
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111933397845934097/0/3231382e39382e3131322e302f32302d3230203d3e20313333373735.roa
File: 3231382e39382e3131322e302f32302d3230203d3e20313333373735.roa (raw, json)
Hash identifier: oTBpZ1lYFAVAa+TpQHlV1QyU6hMI+j5PSL+Z0nIRy7E=
Subject key identifier: 86:24:E1:0F:95:E2:CA:CC:4F:43:22:FF:A7:C2:AD:C6:9F:96:3C:1E
Certificate issuer: /CN=E75349FBEA39CFED65BB280A32055EB716679089
Certificate serial: 59B0C3AA83C2436DD0CFA128F76AAA8B565FA83F
Authority key identifier: E7:53:49:FB:EA:39:CF:ED:65:BB:28:0A:32:05:5E:B7:16:67:90:89
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E75349FBEA39CFED65BB280A32055EB716679089.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/3231382e39382e3131322e302f32302d3230203d3e20313333373735.roa
Signing time: Wed 03 Jun 2026 08:52:53 +0000
ROA not before: Wed 03 Jun 2026 08:47:53 +0000
ROA not after: Wed 02 Jun 2027 08:52:53 +0000
asID: 133775
IP address blocks: 218.98.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/E75349FBEA39CFED65BB280A32055EB716679089.crl
rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/E75349FBEA39CFED65BB280A32055EB716679089.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E75349FBEA39CFED65BB280A32055EB716679089.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 09:27:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:b0:c3:aa:83:c2:43:6d:d0:cf:a1:28:f7:6a:aa:8b:56:5f:a8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E75349FBEA39CFED65BB280A32055EB716679089
Validity
Not Before: Jun 3 08:47:53 2026 GMT
Not After : Jun 2 08:52:53 2027 GMT
Subject: CN=8624E10F95E2CACC4F4322FFA7C2ADC69F963C1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fd:e3:21:35:b0:c1:23:35:12:70:38:4e:7c:
b8:92:18:75:47:79:2c:e4:41:9d:b3:2f:a0:c3:a4:
48:50:f2:a2:65:71:39:f9:54:d8:9e:26:67:79:fc:
3e:35:26:da:84:4b:11:67:04:26:08:8b:1b:63:45:
31:24:5a:ef:46:9d:04:40:47:22:05:67:6c:0d:44:
d2:c2:85:5b:c3:0b:ec:57:88:46:b0:fd:f6:db:d7:
ab:78:50:08:e7:79:bd:db:93:a1:d1:d5:2a:e6:de:
2f:fe:c7:e7:84:b3:fa:d3:a6:1b:ba:91:21:16:1d:
e4:eb:44:78:f2:8b:67:ba:53:a5:3b:9d:19:c0:20:
1d:5d:c1:97:90:a4:87:18:2d:ec:a9:2f:84:e7:23:
66:36:aa:af:4c:29:40:92:42:aa:08:91:65:4d:2e:
8d:b4:ba:ea:ed:0d:4b:40:5c:8e:0f:db:21:fb:64:
62:82:31:49:ae:b5:66:ed:60:57:2e:94:b9:94:3f:
72:d9:d5:d9:a3:2d:ff:59:92:9e:68:89:93:62:0e:
41:0f:7b:5f:39:ff:04:4d:46:56:8f:6b:62:f3:68:
17:c4:45:f7:a1:55:05:52:d7:1d:51:e3:7d:92:39:
e0:4f:c1:1f:68:10:44:d7:91:7a:8f:17:0c:08:37:
95:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:24:E1:0F:95:E2:CA:CC:4F:43:22:FF:A7:C2:AD:C6:9F:96:3C:1E
X509v3 Authority Key Identifier:
