:15:7c:
0b:d1:fa:bf:9b:83:1d:5a:55:f1:09:ec:80:08:4f:
05:6f:82:ec:8c:35:b2:34:8f:f0:28:9c:ea:7e:e0:
51:b1:b8:5f:5f:f9:c0:71:7b:80:86:22:a0:bc:04:
2e:72:7e:72:82:37:c9:ee:b0:bb:b8:9a:76:56:7f:
53:56:54:4c:db:8a:2a:b9:df:dd:ad:00:c5:c9:16:
20:8f:bc:ad:cf:97:36:05:60:1a:e5:f5:a1:68:61:
f0:12:64:3d:8b:40:0a:d9:12:09:48:cc:97:70:a6:
ca:56:a5:81:3d:60:43:22:75:cb:75:fe:0d:d5:c2:
39:a3:8a:cc:85:1e:67:26:37:f3:e5:4a:78:59:5d:
d6:27:eb:19:1b:73:a5:3f:58:e5:1e:be:b8:a9:79:
8c:b2:7e:9c:9d:cc:13:0b:29:4a:29:52:cd:6f:bd:
57:04:f6:7e:34:c1:04:e1:92:53:48:37:83:13:e8:
d4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D7:66:E0:71:81:E0:37:E0:2B:6C:50:D5:0D:B6:62:1B:74:7A:E3
X509v3 Authority Key Identifier:
keyid:53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e39362e302f32342d3234203d3e20313334353433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.99.96.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:1f:20:e0:c6:3a:a7:8c:66:1d:e5:37:1e:de:ad:24:69:89:
d4:09:bf:a2:49:b0:90:dc:39:8c:c3:9b:c5:5f:59:bd:a3:58:
02:76:f8:9c:ea:7f:d4:04:68:c1:7e:84:74:36:15:0f:fc:dc:
2d:cb:96:73:9c:69:4c:75:eb:90:6b:42:bc:6d:95:7a:51:45:
ac:de:79:3d:3c:a1:6c:1d:d0:f7:69:1b:0b:c6:20:93:4d:31:
49:57:2e:5e:c8:f6:54:fd:a3:c6:cb:0a:6c:ad:15:57:2e:92:
eb:c2:ef:41:7f:c7:fa:7d:f3:83:a9:a2:3d:e6:75:95:82:12:
8f:70:43:1c:26:e8:d2:d0:fb:a0:d8:ad:47:9f:3c:ba:d0:36:
3b:78:2e:eb:38:ed:4b:79:44:a9:71:41:e1:0a:98:a3:3b:fc:
3b:db:22:da:b6:9f:a2:54:c7:55:80:6e:8a:2a:c1:4b:15:8d:
54:33:6f:ed:1c:df:44:7b:83:d6:35:8e:b4:0f:be:7a:c5:b0:
f6:32:59:88:3a:09:bb:9b:32:41:5f:96:b1:44:33:d2:cd:5f:
71:8e:ae:4a:a1:30:8d:97:cc:c4:b4:da:01:39:a7:9b:58:30:
c1:38:b7:89:5d:ae:81:72:80:8a:08:26:8c:a7:c0:84:92:34:
a2:4c:bf:00
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:53:11 2026 by rpki-client