
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117472653142196251/0/3130312e3233362e33322e302f32312d3231203d3e203539303235.roa
File: 3130312e3233362e33322e302f32312d3231203d3e203539303235.roa (raw, json)
Hash identifier: +l6HN3VoLCzBmjvxHqTueuc018rsAXi3n0RDYTqRyf0=
Subject key identifier: 79:A5:A8:D6:D9:5A:B3:08:03:63:E7:E5:41:6E:66:F1:19:F3:76:FB
Certificate issuer: /CN=9CDD899429A14223F030EC28602F57FC4CAC8F60
Certificate serial: 05DB15E6AAFF564937167037E325FB648ACA74A1
Authority key identifier: 9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/3130312e3233362e33322e302f32312d3231203d3e203539303235.roa
Signing time: Thu 11 Jun 2026 15:42:46 +0000
ROA not before: Thu 11 Jun 2026 15:37:46 +0000
ROA not after: Thu 10 Jun 2027 15:42:46 +0000
asID: 59025
IP address blocks: 101.236.32.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl
rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 18:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:db:15:e6:aa:ff:56:49:37:16:70:37:e3:25:fb:64:8a:ca:74:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CDD899429A14223F030EC28602F57FC4CAC8F60
Validity
Not Before: Jun 11 15:37:46 2026 GMT
Not After : Jun 10 15:42:46 2027 GMT
Subject: CN=79A5A8D6D95AB3080363E7E5416E66F119F376FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d2:a2:e1:51:f5:01:f4:d0:51:03:10:d9:d3:
03:6a:75:63:66:59:9c:8b:8a:99:24:97:3c:bd:2c:
41:14:50:91:79:f7:ac:f2:17:70:ee:f7:79:d1:d7:
3b:60:c2:69:99:00:9b:5d:0f:a0:68:f5:9f:14:f0:
3d:fb:95:72:35:61:3c:a4:cd:57:5e:2e:9a:18:47:
21:18:05:f4:b1:5f:83:75:1b:95:35:9a:57:b7:dd:
b9:95:9d:fe:0e:1a:46:98:fe:09:2e:64:a0:a7:72:
33:0d:a8:fc:75:70:89:ba:bc:c8:3b:67:d2:db:4d:
aa:59:e0:29:a2:f1:b2:65:af:89:93:a5:3e:0e:7e:
80:ff:d1:81:7b:6a:fb:b4:01:74:6c:99:98:cd:b6:
b6:aa:94:0b:39:e8:e8:3f:49:1f:79:e9:ef:71:0c:
58:1b:05:49:fa:2a:8f:35:98:e5:df:42:97:63:c2:
87:79:0c:14:e1:71:2b:e1:20:85:74:2b:3d:0f:cc:
79:f5:2b:4d:35:88:38:83:18:37:6d:26:30:d2:4d:
84:49:be:46:2b:d6:1b:1e:c6:08:1b:85:dc:fc:ae:
da:72:12:5a:3a:c4:01:36:5f:41:c0:a1:0a:ed:d7:
12:9b:cf:e4:31:89:d7:30:c1:91:09:d6:2e:d5:a4:
31:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A5:A8:D6:D9:5A:B3:08:03:63:E7:E5:41:6E:66:F1:19:F3:76:FB
X509v3 Authority Key Identifier:
keyid:9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/3130312e3233362e33322e302f32312d3231203d3e203539303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.236.32.0/21
Signature Algorithm: sha256WithRSAEncryption
bf:90:e0:cc:1c:9b:88:f2:51:43:9f:5e:8a:df:41:1e:43:1c:
