
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3135342e382e3134342e302f32302d3230203d3e203435303930.roa
File: 3135342e382e3134342e302f32302d3230203d3e203435303930.roa (raw, json)
Hash identifier: NMawdsIIdl1oQseMxc0vIYnBkhsdRuKhrrDT0P0qcSI=
Subject key identifier: EA:32:F5:DD:FB:0E:2D:32:83:D9:2D:F3:06:F1:9A:37:F6:D1:FF:72
Certificate issuer: /CN=A91209740000/serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC
Certificate serial: 5E97633EBDC354A06F9F03864FE225672E84C915
Authority key identifier: 39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3135342e382e3134342e302f32302d3230203d3e203435303930.roa
Signing time: Tue 30 Jun 2026 10:40:07 +0000
ROA not before: Tue 30 Jun 2026 10:35:07 +0000
ROA not after: Tue 29 Jun 2027 10:40:07 +0000
asID: 45090
IP address blocks: 154.8.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl
rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Jul 2026 01:26:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:97:63:3e:bd:c3:54:a0:6f:9f:03:86:4f:e2:25:67:2e:84:c9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91209740000, serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC
Validity
Not Before: Jun 30 10:35:07 2026 GMT
Not After : Jun 29 10:40:07 2027 GMT
Subject: CN=EA32F5DDFB0E2D3283D92DF306F19A37F6D1FF72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:66:93:96:9a:69:72:d4:eb:61:f2:30:97:65:
80:af:fa:49:d6:9b:8c:3e:7c:1b:1e:07:54:8b:32:
4f:e5:03:00:76:12:2d:50:d9:58:53:be:62:93:90:
41:7a:46:46:36:aa:cd:6f:9b:56:a7:a2:90:9e:c6:
4e:69:48:c7:b5:96:e5:5c:a3:05:55:b4:81:fb:cc:
9d:63:dc:c5:e2:06:c2:23:07:36:ea:c4:e9:4f:a9:
d5:93:26:a9:02:c7:cc:d6:c2:d4:31:1c:ce:3b:2f:
a9:ab:29:41:61:02:0a:fa:86:ca:47:19:69:65:4c:
13:28:7f:06:18:10:3d:81:b8:23:da:d2:fb:c7:68:
a0:84:ff:ac:4f:e8:a6:db:85:fa:17:3f:4f:60:8f:
7c:7e:d6:7d:c8:35:c8:ec:21:22:17:e1:7c:53:45:
35:b1:43:5a:06:6d:66:00:58:90:e6:8e:f6:8c:b5:
63:c8:b0:6f:c6:99:73:74:c4:45:a7:88:aa:10:b7:
a2:49:1d:cc:75:da:4e:bc:75:4b:dd:8b:c7:f5:4a:
33:12:87:d5:10:3c:6f:eb:78:21:42:b9:08:5e:d5:
f2:66:7e:eb:eb:29:eb:55:16:43:1e:1e:dc:10:29:
fc:de:5a:b5:8e:03:1f:ed:41:58:58:68:a2:1c:00:
4e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:32:F5:DD:FB:0E:2D:32:83:D9:2D:F3:06:F1:9A:37:F6:D1:FF:72
X509v3 Authority Key Identifier:
keyid:39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3135342e382e3134342e302f32302d3230203d3e203435303930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
154.8.144.0/20
Signature Algorithm: sha256WithRSAEncryption
0e:ad:6d:79:5e:cd:7b:b4:85:f7:c8:91:5f:8b:cd:f3:30:bb:
53:67:d3:1e:89:d5:1c:ba:24:2e:dd:ae:92:49:03:0c:ff:3d:
cb:83:df:bd:dc:99:01:8d:b8:ec:8b:56:64:47:5b:a2:f4:04:
33:96:49:52:6a:57:fe:22:d8:4f:98:6e:58:95:28:f5:53:b6:
13:94:04:36:db:ed:1d:7e:ef:73:58:51:f7:45:8c:03:67:14:
79:de:74:47:37:74:b8:9c:03:02:3d:dd:cd:6a:35:00:1e:9d:
39:e8:ff:f3:a4:3e:7d:40:3a:7e:2d:c5:87:8b:2b:15:e8:aa:
d0:d8:6b:9a:81:b4:4b:db:eb:4a:2e:16:7e:47:32:dd:16:ef:
7d:37:e5:3f:e7:0a:bc:e0:0d:c5:4d:d4:8d:75:94:70:be:c2:
e5:c1:bb:cd:73:b3:a3:32:1a:88:e9:dd:45:a7:6f:c4:7e:69:
29:7e:6c:4c:32:32:37:6b:c6:2d:93:38:a2:bc:24:c3:fa:a3:
a0:e6:f2:1a:f0:ac:03:a5:02:08:19:92:07:89:4b:fb:cc:1b:
98:36:d5:d4:3a:02:19:a7:81:a4:fe:69:86:fe:9c:7e:61:5b:
28:c0:a5:85:7b:09:d0:56:83:63:0e:37:86:a8:47:de:68:d9:
83:61:55:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 06:08:37 2026 by rpki-client