
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3136382e302f32342d3234203d3e203233363530.roa
File: 3231392e38332e3136382e302f32342d3234203d3e203233363530.roa (raw, json)
Hash identifier: +pbh05ttcOvI0bZd+yfcL9FgOrL/gG0Igz+9SGJljQ4=
Subject key identifier: 8C:A6:0A:E9:43:80:A6:95:E3:01:D1:DE:6B:25:75:70:D7:04:F9:56
Certificate issuer: /CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
Certificate serial: 2CCEA018741E9AADC5795D561959E63F47EC483E
Authority key identifier: 71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3136382e302f32342d3234203d3e203233363530.roa
Signing time: Fri 14 Aug 2026 08:07:50 +0000
ROA not before: Fri 14 Aug 2026 08:02:50 +0000
ROA not after: Fri 13 Aug 2027 08:07:50 +0000
asID: 23650
IP address blocks: 219.83.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl
rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 13:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:ce:a0:18:74:1e:9a:ad:c5:79:5d:56:19:59:e6:3f:47:ec:48:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
Validity
Not Before: Aug 14 08:02:50 2026 GMT
Not After : Aug 13 08:07:50 2027 GMT
Subject: CN=8CA60AE94380A695E301D1DE6B257570D704F956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d3:0c:8c:c1:16:27:a8:a9:53:10:11:d0:c9:
7f:23:fe:4a:57:76:1a:b1:f1:71:4d:68:47:a6:f5:
56:26:e3:21:58:f7:51:b3:65:24:79:d6:22:64:f2:
f4:11:1a:52:8a:c0:47:75:36:05:3b:35:b3:b6:99:
aa:cf:f1:c2:10:f4:73:36:85:b7:4d:d9:2b:d0:91:
7e:93:f3:e6:23:51:c3:c4:b6:16:2f:02:fc:d9:15:
69:2d:75:46:9c:d0:a0:3d:46:b6:02:ab:da:c8:9e:
42:98:13:19:33:49:a6:13:0d:29:ef:3d:4e:dd:76:
26:4a:40:ce:0b:d8:6d:f2:22:97:e0:29:d6:17:3d:
7c:b0:4e:25:d4:55:04:19:4e:23:1b:f8:14:04:90:
4d:08:72:e0:98:86:64:07:f6:70:9c:04:f5:59:8f:
f9:6b:c8:45:ea:74:37:09:a9:6b:94:ca:32:75:75:
6b:14:33:1f:ef:82:27:fd:01:a4:2b:01:f4:d4:8f:
4c:a3:5d:cd:c6:cb:d8:ee:3c:eb:1a:a3:89:64:e2:
5c:ff:80:89:3b:f2:52:35:d7:fa:3a:9b:af:99:58:
8e:70:76:78:b2:74:37:fd:e5:5c:71:04:04:ea:c9:
4f:ad:f4:1b:bb:0a:a8:47:82:fd:30:91:17:8e:b0:
20:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A6:0A:E9:43:80:A6:95:E3:01:D1:DE:6B:25:75:70:D7:04:F9:56
X509v3 Authority Key Identifier:
keyid:71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3136382e302f32342d3234203d3e203233363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
219.83.168.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:72:44:40:5f:48:bc:e9:38:12:1f:f3:5d:a4:a5:53:a1:be:
47:ab:77:26:b0:63:20:88:14:9f:b4:02:51:d9:00:77:3b:4a:
74:29:32:67:04:37:c3:9f:f9:70:32:51:b4:9b:0d:12:f7:4d:
c4:86:7f:c7:4a:0c:95:4b:05:6a:57:36:0b:7e:ea:f0:13:53:
90:af:6f:fd:4c:60:77:92:c1:b2:f7:cd:3a:04:9e:d9:ab:c1:
0c:98:f1:1b:03:41:05:6c:66:91:70:fa:33:b5:61:a5:d2:95:
03:79:86:08:c8:7d:06:ab:aa:ee:4b:86:9e:bb:3a:0e:c5:ee:
a5:60:5a:53:5d:1e:25:2d:8d:6b:fa:49:39:e7:01:b1:1a:18:
23:5b:9b:8f:9b:55:e5:1f:b7:db:98:3c:88:5a:c0:22:15:a6:
f0:ce:cf:d6:ce:e6:d7:be:58:35:1b:6f:f7:24:b0:4b:0d:30:
3a:ef:90:9d:ac:6d:81:21:33:f5:c4:f4:65:3d:a4:6f:6b:74:
0b:08:05:4e:3e:02:57:bb:2f:32:93:e9:6d:fa:e8:0b:6e:93:
dc:57:98:0c:81:b9:f9:0c:bc:db:e8:30:56:b5:01:56:41:32:
8c:d0:0f:57:7f:db:ed:5f:b6:e2:65:68:73:63:03:73:b9:4a:
b7:d1:46:3c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 29 06:33:32 2026 by rpki-client