
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3137302e302f32342d3234203d3e203233363530.roa
File: 3231392e38332e3137302e302f32342d3234203d3e203233363530.roa (raw, json)
Hash identifier: 8OGarA3rt5HgnGAC4ALgZfMHdzuO7l1EfnYbV7Y5Wmw=
Subject key identifier: 99:F5:6A:B2:63:FB:FB:11:5C:8D:55:CC:7C:71:FA:28:09:FD:89:8E
Certificate issuer: /CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
Certificate serial: 11BABABD2C9E03A2E804BDD3867D5FDD355F9DAB
Authority key identifier: 71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3137302e302f32342d3234203d3e203233363530.roa
Signing time: Fri 14 Aug 2026 08:07:49 +0000
ROA not before: Fri 14 Aug 2026 08:02:49 +0000
ROA not after: Fri 13 Aug 2027 08:07:49 +0000
asID: 23650
IP address blocks: 219.83.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl
rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 13:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:ba:ba:bd:2c:9e:03:a2:e8:04:bd:d3:86:7d:5f:dd:35:5f:9d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
Validity
Not Before: Aug 14 08:02:49 2026 GMT
Not After : Aug 13 08:07:49 2027 GMT
Subject: CN=99F56AB263FBFB115C8D55CC7C71FA2809FD898E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:15:76:fa:d9:9b:03:7e:d0:1a:35:97:0b:bc:
56:60:22:d7:93:52:b4:b5:3c:15:19:67:e0:f5:41:
e5:d9:71:7c:77:d6:01:c0:e3:0f:d3:f8:78:56:1a:
93:00:89:40:b8:73:d6:8b:ba:cf:1f:95:48:52:56:
a0:bc:9b:87:cf:de:75:0a:e7:63:d9:a4:f7:0e:7a:
52:67:ee:7f:25:5d:da:1c:e2:12:12:93:5b:d8:09:
b3:62:85:c8:0c:79:24:16:75:30:39:52:7b:05:87:
76:6a:27:55:39:78:50:ad:57:fd:18:09:5c:30:6c:
4c:bd:66:7f:e3:3e:e3:cf:1b:a5:54:a9:d0:fd:9b:
ce:cb:5d:9a:0d:3b:40:d7:bc:60:51:c7:c5:25:9b:
b5:e9:56:92:e9:0f:d9:78:8f:c3:e8:34:cf:68:5c:
6f:2a:93:1f:13:ee:89:73:ff:ab:b4:8c:24:bc:e0:
c4:83:36:12:1b:c5:ef:d7:2e:86:43:8f:22:55:cb:
44:61:01:53:da:79:ec:d0:8c:e7:2d:1e:38:eb:c1:
2f:e7:18:f3:bd:fb:4a:52:43:c7:2b:1c:74:51:bf:
24:64:52:e1:93:72:7c:ae:58:5a:d2:8b:9e:bf:3e:
ed:30:21:3d:07:27:04:44:e6:38:33:9b:34:1d:48:
44:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F5:6A:B2:63:FB:FB:11:5C:8D:55:CC:7C:71:FA:28:09:FD:89:8E
X509v3 Authority Key Identifier:
keyid:71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3137302e302f32342d3234203d3e203233363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
219.83.170.0/24
Signature Algorithm: sha256WithRSAEncryption
94:81:fd:a4:54:6e:33:08:82:37:1f:ef:a9:1f:04:af:9e:ae:
5e:62:bf:52:08:04:4e:d9:1b:bb:03:da:b9:6d:08:33:f7:83:
dc:96:ee:c7:9f:91:92:5e:95:c1:28:1f:ad:15:5c:12:a1:c2:
23:41:0c:1d:ba:e5:13:5a:d0:40:d9:47:f5:c6:49:b5:90:ce:
10:44:57:ac:0b:3c:01:aa:66:ea:04:7f:69:73:82:e2:38:a9:
5f:81:13:7c:5b:ed:4e:f3:05:1a:61:50:d6:46:09:df:78:a0:
c4:ad:f3:86:07:f6:76:c3:a2:75:5d:2c:ff:dd:be:a5:45:3b:
e9:17:98:7f:df:bc:49:d3:16:68:3a:51:8f:98:6d:d8:26:74:
5b:83:07:19:62:1c:70:e7:c4:c8:7a:a2:2e:b1:b7:b3:66:d9:
57:ca:2a:24:8c:28:c0:dc:47:eb:5f:2c:5a:3d:f6:30:7e:1d:
5c:28:67:ab:bb:ca:f9:49:cb:6e:70:64:b0:1a:fb:00:5f:64:
31:ca:29:ae:3e:84:8b:9e:a5:82:ad:1b:39:9a:fe:43:c7:0e:
a9:95:40:73:29:6a:c6:2c:c5:57:e6:5c:9b:0a:53:d6:78:46:
21:50:db:90:32:36:67:c3:2e:65:a2:e0:76:75:a1:34:2e:d0:
f6:b1:3e:2d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 29 06:33:30 2026 by rpki-client