
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111933397845934097/0/3231382e39382e3131312e302f32342d3234203d3e2039383038.roa
File: 3231382e39382e3131312e302f32342d3234203d3e2039383038.roa (raw, json)
Hash identifier: EpVBZu7bYfroNpYCq5mOl2kRv2i9yx7PJIZq+OWr3fU=
Subject key identifier: 8B:BC:67:C5:2E:A9:72:48:05:45:0D:6F:3B:40:0E:11:F1:C2:22:11
Certificate issuer: /CN=E75349FBEA39CFED65BB280A32055EB716679089
Certificate serial: 43C550F29B3F213DE8335342649BCAD5593D7914
Authority key identifier: E7:53:49:FB:EA:39:CF:ED:65:BB:28:0A:32:05:5E:B7:16:67:90:89
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E75349FBEA39CFED65BB280A32055EB716679089.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/3231382e39382e3131312e302f32342d3234203d3e2039383038.roa
Signing time: Tue 16 Jun 2026 07:10:53 +0000
ROA not before: Tue 16 Jun 2026 07:05:53 +0000
ROA not after: Tue 15 Jun 2027 07:10:53 +0000
asID: 9808
IP address blocks: 218.98.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/E75349FBEA39CFED65BB280A32055EB716679089.crl
rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/E75349FBEA39CFED65BB280A32055EB716679089.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E75349FBEA39CFED65BB280A32055EB716679089.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 19:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:c5:50:f2:9b:3f:21:3d:e8:33:53:42:64:9b:ca:d5:59:3d:79:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E75349FBEA39CFED65BB280A32055EB716679089
Validity
Not Before: Jun 16 07:05:53 2026 GMT
Not After : Jun 15 07:10:53 2027 GMT
Subject: CN=8BBC67C52EA9724805450D6F3B400E11F1C22211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a7:a0:e1:75:86:af:a7:e3:d5:51:0e:30:f6:
99:40:9f:69:27:77:3a:38:14:4f:60:46:88:a7:bb:
dd:05:a5:a5:51:f1:d1:eb:14:ba:6d:ba:64:88:6f:
6c:e0:b1:28:cf:91:1d:02:bf:b6:12:f0:31:59:ff:
cb:34:b9:3e:9b:ab:71:a1:22:7d:b7:2f:85:82:17:
a6:8c:b6:41:04:85:e7:d6:d1:36:0f:65:96:4f:20:
0c:06:e8:5c:5b:45:1a:77:1d:fb:4e:07:e4:8f:82:
6d:01:21:43:7f:53:5b:e7:b5:43:f5:37:d6:66:ab:
eb:f7:01:22:a7:e3:98:e7:81:c2:3a:f8:9a:37:c3:
f5:3d:2b:5f:6b:69:48:69:2e:98:40:0e:2c:36:63:
2c:2b:af:2c:ad:34:ad:ab:0d:9b:4b:4e:ba:ed:0e:
48:14:2f:f1:72:ef:1a:4d:9c:ab:e5:71:3b:c9:32:
26:cb:ba:76:15:71:d3:79:b0:4a:a5:f0:fb:07:fb:
52:a1:88:67:b1:b9:2e:b2:43:39:7a:37:25:cb:e3:
7a:68:de:e1:cf:9b:c2:67:73:06:c1:a4:40:37:d0:
91:2a:d1:d5:45:72:f0:a6:6c:8a:52:0f:1b:0a:ac:
4b:cc:45:24:d2:f8:c2:f4:8b:88:a0:01:00:d3:40:
cf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BC:67:C5:2E:A9:72:48:05:45:0D:6F:3B:40:0E:11:F1:C2:22:11
X509v3 Authority Key Identifier:
