
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3135342e382e3133302e302f32332d3233203d3e203435303930.roa
File: 3135342e382e3133302e302f32332d3233203d3e203435303930.roa (raw, json)
Hash identifier: PlOvxEsiceaBmrwi9Y0oLmqES7d7f6yZYQByrUtLv30=
Subject key identifier: 80:54:B2:00:33:1F:B7:63:5C:B6:17:06:DD:92:70:38:6B:58:44:BD
Certificate issuer: /CN=A91209740000/serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC
Certificate serial: 392F67D41D376EE0D75E6622FF6D80F180961566
Authority key identifier: 39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3135342e382e3133302e302f32332d3233203d3e203435303930.roa
Signing time: Tue 30 Jun 2026 10:39:03 +0000
ROA not before: Tue 30 Jun 2026 10:34:03 +0000
ROA not after: Tue 29 Jun 2027 10:39:03 +0000
asID: 45090
IP address blocks: 154.8.130.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl
rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Jul 2026 01:26:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:2f:67:d4:1d:37:6e:e0:d7:5e:66:22:ff:6d:80:f1:80:96:15:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91209740000, serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC
Validity
Not Before: Jun 30 10:34:03 2026 GMT
Not After : Jun 29 10:39:03 2027 GMT
Subject: CN=8054B200331FB7635CB61706DD9270386B5844BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a5:da:0c:8f:30:5e:d9:37:06:53:d1:2b:0d:
80:b8:b5:fc:66:71:0a:b0:29:b6:1c:48:3e:d9:62:
02:af:37:5e:c1:ee:37:4f:47:6b:42:cb:a8:a5:dd:
74:fb:22:6e:13:25:d4:a8:b4:45:b0:dd:8c:9a:76:
5d:71:35:11:a4:58:76:b8:a0:fc:6d:6c:e4:a3:8d:
1e:bc:ff:37:29:2b:89:5b:b9:b6:af:62:39:c6:1e:
da:01:c9:ba:05:af:10:95:b1:49:8e:4a:32:a7:3f:
15:01:76:f7:6a:13:a6:33:d7:02:cf:80:a1:18:72:
fa:03:2b:42:0a:ef:b8:a3:d0:1e:54:a0:0f:fd:e1:
5e:6d:5c:a8:f8:25:07:fa:66:77:d5:97:b3:74:31:
1d:6e:84:35:c7:e2:a0:da:6f:fb:87:ec:2e:c9:14:
6d:ae:a7:1c:c7:0e:d4:48:10:79:17:e4:20:ed:b0:
66:ac:b3:62:fb:d8:68:05:e5:98:59:19:ad:48:25:
d7:f6:cb:c5:4b:96:1d:7f:ac:19:8b:9c:df:be:44:
63:c2:b4:27:82:3a:79:68:3c:44:70:18:7c:3e:08:
e6:32:3f:a5:67:76:32:bf:23:aa:52:73:51:60:41:
62:40:b1:47:8f:67:8b:9b:d8:af:e0:72:a2:e9:7f:
2c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:54:B2:00:33:1F:B7:63:5C:B6:17:06:DD:92:70:38:6B:58:44:BD
X509v3 Authority Key Identifier:
keyid:39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3135342e382e3133302e302f32332d3233203d3e203435303930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
154.8.130.0/23
Signature Algorithm: sha256WithRSAEncryption
76:30:d0:01:40:7e:3e:5f:f6:23:98:7c:30:fa:35:db:41:0a:
93:b6:19:a3:fb:97:83:f4:13:6f:51:ff:a4:a4:da:d1:d4:54:
60:a3:0f:d3:0c:54:09:5f:6e:5e:e5:f0:c4:13:a1:c5:c7:28:
3a:1d:55:92:bb:e3:55:eb:88:4a:d7:1a:69:58:be:83:49:63:
3b:76:47:db:dd:c0:c9:96:02:00:77:5e:eb:29:33:eb:9b:71:
78:d4:65:48:5c:13:97:87:1b:0b:f2:5c:81:c5:e9:e8:74:37:
4d:cd:3e:6f:2d:38:0e:11:3e:6a:37:2d:07:a8:d8:1d:4e:26:
df:a0:f6:4b:94:28:59:9f:64:47:d3:24:3a:71:ab:30:10:6c:
5a:60:e6:b6:14:5e:3d:38:78:ea:6c:16:b8:5c:c7:e4:bd:55:
16:96:e5:51:2e:a5:32:16:de:0e:49:b1:2a:02:4a:d4:7c:d3:
86:12:0c:de:75:64:b2:f3:3b:16:d0:62:12:8a:57:77:2e:43:
17:1d:4a:6c:fa:78:1a:b8:c7:ba:d2:47:15:f9:7e:2e:2b:04:
b9:b9:fa:76:bd:f7:ee:35:a7:90:2e:74:a9:b8:6f:d3:cd:24:
d5:31:da:6a:a9:2e:b9:5e:10:17:0e:ea:72:6a:56:1e:a8:b6:
8a:fe:a0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 06:08:36 2026 by rpki-client