
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117472653142196251/0/3130312e3233362e32342e302f32312d3231203d3e203539303235.roa
File: 3130312e3233362e32342e302f32312d3231203d3e203539303235.roa (raw, json)
Hash identifier: UoE4hxbKnFhibEw6vMQSkvP9s29yrsBD0cXein4VjV4=
Subject key identifier: BC:82:78:47:4B:37:56:27:A8:A1:D4:DD:69:8C:95:45:4C:DF:F6:5F
Certificate issuer: /CN=9CDD899429A14223F030EC28602F57FC4CAC8F60
Certificate serial: 5CAE521F2DE28C5614A1CCCA238236F2AE107D0A
Authority key identifier: 9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/3130312e3233362e32342e302f32312d3231203d3e203539303235.roa
Signing time: Thu 11 Jun 2026 15:41:37 +0000
ROA not before: Thu 11 Jun 2026 15:36:37 +0000
ROA not after: Thu 10 Jun 2027 15:41:37 +0000
asID: 59025
IP address blocks: 101.236.24.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl
rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 18:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:ae:52:1f:2d:e2:8c:56:14:a1:cc:ca:23:82:36:f2:ae:10:7d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CDD899429A14223F030EC28602F57FC4CAC8F60
Validity
Not Before: Jun 11 15:36:37 2026 GMT
Not After : Jun 10 15:41:37 2027 GMT
Subject: CN=BC8278474B375627A8A1D4DD698C95454CDFF65F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5c:56:fb:3d:b1:dd:22:94:b1:21:87:99:d7:
4e:f6:c3:7f:16:b3:d8:f4:2d:e9:b6:5d:20:0c:bf:
37:ff:69:11:a3:f0:46:13:58:3a:80:b4:ac:6e:d2:
1f:93:20:73:55:48:fa:c2:4f:d3:55:ca:1c:9a:b0:
3c:5e:71:f3:b5:b8:5f:1c:05:ee:37:b1:10:9b:7b:
95:a7:36:aa:3f:69:d8:95:b7:c8:76:e7:d9:d4:21:
f6:d9:69:4b:c6:6e:1a:3e:6d:ea:47:42:78:a2:12:
b0:39:fb:00:27:6d:50:0f:b6:60:34:2b:6b:4d:a5:
5f:62:52:e5:22:47:09:f8:d9:d4:5e:68:3a:7a:f9:
03:34:30:71:2f:f9:60:20:48:7b:9d:c5:47:02:7b:
58:2c:91:1d:1e:a4:87:21:00:67:7d:3c:43:59:35:
61:d5:ef:d2:55:6b:f5:d7:63:eb:1a:0b:4c:eb:4a:
b1:e1:fb:38:11:ba:1e:ff:35:69:d5:25:ba:4c:57:
bd:50:90:88:23:cd:81:74:60:e2:e5:50:7e:ca:3c:
8c:53:e7:2a:85:83:7b:9b:18:00:21:e1:a9:eb:88:
c4:1b:81:6a:2e:5d:ce:59:fa:9a:a5:7d:00:1f:0f:
ad:d1:17:fc:76:50:2d:31:c1:5d:5e:78:61:81:d0:
f7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:82:78:47:4B:37:56:27:A8:A1:D4:DD:69:8C:95:45:4C:DF:F6:5F
X509v3 Authority Key Identifier:
keyid:9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/3130312e3233362e32342e302f32312d3231203d3e203539303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.236.24.0/21
Signature Algorithm: sha256WithRSAEncryption
a2:5f:00:57:69:ad:02:0d:3d:85:b0:b5:19:ac:16:ea:9c:99:
33:7c:29:14:dd:89:7f:bb:a1:e1:78:88:30:68:29:4b:0e:7b:
23:8e:a6:36:54:2d:68:ca:6a:53:a9:36:b9:73:ed:80:8b:b7:
07:09:fd:91:d1:02:f8:e7:ef:81:a5:df:47:d8:67:3a:aa:63:
a2:ed:51:1a:a2:89:a9:99:de:fc:8d:ff:80:65:b8:6f:f4:c9:
74:42:00:18:b5:76:3a:61:8b:09:79:53:7a:24:7f:f0:16:90:
19:4f:15:cc:e8:f0:3b:60:7d:95:47:28:38:ca:f2:65:e0:27:
45:48:b2:dd:ec:12:a6:a1:51:0e:b5:9c:a1:20:20:58:03:af:
a8:11:48:6b:2e:21:64:75:fb:1d:e7:65:2f:93:25:8d:95:06:
6e:af:aa:be:c5:eb:74:d4:85:be:c6:a9:f8:37:5e:51:b1:71:
45:11:cb:ea:66:de:b3:80:e5:03:42:a1:3c:51:cd:47:76:9d:
ab:36:24:c9:11:52:1e:c8:7e:91:91:55:0d:ab:e7:07:f3:e4:
5e:f5:83:e9:3d:b4:f5:33:6d:4f:1e:68:c2:c2:b4:85:d5:cb:
bf:84:ec:31:b1:a0:14:6c:6f:1d:6d:bc:23:33:ad:fe:42:25:
2c:39:5a:68
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:51 2026 by rpki-client