
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3138382e302f32342d3234203d3e203233363530.roa
File: 3231392e38332e3138382e302f32342d3234203d3e203233363530.roa (raw, json)
Hash identifier: LQ7prM72n5yu4uS1upZt+/E3ODQamTHnOJqwQ71088Q=
Subject key identifier: 2D:9C:A5:6F:27:BF:EB:84:15:A2:B6:39:38:ED:2F:66:A6:F4:D2:BF
Certificate issuer: /CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
Certificate serial: 7E7964486A11BC0DE2C2F6CAB081E159FF487C16
Authority key identifier: 71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3138382e302f32342d3234203d3e203233363530.roa
Signing time: Fri 14 Aug 2026 08:07:49 +0000
ROA not before: Fri 14 Aug 2026 08:02:49 +0000
ROA not after: Fri 13 Aug 2027 08:07:49 +0000
asID: 23650
IP address blocks: 219.83.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl
rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 13:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:79:64:48:6a:11:bc:0d:e2:c2:f6:ca:b0:81:e1:59:ff:48:7c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
Validity
Not Before: Aug 14 08:02:49 2026 GMT
Not After : Aug 13 08:07:49 2027 GMT
Subject: CN=2D9CA56F27BFEB8415A2B63938ED2F66A6F4D2BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c2:0b:30:b8:c8:12:c3:30:7d:62:0d:14:39:
8d:e1:5d:06:8b:09:81:bf:eb:98:2d:cb:de:1d:47:
f8:54:e6:15:59:68:b2:78:0a:bd:fc:be:7d:68:90:
cb:85:60:08:78:db:b6:34:8d:cf:be:ba:e9:83:f6:
59:40:a2:7d:51:c8:46:8d:fa:9d:27:3e:f2:d4:63:
c9:a2:41:20:53:06:75:43:78:09:32:49:ae:bc:25:
e2:4c:af:9b:d4:5b:d0:24:f3:3a:0c:07:b5:95:f1:
45:8a:35:b9:fc:8b:39:5f:ab:47:5d:e0:b3:4a:f0:
82:35:a9:68:a8:bb:90:b0:67:78:82:96:9f:c8:7d:
78:58:f4:d1:ee:6c:46:f9:30:7d:be:35:31:ab:6a:
1e:42:7e:d9:fc:fd:c5:85:ed:e4:57:00:7a:9d:c7:
5e:da:d9:db:c9:77:be:4d:2c:b9:72:ed:98:52:e3:
be:ad:06:5d:1d:b3:92:6e:19:a3:2c:28:bb:0f:65:
4e:4b:be:da:c4:f6:33:2b:1a:d8:4c:7c:35:94:c8:
b1:88:b0:b1:e2:14:6a:f9:3a:76:2b:a2:c6:bf:9d:
07:69:cb:6e:46:bd:eb:e3:d1:43:d6:6f:7d:cf:6d:
6e:1f:cd:b5:83:af:a3:fb:82:52:ad:c9:62:cb:1e:
5a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9C:A5:6F:27:BF:EB:84:15:A2:B6:39:38:ED:2F:66:A6:F4:D2:BF
X509v3 Authority Key Identifier:
keyid:71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3138382e302f32342d3234203d3e203233363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
219.83.188.0/24
Signature Algorithm: sha256WithRSAEncryption
83:e4:29:9b:76:c3:1d:07:7d:b0:27:83:33:06:05:74:8b:2a:
a9:79:b6:5e:ef:7b:33:5d:87:af:84:5d:29:d3:3b:4c:51:58:
57:8e:d2:18:d8:14:30:df:df:5c:c5:60:72:31:71:c6:57:da:
0d:96:2d:f6:a5:8f:df:8c:ac:0e:01:f1:21:f6:ff:c8:f5:91:
5b:41:ad:16:d3:0b:9a:20:68:6e:bf:6b:22:42:52:84:96:4c:
f6:88:d2:27:3a:6a:82:3d:d3:53:b0:c4:3f:2b:bf:1e:9d:8a:
e0:9a:3f:cd:01:62:21:38:ec:12:66:a0:90:42:a6:72:cf:28:
55:48:a4:00:1d:49:e3:19:75:eb:8d:d4:09:00:8c:28:a1:6a:
55:fb:fe:dd:9a:33:fd:90:c9:1c:98:21:77:f3:a6:f6:7e:43:
66:5b:50:a0:6b:9b:a1:f1:36:f6:54:9a:d1:a0:9b:eb:38:78:
f9:ad:89:18:27:4b:57:48:c0:2f:59:7c:31:dc:a9:db:5c:96:
0b:ac:d6:5d:ce:0f:89:c3:8d:80:0f:2c:c0:84:e5:57:43:50:
11:e8:0a:51:fb:44:c6:5d:bd:2b:68:e9:c8:95:b2:63:48:46:
ff:b3:05:06:06:15:f0:9b:56:f8:c8:db:cf:ba:b5:fe:9e:49:
e6:6d:71:36
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 29 06:33:31 2026 by rpki-client