
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111933397845934097/0/3231382e39382e3131312e302f32342d3234203d3e20313333373735.roa
File: 3231382e39382e3131312e302f32342d3234203d3e20313333373735.roa (raw, json)
Hash identifier: PyjsVc29vH+WAHaFi130UxuQPwFZBKESzFccONcvJdU=
Subject key identifier: 18:AD:AF:4B:CC:B6:B8:F5:8A:0E:65:8E:8F:1F:E7:B3:9A:10:D3:66
Certificate issuer: /CN=E75349FBEA39CFED65BB280A32055EB716679089
Certificate serial: 4A913D30F9A9D9B5F9E0B05B4826B92D723257D5
Authority key identifier: E7:53:49:FB:EA:39:CF:ED:65:BB:28:0A:32:05:5E:B7:16:67:90:89
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E75349FBEA39CFED65BB280A32055EB716679089.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/3231382e39382e3131312e302f32342d3234203d3e20313333373735.roa
Signing time: Tue 16 Jun 2026 07:10:53 +0000
ROA not before: Tue 16 Jun 2026 07:05:53 +0000
ROA not after: Tue 15 Jun 2027 07:10:53 +0000
asID: 133775
IP address blocks: 218.98.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/E75349FBEA39CFED65BB280A32055EB716679089.crl
rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/E75349FBEA39CFED65BB280A32055EB716679089.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E75349FBEA39CFED65BB280A32055EB716679089.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 19:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:91:3d:30:f9:a9:d9:b5:f9:e0:b0:5b:48:26:b9:2d:72:32:57:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E75349FBEA39CFED65BB280A32055EB716679089
Validity
Not Before: Jun 16 07:05:53 2026 GMT
Not After : Jun 15 07:10:53 2027 GMT
Subject: CN=18ADAF4BCCB6B8F58A0E658E8F1FE7B39A10D366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:23:60:be:e3:cb:d8:44:9d:b0:ca:61:af:f5:
bf:c4:61:bf:d5:ed:5f:d3:51:47:6c:85:eb:06:5f:
84:d4:6a:ac:60:19:24:ad:c9:60:07:e3:f9:b5:eb:
ad:15:77:5c:11:d0:90:ea:84:5b:f0:78:98:76:23:
77:0d:70:d2:fd:25:78:73:b1:10:89:42:0a:1a:da:
4b:a0:8b:ae:b9:42:36:38:f0:fd:24:3a:3a:93:f4:
40:f7:95:cf:0e:c8:d2:6b:03:ed:50:e9:22:f3:94:
b9:8c:5a:b9:4a:d0:33:0b:a6:5a:d4:6b:88:40:58:
ba:61:df:10:a6:78:cf:98:ed:41:5d:9e:cf:77:66:
62:70:19:9c:74:f2:be:c4:fc:ae:c6:20:6e:95:26:
03:dd:9e:63:11:a6:a8:31:9a:2a:ca:82:4c:ab:6e:
f6:85:08:23:4f:fa:d3:5a:8c:d2:04:bc:d7:40:c8:
be:0e:12:c6:ec:c0:15:63:f6:5a:88:44:e7:8c:8b:
2f:60:cd:19:8c:48:33:ab:9c:1d:8e:54:12:dd:f6:
1a:13:1b:1d:36:40:89:3e:cc:28:a5:c0:5f:05:6f:
5d:2c:e1:98:0b:89:4d:9b:8d:4e:8a:40:36:2b:53:
04:91:dc:5c:8a:2b:b7:c1:94:e1:02:57:2b:05:29:
70:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AD:AF:4B:CC:B6:B8:F5:8A:0E:65:8E:8F:1F:E7:B3:9A:10:D3:66
X509v3 Authority Key Identifier:
keyid:E7:53:49:FB:EA:39:CF:ED:65:BB:28:0A:32:05:5E:B7:16:67:90:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/E75349FBEA39CFED65BB280A32055EB716679089.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E75349FBEA39CFED65BB280A32055EB716679089.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/3231382e39382e3131312e302f32342d3234203d3e20313333373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.98.111.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:68:92:5f:68:eb:62:eb:c7:83:a7:84:35:22:f6:f2:14:c8:
a5:08:ef:95:77:6b:d3:5d:a3:1a:dc:23:2a:0a:11:39:5a:01:
95:4a:5d:63:40:93:88:c0:37:3f:fb:94:83:2a:fc:7c:c7:a0:
6f:7c:1d:01:af:99:c8:87:a2:8f:f2:68:d5:1c:32:c2:29:ad:
3f:b6:ee:fc:e8:fd:62:55:ae:6a:d3:a2:83:5d:f2:87:34:b9:
7d:f2:dc:77:64:75:db:aa:be:e5:5e:0a:48:9e:6b:f9:a6:13:
45:f3:29:f4:e1:8a:37:08:d5:82:77:e1:51:ec:b1:06:97:0a:
7f:45:f8:3b:5e:83:1a:f4:79:7f:81:65:35:fe:d4:a6:70:9e:
03:0d:55:30:35:09:93:61:0b:7b:f8:e7:7f:74:e4:34:26:87:
7e:4f:02:d8:56:a2:9a:9d:7b:6d:6f:a5:1d:18:dd:85:4d:4b:
57:68:0c:fb:19:79:d1:f1:85:23:47:2e:fb:df:3b:00:86:fa:
c9:63:c5:e1:6d:6a:57:a6:b5:99:5a:91:b8:d9:7a:1c:af:32:
26:f5:75:c8:86:a8:17:b0:d3:f5:02:d7:4c:d8:03:53:3d:8c:
ff:ee:81:d6:9c:db:04:d8:0b:c6:55:77:7d:81:a7:57:e2:84:
bb:f2:c8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 21:04:00 2026 by rpki-client