
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123880523131781155/0/3131312e3231302e302e302f32302d3332203d3e203435313036.roa
File: 3131312e3231302e302e302f32302d3332203d3e203435313036.roa (raw, json)
Hash identifier: 4DjhKvqSq3IX3/NNTmAHZ5682EPO414ycb2vyooRbXQ=
Subject key identifier: 33:5B:DE:E7:9F:87:78:0E:67:5B:A2:DB:C1:D0:9B:3D:66:A6:F3:0E
Certificate issuer: /CN=7E8EBDDCE23312FAF91758581FB143F7AF35FA8F
Certificate serial: 2C5BB457459AEBA259FF99EEB203E0B61FD9758F
Authority key identifier: 7E:8E:BD:DC:E2:33:12:FA:F9:17:58:58:1F:B1:43:F7:AF:35:FA:8F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/3131312e3231302e302e302f32302d3332203d3e203435313036.roa
Signing time: Mon 29 Jun 2026 07:44:16 +0000
ROA not before: Mon 29 Jun 2026 07:39:16 +0000
ROA not after: Mon 28 Jun 2027 07:44:16 +0000
asID: 45106
IP address blocks: 111.210.0.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.crl
rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 06:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:5b:b4:57:45:9a:eb:a2:59:ff:99:ee:b2:03:e0:b6:1f:d9:75:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E8EBDDCE23312FAF91758581FB143F7AF35FA8F
Validity
Not Before: Jun 29 07:39:16 2026 GMT
Not After : Jun 28 07:44:16 2027 GMT
Subject: CN=335BDEE79F87780E675BA2DBC1D09B3D66A6F30E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6e:f0:41:3f:c9:a6:90:3e:7d:97:34:7c:ad:
33:b5:8b:5c:31:1a:c7:cc:74:98:00:da:01:c7:5c:
7d:41:fc:63:dc:f8:9a:36:f9:f8:43:37:63:74:27:
dd:f7:c7:44:ea:ca:e1:aa:a8:47:fa:63:9e:d1:e8:
da:d4:10:f3:a0:1f:05:2b:1d:36:6c:a3:29:df:a1:
27:f8:5d:39:78:06:ff:5f:a6:0a:d6:04:7b:43:41:
79:8e:4c:58:ea:0b:bc:35:ed:d6:b9:db:d1:03:a6:
fe:16:c6:75:4a:d2:d1:3c:23:f0:cb:eb:16:ea:e4:
0c:24:23:84:ed:f0:04:c6:95:01:86:3f:90:aa:8d:
fd:84:61:0d:e2:0a:bd:55:ee:4c:c8:e1:97:33:9f:
52:67:1e:77:ba:1c:f0:ec:44:4d:cd:83:c5:de:88:
9f:94:96:64:51:e8:c2:f3:ea:5d:a7:55:d9:13:7e:
23:84:d7:3d:4b:d9:3f:67:eb:ce:c5:d5:ad:87:52:
95:ed:22:b6:3d:ae:3a:ef:8a:11:d0:f2:a6:2d:a6:
a9:37:c5:53:8e:aa:09:a9:96:7f:e3:09:25:8b:84:
6e:dd:f6:ec:ef:ad:5c:0a:3b:a6:88:00:74:e5:e2:
ef:60:56:23:cc:62:21:c5:b8:39:70:cf:9d:c7:6d:
b5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5B:DE:E7:9F:87:78:0E:67:5B:A2:DB:C1:D0:9B:3D:66:A6:F3:0E
X509v3 Authority Key Identifier:
keyid:7E:8E:BD:DC:E2:33:12:FA:F9:17:58:58:1F:B1:43:F7:AF:35:FA:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/3131312e3231302e302e302f32302d3332203d3e203435313036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.210.0.0/20
Signature Algorithm: sha256WithRSAEncryption
0c:a0:ea:3a:07:49:68:8a:7e:7c:cf:a0:40:62:6f:e3:91:43:
a4:ba:51:9d:eb:08:fb:9f:4f:8b:15:44:3e:3b:55:98:89:2c:
c5:8d:fd:fe:4b:5c:45:33:51:66:09:b1:d9:27:30:27:d3:28:
16:91:0f:6a:b7:ee:0a:48:39:f6:01:46:d6:77:4f:c1:40:eb:
74:40:90:54:39:a3:1f:88:47:e9:af:48:48:f1:84:37:bc:cf:
32:9d:29:be:03:93:03:61:8a:d2:79:d6:ee:20:17:6b:3b:ed:
cc:bb:19:38:36:37:2d:26:52:47:44:62:69:58:72:6c:19:63:
83:ee:0b:34:bf:e0:9d:72:31:02:7a:9f:c1:96:02:17:b5:2c:
6b:fd:19:2a:01:d4:11:51:2b:e1:cc:dd:39:94:a3:4d:1d:17:
be:92:ee:89:06:bc:6a:9a:43:77:ed:0d:37:00:c5:83:6b:65:
eb:c0:6b:69:fb:68:8a:86:ff:61:93:80:d5:5d:7b:81:63:65:
58:a3:15:12:bc:64:db:ed:b6:8f:c9:e3:a5:f8:ff:4f:92:b9:
2e:64:ee:82:60:93:63:85:05:96:28:8f:e0:24:a5:c3:ec:0a:
a2:d1:4e:18:23:c9:af:17:fd:48:39:c2:c0:3f:92:4f:49:88:
86:a1:6e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:26 2026 by rpki-client