
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112577106547572755/0/3131362e3139392e36342e302f31382d3138203d3e203137363232.roa
File: 3131362e3139392e36342e302f31382d3138203d3e203137363232.roa (raw, json)
Hash identifier: Ab3mbR+nsYksyMo8NYIdSU8Jg6oJ3rvP9EcATNaXFgA=
Subject key identifier: 70:EF:AC:40:92:49:A5:BA:44:05:FF:FD:F8:FC:05:6A:E6:BE:05:3E
Certificate issuer: /CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
Certificate serial: 60D753449522146ADE2B6B0C46D6F8DA3B2643F0
Authority key identifier: FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/3131362e3139392e36342e302f31382d3138203d3e203137363232.roa
Signing time: Fri 29 May 2026 08:08:28 +0000
ROA not before: Fri 29 May 2026 08:03:28 +0000
ROA not after: Fri 28 May 2027 08:08:28 +0000
asID: 17622
IP address blocks: 116.199.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl
rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:d7:53:44:95:22:14:6a:de:2b:6b:0c:46:d6:f8:da:3b:26:43:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
Validity
Not Before: May 29 08:03:28 2026 GMT
Not After : May 28 08:08:28 2027 GMT
Subject: CN=70EFAC409249A5BA4405FFFDF8FC056AE6BE053E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e4:15:10:08:c9:6a:c7:76:b6:96:7a:37:e1:
e3:a8:c9:60:34:b7:29:b6:a3:02:fd:46:71:17:5a:
84:1e:13:40:c3:96:82:40:86:2a:33:52:f6:a3:34:
b2:31:c0:68:8c:62:9a:d1:31:7d:e5:80:94:43:fc:
10:22:54:f9:aa:1c:87:34:b8:a3:aa:3c:2e:53:87:
b8:24:d3:23:c6:fb:bf:76:be:9e:71:98:54:2f:db:
82:8f:34:af:d9:89:f3:b0:ab:a6:7c:e7:18:cc:24:
d9:88:25:ec:e7:15:17:77:c2:a6:fe:0f:67:fe:5e:
5e:8b:26:b0:a7:4a:bb:e7:89:cf:60:cc:41:9c:df:
b9:2d:74:57:d8:b7:cb:af:bd:1c:20:f4:04:e2:cc:
d1:14:6d:40:2b:e4:f2:71:6a:69:a7:fb:91:23:f0:
23:64:a4:99:3d:38:76:17:d7:18:c3:09:8a:75:1f:
4f:cc:38:88:ae:a7:6a:38:ad:9c:e5:83:9c:80:b1:
36:6e:f1:8c:2c:97:89:ff:0b:92:71:ff:f7:7f:5f:
8d:d6:db:3d:0b:0d:cb:5e:fd:31:e7:fd:d7:56:a4:
5a:0d:90:1d:e4:58:dd:5a:fb:1a:ef:03:2b:22:9e:
34:fa:0b:77:1f:ad:f5:36:4a:cb:be:0d:53:21:a4:
8d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EF:AC:40:92:49:A5:BA:44:05:FF:FD:F8:FC:05:6A:E6:BE:05:3E
X509v3 Authority Key Identifier:
keyid:FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/3131362e3139392e36342e302f31382d3138203d3e203137363232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.199.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4d:b9:93:b4:27:a6:0e:15:a2:cc:93:e7:fc:3a:ad:3e:ee:88:
a1:6a:5d:17:67:83:48:1d:37:0b:72:b1:e5:dd:92:7c:7a:bb:
c0:a7:6c:ce:b3:f7:0b:1f:5c:8e:07:12:11:bd:f0:27:92:46:
9a:43:08:4f:4a:77:b3:7c:36:e6:76:3e:82:47:53:22:6b:e6:
b9:b7:5a:d1:f4:d4:5a:d7:b9:4d:ff:3b:09:17:f7:b7:8d:ec:
99:f9:3d:77:55:0e:0d:2c:42:c0:8f:23:67:fe:14:64:0f:c7:
02:81:c7:96:58:df:78:c4:7e:1b:c9:07:e1:cd:94:60:0c:29:
36:8a:ec:bd:86:d6:08:fb:d8:77:93:d7:ee:f4:47:8e:33:87:
4c:86:c5:70:b8:9c:d6:ec:2c:86:e1:8d:2d:c7:70:d0:4c:9e:
bf:08:31:b9:9c:55:6c:34:40:04:ef:2c:f7:c6:b6:f4:e7:9d:
28:b8:6c:0b:0c:06:ff:24:1b:52:98:a3:42:9b:cb:c8:26:bf:
e5:d7:ba:30:83:46:7a:79:9c:db:41:2b:54:8b:91:b4:7b:98:
51:f8:b1:03:68:28:f6:69:d8:e8:8c:a2:0c:b6:71:25:47:49:
dd:07:d2:a6:ce:85:9b:13:4a:14:f2:4a:53:e1:33:d1:36:2e:
76:97:91:52
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:54:30 2026 by rpki-client