c3:b8:f2:3e:d8:5f:3b:b0:82:d6:64:a0:78:da:7c:18:b7:57:
52:68:48:cb:fd:53:8b:07:46:3e:66:d7:51:ab:da:ea:94:0a:
d4:39:65:8e:09:aa:ee:3b:4f:eb:76:c6:0f:73:4e:d4:98:5c:
9b:80:62:2a:72:0a:97:f1:0c:09:72:0e:94:34:0e:e5:d1:64:
99:f1:58:24:b0:d1:d5:db:57:26:69:58:79:20:2e:83:82:18:
0e:cf:f6:29:4e:80:a3:b6:56:7f:79:dc:24:3c:4f:9c:ee:4d:
23:09:1f:30:12:b8:0f:26:c8:b8:49:7d:87:f8:8b:57:0d:07:
f8:8f:68:9c:e8:32:a6:f9:53:4d:43:62:48:b7:b6:35:27:52:
a5:57:4b:88:fa:96:8b:75:04:16:09:0c:af:43:18:ee:68:74:
51:1d:e2:ba:d2:a6:fc:ce:b4:58:81:1b:61:8f:02:d8:cd:c4:
83:e6:8a:73:ac:54:9e:ea:ae:72:74:ec:0f:b4:9c:56:e4:2d:
cc:ec:d9:12:6d:99:54:9a:3f:19:01:8f:bb:88:ee:dd:b3:86:
99:6e:7e:0a:6c:de:d9:85:57:71:d1:2d:d4:fa:4e:5f:7e:68:
e2:1b:b7:b4
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUBdsV5qr/Vkk3FnA34yX7ZIrKdKEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNERDg5OTQyOUExNDIyM0YwMzBFQzI4NjAyRjU3RkM0
Q0FDOEY2MDAeFw0yNjA2MTExNTM3NDZaFw0yNzA2MTAxNTQyNDZaMDMxMTAvBgNV
BAMTKDc5QTVBOEQ2RDk1QUIzMDgwMzYzRTdFNTQxNkU2NkYxMTlGMzc2RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm0qLhUfUB9NBRAxDZ0wNqdWNm
WZyLipkklzy9LEEUUJF596zyF3Du93nR1ztgwmmZAJtdD6Bo9Z8U8D37lXI1YTyk
zVdeLpoYRyEYBfSxX4N1G5U1mle33bmVnf4OGkaY/gkuZKCncjMNqPx1cIm6vMg7
Z9LbTapZ4Cmi8bJlr4mTpT4OfoD/0YF7avu0AXRsmZjNtraqlAs56Og/SR956e9x
DFgbBUn6Ko81mOXfQpdjwod5DBThcSvhIIV0Kz0PzHn1K001iDiDGDdtJjDSTYRJ
vkYr1hsexggbhdz8rtpyElo6xAE2X0HAoQrt1xKbz+QxidcwwZEJ1i7VpDEdAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUeaWo1tlaswgDY+flQW5m8RnzdvswHwYDVR0j
BBgwFoAUnN2JlCmhQiPwMOwoYC9X/Eysj2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
NzQ3MjY1MzE0MjE5NjI1MS8wLzlDREQ4OTk0MjlBMTQyMjNGMDMwRUMyODYwMkY1
N0ZDNENBQzhGNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOUNERDg5OTQyOUExNDIyM0YwMzBFQzI4NjAyRjU3RkM0Q0FDOEY2MC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTExNzQ3MjY1MzE0MjE5NjI1MS8wLzMxMzAzMTJlMzIz
MzM2MmUzMzMyMmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzUzOTMwMzIzNS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEA2XsIDANBgkqhkiG9w0BAQsFAAOCAQEAv5DgzBybiPJRQ59eit9BHkMc
w7jyPthfO7CC1mSgeNp8GLdXUmhIy/1TiwdGPmbXUava6pQK1Dlljgmq7jtP63bG
D3NO1Jhcm4BiKnIKl/EMCXIOlDQO5dFkmfFYJLDR1dtXJmlYeSAug4IYDs/2KU6A
o7ZWf3ncJDxPnO5NIwkfMBK4DybIuEl9h/iLVw0H+I9onOgypvlTTUNiSLe2NSdS
pVdLiPqWi3UEFgkMr0MY7mh0UR3iutKm/M60WIEbYY8C2M3Eg+aKc6xUnuqucnTs
D7ScVuQtzOzZEm2ZVJo/GQGPu4ju3bOGmW5+Cmze2YVXcdEt1PpOX35o4hu3tA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:56 2026 by rpki-client