
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117472653142196251/0/3130312e3233362e35362e302f32312d3231203d3e203233373234.roa
File: 3130312e3233362e35362e302f32312d3231203d3e203233373234.roa (raw, json)
Hash identifier: VGm8riHXjhSy6E3Mwwdq3yaSLBlVWWUkYIjHtp5BOnc=
Subject key identifier: EF:26:28:AC:CF:72:B0:3B:8D:1C:B3:A0:CA:E3:0B:AC:FF:C5:2C:76
Certificate issuer: /CN=9CDD899429A14223F030EC28602F57FC4CAC8F60
Certificate serial: 0F27848172A486E4F5D21F6CA3E58E86CC834C13
Authority key identifier: 9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/3130312e3233362e35362e302f32312d3231203d3e203233373234.roa
Signing time: Thu 11 Jun 2026 15:44:24 +0000
ROA not before: Thu 11 Jun 2026 15:39:24 +0000
ROA not after: Thu 10 Jun 2027 15:44:24 +0000
asID: 23724
IP address blocks: 101.236.56.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl
rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 18:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:27:84:81:72:a4:86:e4:f5:d2:1f:6c:a3:e5:8e:86:cc:83:4c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CDD899429A14223F030EC28602F57FC4CAC8F60
Validity
Not Before: Jun 11 15:39:24 2026 GMT
Not After : Jun 10 15:44:24 2027 GMT
Subject: CN=EF2628ACCF72B03B8D1CB3A0CAE30BACFFC52C76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fe:96:df:59:a3:a8:fb:f1:5d:78:7b:be:87:
c0:0a:6c:cb:23:4c:da:99:9f:e6:af:25:34:48:2e:
6c:56:24:df:85:a6:1e:83:8c:92:6e:5a:0a:97:2c:
74:22:41:1b:5b:ba:86:be:eb:8b:f9:7a:d5:1c:42:
dd:d5:70:9f:4c:e7:11:5b:77:02:ac:d2:a2:20:47:
af:b5:83:a1:1e:24:fd:6d:81:d3:9b:df:56:2f:a8:
0b:84:5e:7c:75:56:32:3e:77:0c:ed:1a:43:2f:46:
ea:38:8a:dd:95:d4:1e:37:d2:24:d7:71:66:84:8d:
b5:b3:e6:88:dd:0b:34:d8:5a:0d:96:df:95:01:78:
7d:b1:23:5c:bf:6f:74:ff:ed:3e:8a:0b:47:34:1c:
d1:20:fe:ca:ab:ec:9b:45:f3:78:10:35:d8:0f:de:
4f:d0:35:d3:26:ea:dd:33:7f:c3:76:81:01:ea:65:
37:62:7b:32:01:15:82:01:cf:1a:e2:04:db:ff:7c:
6a:5f:a6:68:eb:b0:f7:d0:df:0b:87:03:3c:22:8f:
d3:c5:9c:ab:10:d5:21:58:a7:ae:15:8d:1a:f3:ce:
f1:71:cc:ab:8f:76:bb:25:6c:cd:0c:59:fb:7b:00:
27:ef:e0:89:ef:7e:87:26:5d:14:00:4c:b3:56:53:
b5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:26:28:AC:CF:72:B0:3B:8D:1C:B3:A0:CA:E3:0B:AC:FF:C5:2C:76
X509v3 Authority Key Identifier:
keyid:9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/3130312e3233362e35362e302f32312d3231203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.236.56.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:67:7b:62:f0:fb:b3:e5:56:09:33:3a:b9:ee:18:e3:a1:ef:
b2:ac:95:75:d9:c3:66:80:20:44:ea:5a:ff:e2:be:5f:95:7d:
02:ec:75:2e:1d:9f:b1:4a:91:9d:b4:56:12:2d:a1:b4:81:26:
12:fb:20:d7:37:55:ea:4d:df:a6:d2:56:a7:1e:27:7a:cb:c7:
e8:ef:89:0f:c9:35:b4:e2:67:26:14:b1:4b:10:fc:d9:88:cb:
a0:b6:59:7c:fb:1f:4c:48:38:12:83:c8:a3:c4:7e:65:67:a0:
41:31:9b:29:1e:e3:b0:e1:b2:b6:e0:0f:3e:c1:6a:ce:8c:0a:
e1:a8:53:83:db:b7:50:bd:b2:db:e0:ad:aa:16:4b:b1:d1:48:
74:79:18:61:25:f4:97:0a:8b:57:2f:d1:e6:61:06:f2:99:dc:
4e:fa:d7:57:46:b0:81:bd:3b:b5:c0:70:82:ff:c2:24:4e:10:
06:d5:7e:7d:2b:0a:0c:57:33:ec:a6:b4:5c:a3:1e:9f:90:00:
1f:29:1a:59:32:c8:82:cc:a3:99:c7:7f:82:0d:73:79:2a:53:
31:f4:ef:80:72:a4:fb:d6:22:73:3e:73:bb:cd:c4:da:51:b9:
b1:6d:43:2b:e8:a9:56:1e:12:71:2f:38:74:ab:5d:68:a0:3d:
12:b4:55:09
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:58 2026 by rpki-client