
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117472653142196251/0/3130312e3233362e34302e302f32312d3231203d3e2034383038.roa
File: 3130312e3233362e34302e302f32312d3231203d3e2034383038.roa (raw, json)
Hash identifier: 8vI5GhaLGxlCOrBdMPXIOnk5Pe+WRa5V8TCJ/q1dUQ4=
Subject key identifier: AE:DB:F0:8B:31:FA:17:F4:27:4F:E2:DE:07:57:36:79:B1:35:EA:8F
Certificate issuer: /CN=9CDD899429A14223F030EC28602F57FC4CAC8F60
Certificate serial: 3C7EDACCBB061FA0E2A04EB1EB4E920DEAFBF824
Authority key identifier: 9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/3130312e3233362e34302e302f32312d3231203d3e2034383038.roa
Signing time: Thu 11 Jun 2026 15:43:16 +0000
ROA not before: Thu 11 Jun 2026 15:38:16 +0000
ROA not after: Thu 10 Jun 2027 15:43:16 +0000
asID: 4808
IP address blocks: 101.236.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl
rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 18:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:7e:da:cc:bb:06:1f:a0:e2:a0:4e:b1:eb:4e:92:0d:ea:fb:f8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CDD899429A14223F030EC28602F57FC4CAC8F60
Validity
Not Before: Jun 11 15:38:16 2026 GMT
Not After : Jun 10 15:43:16 2027 GMT
Subject: CN=AEDBF08B31FA17F4274FE2DE07573679B135EA8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:65:ea:7a:0c:b9:cf:89:23:b4:c0:fa:a4:fe:
04:85:e4:6f:4b:79:c1:99:d9:2a:31:15:6f:9b:9c:
b1:b6:a3:c8:b8:65:36:d3:37:94:a5:7b:14:b9:e9:
a1:67:de:84:18:74:8c:c2:a7:4a:35:69:52:8a:4a:
8a:23:72:50:56:f6:0d:c2:f2:af:60:b3:00:d1:09:
0d:e0:bc:4d:77:a1:99:a1:5b:2a:c1:d9:f3:16:92:
16:9f:6d:70:50:28:58:3c:8c:48:80:2c:cf:9a:fb:
88:91:62:50:64:c4:5e:ea:fb:d2:03:87:76:40:bd:
64:59:5a:e9:b2:d1:5f:5d:89:a2:c7:98:6a:a7:0a:
47:0a:51:22:eb:67:97:40:cf:ba:b4:2e:ce:63:2b:
ec:28:59:73:89:75:71:51:d3:ad:89:61:73:f4:a5:
5e:9b:48:45:ef:4b:30:dd:05:25:f8:53:34:6e:83:
37:46:f8:d9:d9:d5:a4:0e:ab:29:bb:23:05:2d:1b:
f3:21:11:4a:35:a5:1b:bb:b5:8a:83:36:4d:1f:e6:
65:33:66:cb:11:38:e8:a2:02:f0:c1:f3:97:57:d9:
ac:1d:6b:35:c2:b7:5b:f3:51:04:8a:fb:b9:f4:e0:
74:f7:de:f1:38:4e:3c:5f:36:85:40:40:3d:a2:05:
a3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DB:F0:8B:31:FA:17:F4:27:4F:E2:DE:07:57:36:79:B1:35:EA:8F
X509v3 Authority Key Identifier:
keyid:9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/3130312e3233362e34302e302f32312d3231203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.236.40.0/21
Signature Algorithm: sha256WithRSAEncryption
ac:2d:e8:0d:e8:9b:00:56:b1:34:74:fc:04:2d:21:7e:58:8a:
06:12:39:65:36:d9:68:5c:21:e6:41:b1:4e:14:0b:21:cd:63:
5f:07:44:37:0c:2b:8d:00:4b:19:97:9a:a4:5b:d7:51:fd:33:
33:1d:c5:d7:aa:69:41:45:06:83:d7:28:e8:f2:8d:09:29:81:
ca:d6:78:0b:64:2a:db:ff:c8:18:75:f7:e1:68:fd:84:d5:bf:
e0:31:10:3f:0d:41:b4:91:06:c1:14:98:e4:8a:89:5e:03:5a:
f5:36:40:d3:81:ee:da:c3:18:51:0c:b9:e6:76:3e:f0:b6:08:
a9:1d:dc:c8:cf:26:24:20:77:69:7c:7f:3f:2e:37:b9:45:5a:
2b:45:5a:d0:15:e4:a4:14:a0:fe:44:a1:7c:a0:43:5c:55:d6:
44:81:af:8d:12:06:63:f9:de:d9:f6:1f:47:6b:12:79:b5:e7:
7d:89:ab:79:46:cc:bd:c8:74:74:aa:b3:c9:14:30:82:f0:a3:
58:c8:da:2e:bf:0f:0e:3c:3e:be:e9:39:05:86:ff:8b:4e:db:
d5:16:72:8f:3e:fe:f5:59:cc:79:04:9c:b4:00:d4:e8:14:7d:
87:e1:0f:18:d5:31:1f:ff:32:17:e8:80:21:c0:93:2f:b8:58:
f1:a0:93:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:52 2026 by rpki-client