
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3137302e302f32342d3234203d3e20313430323933.roa
File: 3231392e38332e3137302e302f32342d3234203d3e20313430323933.roa (raw, json)
Hash identifier: K+/yFwMvpUQXTRJBHOyhdN+YxG9U4N0OdNDEOURyx8U=
Subject key identifier: B5:AD:41:25:5D:01:8A:5B:1F:EC:05:ED:FE:48:69:38:BD:98:24:6E
Certificate issuer: /CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
Certificate serial: 22A464776A8D7FFB1204555CF2319240C50174D7
Authority key identifier: 71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3137302e302f32342d3234203d3e20313430323933.roa
Signing time: Fri 05 Jun 2026 02:40:31 +0000
ROA not before: Fri 05 Jun 2026 02:35:31 +0000
ROA not after: Fri 04 Jun 2027 02:40:31 +0000
asID: 140293
IP address blocks: 219.83.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl
rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 18:14:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:a4:64:77:6a:8d:7f:fb:12:04:55:5c:f2:31:92:40:c5:01:74:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
Validity
Not Before: Jun 5 02:35:31 2026 GMT
Not After : Jun 4 02:40:31 2027 GMT
Subject: CN=B5AD41255D018A5B1FEC05EDFE486938BD98246E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:79:ec:67:f9:a4:35:f8:a1:c8:a7:b7:14:75:
04:3e:81:94:98:a8:24:96:40:36:a5:df:d1:cd:4e:
77:74:7b:a3:a1:75:cb:32:54:17:08:5e:23:46:93:
c8:f4:9c:49:c1:b6:2e:ef:6a:fe:c1:9d:c0:3c:03:
64:56:b1:5c:41:70:e0:7a:69:33:06:72:8f:7c:6b:
e1:1f:9a:99:c0:e9:86:2c:ea:31:f5:bd:b7:a8:af:
d5:38:ae:2c:90:bc:8d:11:4a:56:2d:97:f0:37:5f:
c9:19:66:90:60:3d:e7:5a:2d:ab:e3:25:dd:2c:51:
20:23:3a:b7:dc:53:aa:6d:1d:70:e3:9b:61:ae:19:
03:3a:23:e1:35:a9:b0:7c:96:f4:b6:1c:43:0b:73:
86:0a:36:09:96:db:81:27:11:d7:3b:2e:3f:e5:92:
d9:96:17:c5:00:8f:2a:e1:09:6f:2a:0a:17:e8:b6:
43:ca:f2:3b:fc:05:92:1e:38:a5:3e:c4:93:50:26:
2f:12:42:5f:f0:df:76:ec:cd:bc:7f:62:88:cc:44:
80:b8:db:10:f9:ed:c1:f9:d4:f4:ad:fb:75:db:53:
c7:a0:70:b5:8c:f2:78:76:74:44:23:e8:c1:2b:7b:
16:40:11:a9:85:ce:f0:0d:f1:60:9d:49:44:fd:bf:
8b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AD:41:25:5D:01:8A:5B:1F:EC:05:ED:FE:48:69:38:BD:98:24:6E
X509v3 Authority Key Identifier:
keyid:71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3137302e302f32342d3234203d3e20313430323933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
219.83.170.0/24
Signature Algorithm: sha256WithRSAEncryption
68:f0:89:4a:20:f0:77:aa:aa:6f:81:c1:b1:92:72:a9:ab:70:
cb:98:6f:6d:43:6f:cf:39:ef:8a:57:51:9b:e5:5a:67:d2:14:
b9:4b:34:37:76:98:20:35:c6:aa:0e:12:81:1f:6c:ce:6b:6e:
7d:5a:40:4d:93:47:95:1a:e3:a2:99:41:20:d1:ba:7d:d4:3f:
76:eb:22:b2:f9:52:95:01:73:2f:b0:f4:63:52:06:61:05:2c:
d0:49:9d:14:3d:d9:ce:d9:10:76:b3:37:70:36:46:09:b1:cb:
38:56:43:0e:a1:8f:a5:af:91:54:5c:d9:64:53:ca:4f:77:7a:
0d:30:a9:8c:c7:0a:9c:a9:1d:9f:80:02:4c:51:0a:aa:d1:8e:
b6:46:63:92:b6:01:92:e5:c2:1a:21:ad:7b:9d:79:a3:56:5e:
9b:09:91:29:c4:35:09:03:25:bd:16:69:59:85:cf:cc:0b:91:
bc:a7:33:a6:aa:a6:1f:25:4e:2a:67:41:fb:9a:dc:3c:32:de:
7d:31:af:7a:af:88:fe:9f:88:07:ca:40:ce:2e:31:03:ed:bf:
74:9b:8c:9f:48:ad:f4:79:9a:0e:ea:1d:8f:ea:fb:3a:21:e2:
f5:7d:e0:59:29:08:90:80:1c:16:d4:64:55:a5:6e:67:47:4d:
a7:3a:92:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:28:00 2026 by rpki-client