
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117472653142196251/0/3130312e3233362e33322e302f32312d3231203d3e2034383038.roa
File: 3130312e3233362e33322e302f32312d3231203d3e2034383038.roa (raw, json)
Hash identifier: kTjrtjs2Z6A1FbMsRCqlqWU+exXxUki4cQNSV8VWl68=
Subject key identifier: 04:41:A5:A7:AA:A5:C5:AE:5E:D0:C3:7D:5D:9B:E5:A0:D8:59:FD:4E
Certificate issuer: /CN=9CDD899429A14223F030EC28602F57FC4CAC8F60
Certificate serial: 56697B10813C37FAD18FA35FE0709EF1FD4EDCCF
Authority key identifier: 9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/3130312e3233362e33322e302f32312d3231203d3e2034383038.roa
Signing time: Thu 11 Jun 2026 15:42:46 +0000
ROA not before: Thu 11 Jun 2026 15:37:46 +0000
ROA not after: Thu 10 Jun 2027 15:42:46 +0000
asID: 4808
IP address blocks: 101.236.32.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl
rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 18:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:69:7b:10:81:3c:37:fa:d1:8f:a3:5f:e0:70:9e:f1:fd:4e:dc:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CDD899429A14223F030EC28602F57FC4CAC8F60
Validity
Not Before: Jun 11 15:37:46 2026 GMT
Not After : Jun 10 15:42:46 2027 GMT
Subject: CN=0441A5A7AAA5C5AE5ED0C37D5D9BE5A0D859FD4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:71:97:8f:11:89:37:96:e1:5f:24:54:aa:d2:
5c:99:00:23:46:f0:1b:73:d4:af:d1:b7:a5:7d:9d:
c7:f9:76:15:b4:e0:ac:68:b7:a5:70:58:13:f0:f4:
b0:e3:94:e2:cf:f1:99:bf:ba:7b:86:f6:7d:2d:7f:
58:ef:c1:57:91:98:55:8f:ac:a7:a0:6f:15:06:07:
6c:94:8e:dd:89:62:80:d3:c5:de:e0:1b:f5:2c:12:
5c:58:9c:f3:b0:a3:4e:2e:60:5d:36:84:f6:a0:75:
b1:bc:98:45:13:ca:19:a3:fc:b0:fc:1b:b2:0a:a5:
55:c9:98:47:d8:23:6f:1c:88:7c:1c:63:b0:c6:cd:
1c:9b:c8:9b:aa:6d:54:47:1b:57:00:21:0f:cc:49:
4c:8f:8d:00:f4:a2:c0:f8:e9:a6:21:7a:0e:b0:83:
c9:8a:f0:3a:b4:53:d8:a0:a2:ae:01:09:c9:42:01:
1a:08:38:58:86:67:ff:0d:01:e3:ae:c3:70:63:09:
70:c6:9e:1e:fe:6f:b7:b5:3f:2c:c4:da:44:fe:9a:
4f:ac:f1:78:50:5b:24:a4:5b:d8:03:8c:3c:4d:04:
64:44:be:94:cf:7b:a4:d0:9f:3f:20:53:92:2a:fb:
a8:da:ee:e3:67:1d:c5:7e:cf:aa:8d:aa:20:02:f0:
c8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:41:A5:A7:AA:A5:C5:AE:5E:D0:C3:7D:5D:9B:E5:A0:D8:59:FD:4E
X509v3 Authority Key Identifier:
keyid:9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/3130312e3233362e33322e302f32312d3231203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.236.32.0/21
Signature Algorithm: sha256WithRSAEncryption
ad:c3:a7:3c:f5:61:be:07:56:43:45:40:e5:4b:3d:8a:cc:38:
06:8e:49:5c:4c:90:15:67:85:4b:4d:d8:fd:c1:2e:2f:1d:8c:
3a:17:12:1e:29:a1:5e:9b:26:a2:e9:32:36:da:52:31:c4:01:
92:67:cd:9d:cc:5e:3e:41:d0:fa:ae:a1:cc:e7:da:d6:32:e6:
fa:4a:d6:5d:06:b2:6c:51:07:43:fa:bd:27:5b:39:ec:20:a6:
f1:72:42:40:d2:9a:d2:91:10:e2:df:66:79:24:46:a1:9f:44:
26:63:63:24:a0:c6:18:de:02:01:52:05:b0:47:7f:50:4e:60:
4f:e1:8c:7b:5c:52:57:ca:f1:78:81:14:eb:b0:14:ed:a0:72:
a0:1f:15:bd:7d:6e:30:a4:50:51:21:63:93:1b:3d:13:78:aa:
93:58:93:ba:73:76:38:23:0a:4d:f4:94:84:08:39:3e:db:df:
45:41:7c:2a:21:fe:f1:bb:67:e3:a0:1c:a1:c2:d2:5b:8f:e7:
5c:b0:bc:b8:0e:d8:57:09:7e:22:e4:bb:ca:22:50:cd:6c:da:
85:6e:09:a8:71:82:e9:ce:bb:20:ca:b4:b2:15:04:0f:b7:8a:
af:2c:f9:81:58:86:a9:3a:24:a5:24:e1:6f:75:34:f8:0d:f5:
dd:78:08:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:15 2026 by rpki-client