
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3137322e302f32342d3234203d3e203233363530.roa
File: 3231392e38332e3137322e302f32342d3234203d3e203233363530.roa (raw, json)
Hash identifier: d8x5vr3+orwxBWwgq6nL/21hqmW+OlELLGJgSN5MG3U=
Subject key identifier: C5:D4:32:80:2E:69:94:20:F0:CD:EB:77:39:6A:40:90:36:FD:65:DB
Certificate issuer: /CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
Certificate serial: 27204B5EC76A3D924E4A8CEB8254948DF1F262A6
Authority key identifier: 71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3137322e302f32342d3234203d3e203233363530.roa
Signing time: Fri 14 Aug 2026 08:07:50 +0000
ROA not before: Fri 14 Aug 2026 08:02:50 +0000
ROA not after: Fri 13 Aug 2027 08:07:50 +0000
asID: 23650
IP address blocks: 219.83.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl
rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 13:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:20:4b:5e:c7:6a:3d:92:4e:4a:8c:eb:82:54:94:8d:f1:f2:62:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
Validity
Not Before: Aug 14 08:02:50 2026 GMT
Not After : Aug 13 08:07:50 2027 GMT
Subject: CN=C5D432802E699420F0CDEB77396A409036FD65DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dd:c0:6b:98:10:4b:68:1d:99:54:7b:b5:22:
19:88:40:20:10:a1:c2:53:ac:25:75:48:a7:3d:d9:
75:6a:57:94:bd:42:bd:fa:a7:d2:33:c4:e6:30:58:
ba:22:c8:5a:b6:54:b2:9f:e0:6e:5b:32:00:1f:1f:
8d:8c:27:00:2f:68:d9:72:e6:38:8c:e9:6e:6d:7e:
d7:9e:d7:7f:97:54:93:5c:6b:06:25:2d:91:51:06:
ee:df:21:e5:f9:4f:47:75:40:92:28:a7:54:38:dd:
59:8f:a5:2b:a1:82:67:fa:1f:79:87:c0:56:1e:74:
e0:e3:fe:00:89:e1:31:6d:e2:f8:fc:9e:65:db:12:
e9:59:d8:2a:0c:33:da:e1:53:15:b6:8b:93:0f:8d:
bf:a1:0d:92:e0:42:4c:68:fb:20:b8:61:ed:02:19:
2a:c2:b1:f3:2b:c9:a5:53:a6:8e:b1:87:34:6b:9c:
8b:01:1e:dd:0b:47:05:a3:c7:cd:e7:d9:2f:69:62:
12:a7:2d:45:a1:03:9f:13:b7:5a:a0:2d:b0:92:75:
a7:05:8e:bb:84:6f:72:54:52:9c:c6:a8:c0:60:ca:
4b:c4:5c:3a:a1:0c:1f:f4:fd:de:c0:65:26:69:aa:
0f:1a:84:94:90:8d:ce:c9:55:21:e2:8a:e9:40:9e:
be:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D4:32:80:2E:69:94:20:F0:CD:EB:77:39:6A:40:90:36:FD:65:DB
X509v3 Authority Key Identifier:
keyid:71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3137322e302f32342d3234203d3e203233363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
219.83.172.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:a1:25:2f:f0:40:a0:37:4f:06:90:dd:cb:09:88:0e:cd:2f:
b2:1d:28:00:20:79:fc:47:4c:87:24:61:21:9e:bc:bb:60:ae:
21:10:46:20:1f:89:9a:78:56:6d:5f:f2:4a:0b:68:28:6a:10:
c5:8f:16:cb:49:08:85:27:f4:6c:dc:78:5d:7c:e4:e9:74:54:
3b:0d:b7:c3:63:9c:c2:97:55:99:df:a0:f3:b5:93:00:7c:45:
b7:fe:75:df:cc:c5:b9:85:66:48:88:c4:8d:b8:5f:9f:be:48:
db:5c:d3:26:e1:50:02:25:0f:57:4d:01:a4:64:34:5a:82:6f:
28:e7:d2:84:40:24:f0:63:29:6d:88:90:19:b7:e5:63:01:b8:
b2:5f:3c:e4:2d:bc:2d:78:3e:96:90:d3:66:67:37:86:cd:7c:
b3:92:47:a2:1d:76:85:de:2d:5c:e2:47:08:90:5d:f2:2a:eb:
7a:bc:eb:10:1d:22:e6:0e:af:d8:e7:c7:5c:9b:8f:e3:39:f3:
79:91:6d:58:e3:2c:7b:a2:9b:c6:63:d9:13:70:8c:10:fa:af:
e0:0e:4c:92:3d:f5:85:d4:de:38:e6:91:7c:ce:42:d1:7b:b7:
cf:f2:2f:24:62:3e:7f:8b:37:29:27:90:72:95:bd:e3:ac:d4:
36:84:d8:6c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 29 06:33:31 2026 by rpki-client