
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114846589689528347/0/3231382e3234302e3138332e302f32342d3234203d3e203435303538.roa
File: 3231382e3234302e3138332e302f32342d3234203d3e203435303538.roa (raw, json)
Hash identifier: Cni/r/Zja/reOMYwwWQACpwTbRJuZT4t4DhHsOzNIAY=
Subject key identifier: EF:50:2A:02:A2:4F:87:B7:AF:1E:FC:C3:31:DB:88:EB:9A:10:EF:B7
Certificate issuer: /CN=FCDC522C2977A42C0E1A992040F5840C8C83FF6A
Certificate serial: 214A07FDC67C323A12E0C89F3F968E9780921FAB
Authority key identifier: FC:DC:52:2C:29:77:A4:2C:0E:1A:99:20:40:F5:84:0C:8C:83:FF:6A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/3231382e3234302e3138332e302f32342d3234203d3e203435303538.roa
Signing time: Thu 04 Jun 2026 09:38:24 +0000
ROA not before: Thu 04 Jun 2026 09:33:24 +0000
ROA not after: Thu 03 Jun 2027 09:38:24 +0000
asID: 45058
IP address blocks: 218.240.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl
rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 03:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:4a:07:fd:c6:7c:32:3a:12:e0:c8:9f:3f:96:8e:97:80:92:1f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCDC522C2977A42C0E1A992040F5840C8C83FF6A
Validity
Not Before: Jun 4 09:33:24 2026 GMT
Not After : Jun 3 09:38:24 2027 GMT
Subject: CN=EF502A02A24F87B7AF1EFCC331DB88EB9A10EFB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0a:ca:b7:0f:97:9f:b1:e1:4f:a2:ce:f6:33:
e2:f3:87:78:44:8c:fb:4b:88:60:03:e5:88:b3:47:
f2:05:4d:f2:59:d5:48:b7:c8:e3:b1:65:d2:51:b5:
0f:38:b9:13:82:0e:78:54:97:ae:3b:e6:3f:5f:af:
b1:79:5f:a4:91:d0:ce:ae:cd:16:53:15:da:3d:77:
8c:a5:85:34:b5:96:9e:76:4f:70:61:50:db:51:9c:
6e:9d:02:02:88:a0:03:09:7b:52:08:aa:97:9d:d4:
8a:4e:35:b9:9f:e3:6c:33:35:2b:f9:97:bc:65:51:
b0:76:36:4d:ef:4c:81:98:67:b6:53:d4:e7:a9:19:
50:ec:e1:92:14:0e:6c:18:4f:2b:7a:fe:0f:f6:14:
8d:f4:be:80:b1:50:c4:f5:28:e7:6a:44:e8:81:d8:
38:54:9e:cc:e3:9a:1b:18:b5:ec:ce:e7:53:29:cd:
93:12:f2:c9:bf:3a:3d:48:41:b7:6b:4e:d7:e3:51:
d9:01:e1:6d:8b:cf:2b:72:d2:66:5b:f5:63:bb:fc:
e4:6c:af:29:bc:dc:df:52:f5:45:2b:4f:8a:47:22:
c4:12:7d:bd:7b:a1:5d:07:36:4b:a8:f1:7c:8c:77:
0d:f9:3c:48:f3:4b:15:da:43:b5:34:c1:6f:30:c1:
e9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:50:2A:02:A2:4F:87:B7:AF:1E:FC:C3:31:DB:88:EB:9A:10:EF:B7
X509v3 Authority Key Identifier:
keyid:FC:DC:52:2C:29:77:A4:2C:0E:1A:99:20:40:F5:84:0C:8C:83:FF:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/3231382e3234302e3138332e302f32342d3234203d3e203435303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.240.183.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:51:55:fe:35:54:0c:7b:95:6c:2a:02:ea:dd:82:1c:f0:3e:
54:d6:3d:d2:28:13:0c:4d:80:fa:7c:02:73:98:2d:42:1c:b8:
95:a2:38:26:3d:64:68:dd:31:b6:8d:75:16:bf:68:bf:fe:6f:
29:e8:77:82:7a:e9:f8:92:02:f9:ec:a0:6f:7a:fd:db:e4:a5:
13:9e:d3:b9:ba:69:82:08:d1:45:49:80:9e:d2:75:9d:72:46:
4b:9c:b7:61:ee:7b:94:57:f1:93:cf:41:76:9f:c3:6c:ec:2b:
ec:9c:f7:97:f1:ea:24:5a:ef:cb:81:7c:36:10:c8:39:d1:7c:
7f:57:9b:9e:60:e5:c1:82:58:60:03:34:81:e5:c9:68:8b:92:
12:ed:cd:cb:7a:d8:9b:b8:dc:f1:5c:49:69:c4:6c:c5:9e:7a:
cc:6a:f4:08:c5:92:0c:92:38:dd:a3:28:cc:80:0e:76:84:16:
60:bf:c7:28:d6:b0:b7:72:25:43:62:41:b0:02:a9:1e:85:b1:
ad:c9:16:c3:48:6c:f4:17:a5:0f:cf:24:65:98:4c:33:a0:6b:
ce:ed:88:e9:fb:c7:2b:2f:0d:17:0c:11:30:42:a1:ed:3e:fb:
1b:c9:10:2c:c6:f0:f0:12:ef:68:cc:80:56:88:f5:e8:c7:e6:
8e:50:25:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:58 2026 by rpki-client