keyid:E7:53:49:FB:EA:39:CF:ED:65:BB:28:0A:32:05:5E:B7:16:67:90:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/E75349FBEA39CFED65BB280A32055EB716679089.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E75349FBEA39CFED65BB280A32055EB716679089.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/3231382e39382e3131312e302f32342d3234203d3e2039383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.98.111.0/24
Signature Algorithm: sha256WithRSAEncryption
13:69:93:75:96:0e:b3:92:33:02:bc:b2:87:8b:11:0f:da:e1:
91:68:3a:ae:8d:55:66:09:2d:f8:ba:74:2f:43:09:ca:1f:2e:
dc:f1:c1:3b:21:06:6b:c9:4f:ca:46:e7:e0:c3:08:ea:d0:49:
ad:51:ad:b3:5a:92:78:76:79:a4:f1:7d:9d:3b:ef:1d:03:a5:
41:17:9b:8a:08:33:3d:d1:bf:28:d7:0b:68:a6:16:4b:78:40:
fd:20:6a:27:29:d4:d9:80:e1:0e:33:82:4d:a9:87:67:c8:a9:
f3:f5:5f:1e:df:ed:9f:64:d3:d1:b3:69:a9:5c:b6:c4:4c:cb:
7e:ac:29:40:0c:18:7e:de:3c:8d:8a:63:f7:6c:03:03:31:0e:
20:da:8e:dc:b3:4d:a0:d2:44:c0:db:4e:08:da:30:bc:0e:6e:
30:55:e7:97:0b:c3:42:7c:fa:32:9e:b1:ba:18:8f:8c:97:1e:
fe:08:1e:c1:c9:56:6f:1d:41:85:89:18:2e:a2:d5:3c:a3:90:
6a:a0:0f:a4:95:1f:f4:a1:20:ad:07:cd:8c:87:5c:82:b3:85:
52:74:66:de:ac:42:24:ce:1f:c8:7d:b1:fa:c1:ab:92:77:62:
39:4f:89:23:2b:27:73:d0:c8:90:bb:9e:e2:5a:6e:29:2a:24:
47:b1:5b:b1
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUQ8VQ8ps/IT3oM1NCZJvK1Vk9eRQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc1MzQ5RkJFQTM5Q0ZFRDY1QkIyODBBMzIwNTVFQjcx
NjY3OTA4OTAeFw0yNjA2MTYwNzA1NTNaFw0yNzA2MTUwNzEwNTNaMDMxMTAvBgNV
BAMTKDhCQkM2N0M1MkVBOTcyNDgwNTQ1MEQ2RjNCNDAwRTExRjFDMjIyMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxp6DhdYavp+PVUQ4w9plAn2kn
dzo4FE9gRoinu90FpaVR8dHrFLptumSIb2zgsSjPkR0Cv7YS8DFZ/8s0uT6bq3Gh
In23L4WCF6aMtkEEhefW0TYPZZZPIAwG6FxbRRp3HftOB+SPgm0BIUN/U1vntUP1
N9Zmq+v3ASKn45jngcI6+Jo3w/U9K19raUhpLphADiw2YywrryytNK2rDZtLTrrt
DkgUL/Fy7xpNnKvlcTvJMibLunYVcdN5sEql8PsH+1KhiGexuS6yQzl6NyXL43po
3uHPm8JncwbBpEA30JEq0dVFcvCmbIpSDxsKrEvMRSTS+ML0i4igAQDTQM/BAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUi7xnxS6pckgFRQ1vO0AOEfHCIhEwHwYDVR0j
BBgwFoAU51NJ++o5z+1luygKMgVetxZnkIkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MTkzMzM5Nzg0NTkzNDA5Ny8wL0U3NTM0OUZCRUEzOUNGRUQ2NUJCMjgwQTMyMDU1
RUI3MTY2NzkwODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTc1MzQ5RkJFQTM5Q0ZFRDY1QkIyODBBMzIwNTVFQjcxNjY3OTA4OS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTExOTMzMzk3ODQ1OTM0MDk3LzAvMzIzMTM4MmUzOTM4
MmUzMTMxMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTM4MzAzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANpibzANBgkqhkiG9w0BAQsFAAOCAQEAE2mTdZYOs5IzAryyh4sRD9rhkWg6
ro1VZgkt+Lp0L0MJyh8u3PHBOyEGa8lPykbn4MMI6tBJrVGts1qSeHZ5pPF9nTvv
HQOlQRebiggzPdG/KNcLaKYWS3hA/SBqJynU2YDhDjOCTamHZ8ip8/VfHt/tn2TT
0bNpqVy2xEzLfqwpQAwYft48jYpj92wDAzEOINqO3LNNoNJEwNtOCNowvA5uMFXn
lwvDQnz6Mp6xuhiPjJce/ggewclWbx1BhYkYLqLVPKOQaqAPpJUf9KEgrQfNjIdc
grOFUnRm3qxCJM4fyH2x+sGrkndiOU+JIysnc9DIkLue4lpuKSokR7FbsQ==
-----END CERTIFICATE-----
Generated at Tue Jul 14 21:04:53 2026 by rpki-client