
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121692552068595751/0/3136332e36312e3230332e302f32342d3332203d3e203633363231.roa
File: 3136332e36312e3230332e302f32342d3332203d3e203633363231.roa (raw, json)
Hash identifier: CedaRKdjPPCA3LLv4C4vl58bISm5EdjTJJJPH3QticU=
Subject key identifier: C6:45:21:D1:09:BB:3B:33:41:23:9F:61:CB:DB:34:1F:65:26:2E:59
Certificate issuer: /CN=BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C
Certificate serial: 52A319A2A4F7F568680F9D0C5E8942F4A6E15F17
Authority key identifier: BF:85:79:65:C9:23:1C:5E:F5:7C:BB:E7:A0:9D:87:C2:FC:6E:8C:7C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/3136332e36312e3230332e302f32342d3332203d3e203633363231.roa
Signing time: Tue 23 Jun 2026 08:06:30 +0000
ROA not before: Tue 23 Jun 2026 08:01:30 +0000
ROA not after: Tue 22 Jun 2027 08:06:30 +0000
asID: 63621
IP address blocks: 163.61.203.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.crl
rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 15:09:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:a3:19:a2:a4:f7:f5:68:68:0f:9d:0c:5e:89:42:f4:a6:e1:5f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C
Validity
Not Before: Jun 23 08:01:30 2026 GMT
Not After : Jun 22 08:06:30 2027 GMT
Subject: CN=C64521D109BB3B3341239F61CBDB341F65262E59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cc:6c:f7:d7:90:3d:d1:6e:ee:6f:79:6c:6d:
60:99:b5:54:62:74:db:26:d6:e7:ac:b0:c9:97:49:
04:2d:d1:3b:b4:ca:b1:6d:f5:fe:bd:5d:7f:e9:1b:
95:e3:5a:94:67:02:d7:61:ab:f0:a2:5d:a0:f2:9b:
bd:4c:8a:ce:4f:75:45:d9:50:04:25:07:d4:20:d5:
e0:54:87:9d:08:54:14:8b:a4:16:0c:78:a5:65:0e:
5b:7d:e8:dd:35:28:5d:84:ad:93:90:4e:43:7e:b1:
f7:4f:da:d8:93:5f:39:32:4d:d9:e2:fd:7e:88:6e:
7c:5e:bc:02:6d:6a:bb:a2:bc:b8:1e:1f:f8:67:cf:
e7:5c:0d:c2:fb:2d:f2:eb:ce:2a:42:20:df:63:b8:
63:37:ab:c5:9e:5d:d1:0f:b5:75:04:b6:56:37:cc:
26:5a:1e:15:c1:14:2b:e8:b0:fe:7d:9e:fb:54:34:
86:23:e7:5c:63:c2:23:66:7b:b1:c4:ac:51:61:26:
3f:33:9b:41:f3:eb:27:63:56:1c:9f:3a:3a:b8:cd:
16:2f:c2:a4:01:81:dc:43:98:e3:17:1b:a0:9a:a2:
78:fb:55:25:3f:1c:8c:3e:e0:47:68:4f:52:4f:1c:
bb:6d:dd:01:97:ef:24:69:67:ef:65:d2:af:07:7e:
f2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:45:21:D1:09:BB:3B:33:41:23:9F:61:CB:DB:34:1F:65:26:2E:59
X509v3 Authority Key Identifier:
keyid:BF:85:79:65:C9:23:1C:5E:F5:7C:BB:E7:A0:9D:87:C2:FC:6E:8C:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/3136332e36312e3230332e302f32342d3332203d3e203633363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.61.203.0/24
Signature Algorithm: sha256WithRSAEncryption
64:53:00:71:92:91:0f:a1:5d:bc:15:57:1c:6b:c0:61:67:ae:
75:6a:b3:32:bf:a2:62:c0:ce:eb:66:d5:b1:28:20:a4:d5:e7:
c2:5e:25:8c:46:6f:05:e7:3c:56:12:fb:a5:30:b0:39:28:64:
d9:90:7a:1f:30:a9:a0:d0:0a:01:f4:19:2d:60:fa:74:0a:a7:
6c:6a:15:45:e9:99:2f:72:86:c6:d4:ec:98:4d:81:be:95:9c:
97:9d:02:a6:55:ef:f7:3d:fe:dc:d4:19:86:c0:99:fb:51:e5:
16:2d:4e:4f:0d:65:10:23:2e:d2:e9:00:22:6e:25:42:95:80:
bc:80:6b:c7:e0:b7:db:f1:6d:78:c1:80:d3:e1:d6:86:5a:00:
9e:64:6b:70:36:3c:99:38:b6:e4:e5:f1:22:c5:17:2b:7d:a0:
c9:6a:36:3d:3d:83:6c:05:b9:70:45:5a:44:21:68:30:ac:5e:
65:e1:35:32:13:84:1c:fe:08:b4:5d:78:2c:a9:c9:89:1f:ae:
ef:00:b5:45:f5:82:34:a8:0d:12:51:43:91:18:de:6c:50:95:
00:14:8d:80:18:51:d4:fa:80:b7:b9:46:3a:5b:d6:5b:64:f7:
55:f9:47:7c:0b:20:a6:8d:ea:85:ee:2a:3b:9e:60:fc:e2:30:
31:2b:f7:a0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:57:55 2026 by rpki-client