
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111933397845934097/0/3231382e39382e3130382e302f32332d3233203d3e20313333373735.roa
File: 3231382e39382e3130382e302f32332d3233203d3e20313333373735.roa (raw, json)
Hash identifier: IWn/1FjVC/Ve6ouyQMwKRXZedJAVOpuXj2yM35x+SQc=
Subject key identifier: 26:9D:32:9A:AC:96:2F:B2:E8:46:9C:9F:91:12:D3:D8:11:85:39:B4
Certificate issuer: /CN=E75349FBEA39CFED65BB280A32055EB716679089
Certificate serial: 4626825584D93AD3B72AE027DA9ABBA17BEF7E9D
Authority key identifier: E7:53:49:FB:EA:39:CF:ED:65:BB:28:0A:32:05:5E:B7:16:67:90:89
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E75349FBEA39CFED65BB280A32055EB716679089.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/3231382e39382e3130382e302f32332d3233203d3e20313333373735.roa
Signing time: Wed 27 May 2026 08:32:06 +0000
ROA not before: Wed 27 May 2026 08:27:06 +0000
ROA not after: Wed 26 May 2027 08:32:06 +0000
asID: 133775
IP address blocks: 218.98.108.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/E75349FBEA39CFED65BB280A32055EB716679089.crl
rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/E75349FBEA39CFED65BB280A32055EB716679089.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E75349FBEA39CFED65BB280A32055EB716679089.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 14:44:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:26:82:55:84:d9:3a:d3:b7:2a:e0:27:da:9a:bb:a1:7b:ef:7e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E75349FBEA39CFED65BB280A32055EB716679089
Validity
Not Before: May 27 08:27:06 2026 GMT
Not After : May 26 08:32:06 2027 GMT
Subject: CN=269D329AAC962FB2E8469C9F9112D3D8118539B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:71:be:bb:29:b0:d1:d2:f2:4c:90:ff:63:97:
1c:8c:a9:7a:b2:23:50:9d:e8:a4:59:38:ad:c6:26:
bd:ee:6f:f9:25:19:98:d0:8e:f8:c2:db:b0:5a:e4:
e4:4d:e8:8b:ea:bb:1b:78:7c:b5:8e:d0:29:8b:8e:
d0:9c:82:04:89:31:ba:75:ab:18:1f:b2:ad:28:31:
73:3c:98:48:e4:76:ab:fb:a8:6c:07:5f:2d:6e:b9:
c2:f6:95:02:6f:8e:7f:50:e4:6e:d5:ae:90:99:64:
47:5e:97:26:be:b3:6a:d9:7c:c9:8d:bf:43:71:20:
ac:65:f8:32:bc:78:e5:36:96:03:e4:1e:c2:62:4c:
c3:a9:31:e8:f1:32:8b:f1:83:76:7a:c5:37:9c:55:
84:91:d1:bf:28:22:19:db:98:60:ca:11:d9:33:e9:
04:fd:70:56:31:7d:f4:4b:6f:c2:92:c5:16:41:4c:
96:42:99:08:25:80:ac:03:63:b3:53:e0:a4:ce:3f:
48:d3:2f:21:27:04:7b:d3:82:b4:75:b2:87:71:1f:
49:85:e9:6e:a5:e6:f5:ee:6e:d6:48:51:de:1a:96:
82:73:88:e8:3a:5b:4e:69:1e:89:5b:66:27:96:94:
f0:88:82:d0:4c:e5:0d:9f:9c:1e:30:3a:7e:05:a9:
e3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9D:32:9A:AC:96:2F:B2:E8:46:9C:9F:91:12:D3:D8:11:85:39:B4
X509v3 Authority Key Identifier:
