
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117472653142196251/0/3130312e3233362e31362e302f32312d3231203d3e203233373234.roa
File: 3130312e3233362e31362e302f32312d3231203d3e203233373234.roa (raw, json)
Hash identifier: QpcVk4ZthI7CaC3tu9yYL6OasO5QGi1daAwJP7XaLe8=
Subject key identifier: B7:0D:F3:54:C9:F6:AE:6E:6F:57:98:1F:AD:D2:F2:6A:11:BA:35:00
Certificate issuer: /CN=9CDD899429A14223F030EC28602F57FC4CAC8F60
Certificate serial: 09C688BEB217225AB725646C7376346266A77AAF
Authority key identifier: 9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/3130312e3233362e31362e302f32312d3231203d3e203233373234.roa
Signing time: Thu 11 Jun 2026 15:41:09 +0000
ROA not before: Thu 11 Jun 2026 15:36:09 +0000
ROA not after: Thu 10 Jun 2027 15:41:09 +0000
asID: 23724
IP address blocks: 101.236.16.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl
rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 18:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:c6:88:be:b2:17:22:5a:b7:25:64:6c:73:76:34:62:66:a7:7a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CDD899429A14223F030EC28602F57FC4CAC8F60
Validity
Not Before: Jun 11 15:36:09 2026 GMT
Not After : Jun 10 15:41:09 2027 GMT
Subject: CN=B70DF354C9F6AE6E6F57981FADD2F26A11BA3500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4e:99:00:68:24:71:e0:99:71:e4:a0:c1:c8:
97:7b:38:99:75:00:09:4b:a3:70:71:e7:76:42:51:
e9:a7:bb:11:6d:91:f2:1c:4b:5e:2f:fd:c2:0c:3c:
dc:db:4d:0c:61:44:74:d0:eb:d1:4a:83:7d:32:77:
55:34:4c:1c:78:2b:3d:97:fa:22:dd:a3:a5:66:ba:
11:92:47:25:aa:56:f8:0b:8e:ab:e9:01:9a:e2:49:
40:b1:06:9f:f2:ac:95:89:1d:81:e0:25:0a:ca:f9:
ba:32:b4:f1:93:a4:67:ff:4a:15:da:54:14:d9:17:
e7:65:ae:b7:5c:80:30:09:ef:1c:68:76:33:0c:32:
bb:4f:92:22:da:3b:84:5c:1d:68:49:6d:70:27:7f:
77:39:07:b5:be:74:cc:91:f4:63:c2:ed:a6:19:c0:
c6:4c:7a:0a:0e:ad:e4:c6:3f:06:66:46:a0:a7:25:
fc:0e:da:42:7f:31:6f:da:a2:84:62:c2:32:d6:15:
13:df:95:b0:08:67:01:3b:f3:31:7b:28:fe:c5:9a:
49:f4:bc:25:d3:27:d6:f2:b7:30:47:b8:b1:4c:6b:
aa:f2:95:a1:b0:76:9a:5d:91:cf:ca:8a:98:fc:d7:
2d:dc:90:6f:7a:a7:b3:2e:7d:61:fc:e9:07:0c:9a:
b3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0D:F3:54:C9:F6:AE:6E:6F:57:98:1F:AD:D2:F2:6A:11:BA:35:00
X509v3 Authority Key Identifier:
keyid:9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/3130312e3233362e31362e302f32312d3231203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.236.16.0/21
Signature Algorithm: sha256WithRSAEncryption
0a:c4:c6:e2:22:d2:44:63:0c:ac:a6:8e:47:c5:11:3b:1a:ba:
2d:7b:41:15:a1:5c:59:7a:16:6f:6c:79:46:4e:2c:f2:c0:af:
80:e3:a1:50:ff:4d:fc:ea:03:6d:fb:1d:5c:e8:f3:fd:d6:16:
21:e5:7c:75:ca:af:9a:cf:31:53:b7:c5:0a:e0:9f:7f:fa:2b:
04:b2:a1:68:64:29:e9:74:16:4e:5e:4a:bb:9c:82:4f:f8:86:
66:73:18:86:e2:21:39:9c:67:b5:be:81:1f:09:07:f1:22:89:
78:d3:39:3e:2f:9c:01:32:0b:73:6b:bd:a5:fc:41:7d:1d:4e:
dd:e2:cf:08:ec:1f:23:a2:0a:97:88:97:06:e1:8f:81:28:98:
54:1c:25:71:6d:00:f2:af:d4:49:4a:a0:9d:0f:d5:36:c2:a7:
a1:4f:73:5c:35:4a:15:0e:0d:b5:42:2c:b5:d1:fb:83:2f:33:
ba:a7:71:9d:10:98:d5:b4:08:ac:51:ca:a4:ae:4e:75:6a:f5:
23:83:7b:14:f7:cf:85:bb:ad:cf:64:a9:64:db:0a:f4:20:33:
00:45:55:76:3b:a6:e2:b1:90:a6:c0:73:47:07:90:13:c8:08:
76:88:d0:61:16:db:39:c0:c5:e4:a8:29:45:8c:cd:e5:3d:ce:
20:17:cf:41
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:58 2026 by rpki-client