keyid:E7:53:49:FB:EA:39:CF:ED:65:BB:28:0A:32:05:5E:B7:16:67:90:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/E75349FBEA39CFED65BB280A32055EB716679089.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E75349FBEA39CFED65BB280A32055EB716679089.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/3231382e39382e3131322e302f32302d3230203d3e20313333373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.98.112.0/20
Signature Algorithm: sha256WithRSAEncryption
8a:90:ca:5d:57:48:91:e6:45:1e:d0:49:9e:f5:f1:53:a2:9b:
97:07:71:f0:af:45:05:15:50:6d:00:cd:b0:2a:64:9d:60:4c:
b2:f6:7a:bf:0d:23:52:46:51:dd:75:f8:23:2c:55:05:e5:85:
7c:77:d7:5e:6e:89:6b:9f:d9:5b:db:d0:c1:d5:b1:04:9a:e7:
81:cd:8f:32:1e:90:e1:27:7d:3e:c2:2d:c9:9a:3d:27:e0:c3:
47:6c:6d:c1:4b:f4:72:2b:18:ea:5b:99:38:8c:80:ac:59:c6:
74:94:7f:19:03:06:c6:ca:99:08:16:ec:09:8a:79:72:a1:e8:
3f:90:df:2d:48:3a:98:45:79:0e:70:7a:53:39:25:87:a8:b2:
4d:8f:66:9b:f8:4e:a8:3e:96:f9:09:eb:05:c8:fb:4d:c9:21:
84:e9:cc:91:9a:f7:7d:79:62:f9:97:77:24:eb:b2:cd:cc:59:
de:b4:b7:2e:ab:02:c4:27:a7:1c:3d:b5:7e:85:c7:18:57:9c:
e6:c0:d9:1b:00:2f:0d:ac:4d:fc:83:4c:4f:c7:e3:73:5b:e7:
40:53:ff:db:5b:3e:ac:f0:49:5d:fa:1a:ed:9d:98:a9:91:f6:
c0:ad:4b:4e:ba:a6:fb:63:95:b6:93:65:33:aa:c7:ff:00:e3:
27:c5:de:1a
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUWbDDqoPCQ23Qz6Eo92qqi1ZfqD8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc1MzQ5RkJFQTM5Q0ZFRDY1QkIyODBBMzIwNTVFQjcx
NjY3OTA4OTAeFw0yNjA2MDMwODQ3NTNaFw0yNzA2MDIwODUyNTNaMDMxMTAvBgNV
BAMTKDg2MjRFMTBGOTVFMkNBQ0M0RjQzMjJGRkE3QzJBREM2OUY5NjNDMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL/eMhNbDBIzUScDhOfLiSGHVH
eSzkQZ2zL6DDpEhQ8qJlcTn5VNieJmd5/D41JtqESxFnBCYIixtjRTEkWu9GnQRA
RyIFZ2wNRNLChVvDC+xXiEaw/fbb16t4UAjneb3bk6HR1Srm3i/+x+eEs/rTphu6
kSEWHeTrRHjyi2e6U6U7nRnAIB1dwZeQpIcYLeypL4TnI2Y2qq9MKUCSQqoIkWVN
Lo20uurtDUtAXI4P2yH7ZGKCMUmutWbtYFculLmUP3LZ1dmjLf9Zkp5oiZNiDkEP
e185/wRNRlaPa2LzaBfERfehVQVS1x1R432SOeBPwR9oEETXkXqPFwwIN5UhAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUhiThD5XiysxPQyL/p8Ktxp+WPB4wHwYDVR0j
BBgwFoAU51NJ++o5z+1luygKMgVetxZnkIkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MTkzMzM5Nzg0NTkzNDA5Ny8wL0U3NTM0OUZCRUEzOUNGRUQ2NUJCMjgwQTMyMDU1
RUI3MTY2NzkwODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTc1MzQ5RkJFQTM5Q0ZFRDY1QkIyODBBMzIwNTVFQjcxNjY3OTA4OS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMTE5MzMzOTc4NDU5MzQwOTcvMC8zMjMxMzgyZTM5
MzgyZTMxMzEzMjJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMxMzMzMzM3MzczNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEBNpicDANBgkqhkiG9w0BAQsFAAOCAQEAipDKXVdIkeZFHtBJnvXx
U6Kblwdx8K9FBRVQbQDNsCpknWBMsvZ6vw0jUkZR3XX4IyxVBeWFfHfXXm6Ja5/Z
W9vQwdWxBJrngc2PMh6Q4Sd9PsItyZo9J+DDR2xtwUv0cisY6luZOIyArFnGdJR/
GQMGxsqZCBbsCYp5cqHoP5DfLUg6mEV5DnB6Uzklh6iyTY9mm/hOqD6W+QnrBcj7
TckhhOnMkZr3fXli+Zd3JOuyzcxZ3rS3LqsCxCenHD21foXHGFec5sDZGwAvDaxN
/INMT8fjc1vnQFP/21s+rPBJXfoa7Z2YqZH2wK1LTrqm+2OVtpNlM6rH/wDjJ8Xe
Gg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:49 2026 by rpki-client