
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3138382e302f32342d3234203d3e20313430323933.roa
File: 3231392e38332e3138382e302f32342d3234203d3e20313430323933.roa (raw, json)
Hash identifier: UARyymAfIDpy1ZPBQsVU1R3OSEyjaA0vvn5sxjgro1g=
Subject key identifier: 9D:C4:F0:C5:A6:9D:61:AC:47:35:E0:18:40:1A:E0:31:48:DA:17:7B
Certificate issuer: /CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
Certificate serial: 4C0154A1911C3F6243006BA0436295F1BD202BFB
Authority key identifier: 71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3138382e302f32342d3234203d3e20313430323933.roa
Signing time: Fri 05 Jun 2026 02:40:31 +0000
ROA not before: Fri 05 Jun 2026 02:35:31 +0000
ROA not after: Fri 04 Jun 2027 02:40:31 +0000
asID: 140293
IP address blocks: 219.83.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl
rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 18:14:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:01:54:a1:91:1c:3f:62:43:00:6b:a0:43:62:95:f1:bd:20:2b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
Validity
Not Before: Jun 5 02:35:31 2026 GMT
Not After : Jun 4 02:40:31 2027 GMT
Subject: CN=9DC4F0C5A69D61AC4735E018401AE03148DA177B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:42:b5:d1:9a:e2:57:a1:67:7f:78:0e:a6:
b5:d6:cf:f7:bb:c1:c4:9a:cf:49:be:03:ee:f4:aa:
be:05:6b:81:21:4c:7e:6f:69:75:bf:f4:4d:30:79:
4d:d8:75:21:75:bd:a9:d8:c2:8c:34:2d:90:79:cf:
e3:8e:58:df:67:da:86:70:c7:be:a8:37:15:d5:8b:
cc:46:f8:cf:1d:16:ba:fc:47:10:2b:d1:e7:84:75:
e4:4a:b0:ce:ad:82:65:a6:e8:91:df:65:28:a4:5e:
83:dc:43:4a:cf:b6:26:61:3f:3a:d8:cc:04:03:a0:
a7:4a:1a:99:b5:98:79:93:ad:a1:ac:7a:8c:5a:7b:
60:fa:9b:18:dc:d9:81:ac:5b:71:2c:70:4f:b1:04:
df:d0:9c:45:35:c2:17:fb:0a:c1:f0:e9:dc:f3:7b:
84:9f:96:c2:75:68:98:14:b2:a2:5d:82:18:15:72:
bf:16:9d:55:e4:68:10:7a:73:7a:6e:63:3f:3a:10:
34:c1:53:79:1f:fd:60:e8:5a:ee:1c:a9:75:d7:14:
57:b9:05:5e:75:f1:80:c0:bf:52:dd:2e:84:c1:9b:
4d:ac:9f:19:2d:ec:fb:4a:0b:6c:c4:3d:f0:b5:28:
d6:68:18:eb:d7:9a:b6:4a:22:fd:16:4b:6b:41:eb:
cd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C4:F0:C5:A6:9D:61:AC:47:35:E0:18:40:1A:E0:31:48:DA:17:7B
X509v3 Authority Key Identifier:
keyid:71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3138382e302f32342d3234203d3e20313430323933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
219.83.188.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:06:11:83:5f:8a:d3:c4:8a:db:8e:b6:41:1a:72:73:ed:ca:
c8:7d:e8:da:ef:45:73:77:a6:a5:10:c2:49:d4:43:a8:e5:3c:
a3:42:3a:64:94:3c:0b:09:28:77:b7:b6:e5:e1:39:41:9d:e0:
9a:a4:93:2b:23:ec:f4:75:49:89:fd:e3:23:17:99:b3:8a:85:
ff:93:55:3b:39:d8:1c:a8:73:a6:68:05:df:c6:78:ef:98:ab:
8f:cf:b2:a4:19:2a:b5:c2:44:b9:99:3e:0a:c1:a5:f4:78:ba:
0b:3a:3f:4c:01:50:79:f5:1b:9e:4a:20:5b:da:0f:b5:c1:58:
aa:0b:77:89:f7:8c:01:a2:94:cc:05:7b:47:52:41:ce:84:d6:
42:23:86:d5:9e:7a:f4:15:0e:14:6e:01:df:de:cf:f4:6a:6b:
7e:05:00:0e:3e:70:bc:b8:6d:76:35:b5:ac:84:36:b0:40:f7:
90:da:37:a1:a5:3b:64:cb:45:79:4e:9d:03:ae:2f:59:9c:f2:
07:6c:57:01:98:a4:17:27:68:17:ee:56:1b:3b:49:b2:e6:d4:
d1:fe:dd:79:3f:84:ca:c7:a3:8c:18:6d:dd:60:5f:dc:3e:97:
3f:27:3c:85:f2:db:e5:c8:3e:71:ad:88:5f:6b:c3:a5:43:e5:
e5:cf:08:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:27:59 2026 by rpki-client