keyid:E7:53:49:FB:EA:39:CF:ED:65:BB:28:0A:32:05:5E:B7:16:67:90:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/E75349FBEA39CFED65BB280A32055EB716679089.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E75349FBEA39CFED65BB280A32055EB716679089.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/3231382e39382e3130382e302f32332d3233203d3e20313333373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.98.108.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:f5:07:db:03:9f:88:34:ee:a4:ba:ee:28:dd:ac:09:c7:7f:
d2:1c:67:62:b3:c2:6e:2b:49:92:56:93:b8:81:e5:c3:33:ca:
cd:59:5e:3e:72:ac:82:f4:44:15:d3:74:ef:50:c6:b9:cf:a6:
8b:c1:5a:4b:b0:74:5e:e7:78:87:ce:74:c2:f6:55:11:b1:62:
5b:0b:85:a0:32:27:a6:59:0a:3f:40:47:8e:c2:e3:a9:28:65:
7b:36:f3:3c:08:a1:7b:58:b6:18:cb:0d:b0:ac:05:d4:b1:fd:
54:47:5e:1f:86:9a:15:09:4e:6a:68:93:a0:34:4a:d9:67:97:
8b:0a:81:19:f2:64:3e:56:3d:52:1e:7d:d9:75:c3:bc:0f:02:
df:34:7a:91:c0:da:12:09:d1:0b:6a:77:cc:12:b7:f6:bf:03:
60:f8:93:e7:eb:55:27:e6:92:d8:42:9c:4b:60:1e:f0:9b:cb:
f7:53:af:f3:68:50:12:5f:66:77:7f:75:a4:db:01:6f:09:7b:
36:3b:02:5e:9c:37:fa:ae:35:9c:e7:65:8d:10:4d:00:e8:ee:
50:3d:7b:82:02:72:66:e1:98:56:75:5b:df:b3:a6:a1:e9:2a:
de:0f:9d:83:f0:a2:33:05:68:89:ef:88:04:16:54:79:0d:b7:
d8:ae:ea:7b
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIURiaCVYTZOtO3KuAn2pq7oXvvfp0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc1MzQ5RkJFQTM5Q0ZFRDY1QkIyODBBMzIwNTVFQjcx
NjY3OTA4OTAeFw0yNjA1MjcwODI3MDZaFw0yNzA1MjYwODMyMDZaMDMxMTAvBgNV
BAMTKDI2OUQzMjlBQUM5NjJGQjJFODQ2OUM5RjkxMTJEM0Q4MTE4NTM5QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWcb67KbDR0vJMkP9jlxyMqXqy
I1Cd6KRZOK3GJr3ub/klGZjQjvjC27Ba5ORN6Ivquxt4fLWO0CmLjtCcggSJMbp1
qxgfsq0oMXM8mEjkdqv7qGwHXy1uucL2lQJvjn9Q5G7VrpCZZEdelya+s2rZfMmN
v0NxIKxl+DK8eOU2lgPkHsJiTMOpMejxMovxg3Z6xTecVYSR0b8oIhnbmGDKEdkz
6QT9cFYxffRLb8KSxRZBTJZCmQglgKwDY7NT4KTOP0jTLyEnBHvTgrR1sodxH0mF
6W6l5vXubtZIUd4aloJziOg6W05pHolbZieWlPCIgtBM5Q2fnB4wOn4FqeOjAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUJp0ymqyWL7LoRpyfkRLT2BGFObQwHwYDVR0j
BBgwFoAU51NJ++o5z+1luygKMgVetxZnkIkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MTkzMzM5Nzg0NTkzNDA5Ny8wL0U3NTM0OUZCRUEzOUNGRUQ2NUJCMjgwQTMyMDU1
RUI3MTY2NzkwODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTc1MzQ5RkJFQTM5Q0ZFRDY1QkIyODBBMzIwNTVFQjcxNjY3OTA4OS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMTE5MzMzOTc4NDU5MzQwOTcvMC8zMjMxMzgyZTM5
MzgyZTMxMzAzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzMzMzM3MzczNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAdpibDANBgkqhkiG9w0BAQsFAAOCAQEATvUH2wOfiDTupLruKN2s
Ccd/0hxnYrPCbitJklaTuIHlwzPKzVlePnKsgvREFdN071DGuc+mi8FaS7B0Xud4
h850wvZVEbFiWwuFoDInplkKP0BHjsLjqShlezbzPAihe1i2GMsNsKwF1LH9VEde
H4aaFQlOamiToDRK2WeXiwqBGfJkPlY9Uh592XXDvA8C3zR6kcDaEgnRC2p3zBK3
9r8DYPiT5+tVJ+aS2EKcS2Ae8JvL91Ov82hQEl9md391pNsBbwl7NjsCXpw3+q41
nOdljRBNAOjuUD17ggJyZuGYVnVb37Omoekq3g+dg/CiMwVoie+IBBZUeQ232K7q
ew==
-----END CERTIFICATE-----
Generated at Fri May 29 22:56:50 2026 by rpki-client