
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e39392e302f32342d3234203d3e20313334353433.roa
File: 3231312e39392e39392e302f32342d3234203d3e20313334353433.roa (raw, json)
Hash identifier: uIOjhlOQfgYg2S8c2ujA+r40985b5SnTcIxwybdUlQw=
Subject key identifier: 2E:9D:70:7F:D3:AB:5A:49:E3:9D:F5:CB:21:EA:2E:58:04:68:A8:9F
Certificate issuer: /CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
Certificate serial: 7BF7B620ACAD2D9A349A85D05E791C1893C1A07F
Authority key identifier: 53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e39392e302f32342d3234203d3e20313334353433.roa
Signing time: Wed 27 May 2026 07:39:04 +0000
ROA not before: Wed 27 May 2026 07:34:04 +0000
ROA not after: Wed 26 May 2027 07:39:04 +0000
asID: 134543
IP address blocks: 211.99.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl
rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:14:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:f7:b6:20:ac:ad:2d:9a:34:9a:85:d0:5e:79:1c:18:93:c1:a0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
Validity
Not Before: May 27 07:34:04 2026 GMT
Not After : May 26 07:39:04 2027 GMT
Subject: CN=2E9D707FD3AB5A49E39DF5CB21EA2E580468A89F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:cc:6a:f0:d5:d3:b3:6d:24:59:83:f5:98:
36:8d:dc:50:2c:81:1b:d1:c8:f7:a0:f8:b8:3e:7e:
44:4e:c3:61:d7:94:ac:0b:bb:30:2c:56:87:99:29:
45:b7:2d:a4:ce:53:16:eb:2c:60:7b:af:e2:48:b6:
33:d5:1f:c3:67:ec:38:78:c6:81:29:04:8f:59:aa:
a8:1e:57:9a:4d:e9:4a:4b:a0:ec:bd:d5:23:38:4a:
05:60:1c:d2:65:04:df:b7:8b:96:9a:d5:de:35:23:
7f:ae:48:73:d8:72:fa:bf:63:7f:9a:9c:65:06:6d:
f0:8d:e2:12:ad:3c:b1:5c:fb:e4:da:de:bd:0c:02:
99:fd:e9:23:a1:3a:da:f0:5c:c0:4a:79:46:8d:2c:
48:af:b3:58:8e:6c:8a:f0:78:b8:1c:f3:6c:a1:fe:
1e:bf:d6:96:75:1d:2c:c5:11:26:9e:c5:56:ba:8c:
5c:c4:eb:e4:cf:12:fd:04:95:e0:2e:e5:68:40:cd:
54:64:e6:23:97:0d:68:80:ae:4d:7d:b3:1b:21:ea:
fe:44:e9:18:56:f6:73:83:d9:92:df:5a:c2:88:4e:
f3:7f:9d:59:7f:3f:15:85:0a:6f:36:18:aa:80:66:
a8:3c:96:98:59:41:ec:e8:24:eb:1e:22:10:0b:a9:
66:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9D:70:7F:D3:AB:5A:49:E3:9D:F5:CB:21:EA:2E:58:04:68:A8:9F
X509v3 Authority Key Identifier:
keyid:53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e39392e302f32342d3234203d3e20313334353433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.99.99.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:98:29:78:3e:c0:7a:38:3c:52:0c:3b:21:69:4d:47:36:82:
32:e2:87:b7:1a:2b:b7:d6:40:eb:e4:fa:37:c8:5a:39:bc:66:
77:1b:f7:ea:04:9e:66:15:89:1f:b7:a5:ba:ea:2e:c3:f5:1c:
08:96:61:0d:5d:52:72:72:6c:96:37:20:a0:51:f7:32:5e:37:
42:79:c9:99:ca:c1:d7:19:0e:bf:63:39:45:78:1c:37:e0:7f:
92:7b:e2:9e:d9:d2:f2:fb:7e:2d:90:d4:fd:ed:7b:a4:69:34:
d1:fb:21:47:bf:fc:0e:6a:e9:2d:f9:7a:22:72:44:27:dd:ff:
03:fb:08:cb:29:64:c4:46:f8:1c:61:0e:3e:f9:ec:6d:89:20:
de:73:2f:fc:64:d5:78:ef:17:4f:fa:73:4b:47:30:ad:03:85:
0c:72:ee:d5:dd:c1:b8:e2:34:7f:c7:b0:53:eb:f0:29:10:b2:
f7:9d:d9:63:81:0b:09:2b:a9:86:aa:48:3c:e4:ad:6a:73:98:
af:b7:39:12:08:d0:92:6a:6a:29:7a:dc:b5:f3:b8:52:b6:e1:
73:93:19:fc:cf:c0:40:78:da:91:89:f9:15:4d:a1:06:86:a0:
61:3f:9b:3c:32:fc:b4:32:5f:61:80:60:c4:94:76:51:2b:d0:
d1:88:fb:4a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:53:28 2026 by rpki-client