
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3138392e302f32342d3234203d3e20313430323933.roa
File: 3231392e38332e3138392e302f32342d3234203d3e20313430323933.roa (raw, json)
Hash identifier: uUXxe2oubP/XIqFRtOFAD2eSzNFzbuk/E3yzZzNqEF4=
Subject key identifier: 79:E1:F9:B0:29:C1:D4:52:58:AE:07:E9:FB:E4:EB:10:91:DC:01:A5
Certificate issuer: /CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
Certificate serial: 3701ACD2EE5DD1E83E147A5B9FDA9E860EF32809
Authority key identifier: 71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3138392e302f32342d3234203d3e20313430323933.roa
Signing time: Wed 03 Jun 2026 02:15:48 +0000
ROA not before: Wed 03 Jun 2026 02:10:48 +0000
ROA not after: Wed 02 Jun 2027 02:15:48 +0000
asID: 140293
IP address blocks: 219.83.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl
rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 18:14:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:01:ac:d2:ee:5d:d1:e8:3e:14:7a:5b:9f:da:9e:86:0e:f3:28:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
Validity
Not Before: Jun 3 02:10:48 2026 GMT
Not After : Jun 2 02:15:48 2027 GMT
Subject: CN=79E1F9B029C1D45258AE07E9FBE4EB1091DC01A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7f:e4:6d:c0:02:af:f0:cc:89:40:b3:23:16:
37:20:cc:11:6a:a4:77:24:26:72:86:1d:f8:5f:30:
33:80:1e:16:97:9e:cb:a0:42:37:2a:06:72:39:a0:
72:4e:65:ef:ca:db:4c:64:a0:0d:85:6b:a9:4d:8c:
71:d6:a9:05:a6:b4:fc:fe:17:ab:0e:0a:b0:52:b0:
ae:7f:44:79:70:70:fe:d8:69:b3:a8:82:66:2c:1e:
94:48:1f:27:87:20:35:21:6d:88:59:bc:ed:5c:df:
87:da:66:d4:ad:8d:1c:9b:e1:a0:49:b2:c3:bd:13:
70:16:df:e3:be:76:95:1f:0a:0b:f5:fd:d0:cc:28:
fe:8b:19:37:3c:fc:19:57:d3:1f:2f:7a:cd:9f:0a:
2a:a7:1b:fe:e9:f8:ce:d1:ef:c2:93:de:12:04:28:
1d:7c:b5:65:a7:6e:e0:5b:96:b7:08:0d:da:29:de:
51:d0:4e:05:23:85:8b:31:74:ab:af:fc:04:e1:e5:
7e:ff:98:d7:4a:79:ac:cc:a9:e4:42:44:fd:a1:06:
e3:8b:c8:1b:32:e4:5a:6d:be:0d:85:ac:e3:d0:33:
55:fb:d1:dd:54:dd:62:ef:40:0e:a7:cb:3e:49:bd:
ce:38:38:a1:ac:db:77:b1:bc:df:11:8e:77:0c:9d:
e4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E1:F9:B0:29:C1:D4:52:58:AE:07:E9:FB:E4:EB:10:91:DC:01:A5
X509v3 Authority Key Identifier:
keyid:71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3138392e302f32342d3234203d3e20313430323933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
219.83.189.0/24
Signature Algorithm: sha256WithRSAEncryption
89:7f:da:c6:75:83:60:d5:6a:63:1d:f0:df:21:b6:d9:78:03:
b6:05:d7:72:5e:3e:66:dc:fc:be:46:34:31:ab:94:54:f2:79:
88:52:79:93:c0:66:c5:45:50:08:3a:a4:f2:f7:b3:93:8c:05:
b7:de:70:40:ca:ee:bc:7f:97:47:bc:ae:80:2f:3d:63:e2:c7:
30:e5:5f:33:91:b7:1f:99:91:cc:35:e6:b6:fe:04:88:87:c1:
07:af:3c:bb:c8:bc:de:bf:c2:02:9f:62:75:9c:df:26:9f:e4:
c5:63:f8:f4:c1:3a:39:e7:90:8b:ec:eb:ab:68:61:89:37:ab:
09:d0:50:b0:7b:1b:2a:77:17:30:7d:b0:00:7d:33:ea:a5:99:
bf:aa:0b:6c:89:cd:8f:34:b2:58:9e:57:85:0d:47:fa:fc:00:
8f:19:5c:f5:fd:53:38:ec:b9:42:c4:60:3e:b9:8b:b3:b3:d6:
6d:d8:ba:70:c1:b1:bb:88:38:bf:46:aa:45:33:2e:7b:34:95:
0e:e4:05:bc:23:71:32:4e:ad:d3:f2:c1:e0:ad:7e:f8:9b:aa:
7f:a6:52:67:3a:6c:93:e2:7f:fd:4c:a3:20:64:d6:1d:00:1d:
dd:d3:c1:ef:d7:0b:41:ae:d2:5a:b0:95:23:88:61:c3:6b:e5:
f8:59:61:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:28:00 2026 by rpki-client