
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948402691/0/3131362e3235312e36342e302f31382d3234203d3e203337393633.roa
File: 3131362e3235312e36342e302f31382d3234203d3e203337393633.roa (raw, json)
Hash identifier: c0UPetqv4UH1FCrUJE1PkrN+kosNn3NSpLA0/9EQ7Og=
Subject key identifier: FD:D8:12:AA:10:FB:12:DD:ED:FF:2B:E0:70:4E:39:4F:7E:1F:23:59
Certificate issuer: /CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0
Certificate serial: 1E51C96A605A3716AF2507E50A4A644671918111
Authority key identifier: 0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/3131362e3235312e36342e302f31382d3234203d3e203337393633.roa
Signing time: Mon 11 May 2026 09:05:01 +0000
ROA not before: Mon 11 May 2026 09:00:01 +0000
ROA not after: Mon 10 May 2027 09:05:01 +0000
asID: 37963
IP address blocks: 116.251.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:14:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:51:c9:6a:60:5a:37:16:af:25:07:e5:0a:4a:64:46:71:91:81:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0
Validity
Not Before: May 11 09:00:01 2026 GMT
Not After : May 10 09:05:01 2027 GMT
Subject: CN=FDD812AA10FB12DDEDFF2BE0704E394F7E1F2359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:25:64:af:35:5a:88:f6:21:66:e6:f6:da:64:
e0:d2:ad:0c:65:1e:41:f5:ae:1a:4c:2d:82:82:5b:
19:78:e1:a1:14:4e:3a:04:5e:1e:14:b7:6a:70:ed:
7d:1f:17:0a:f7:30:5a:27:55:0c:62:c6:d0:d7:7e:
53:92:0f:80:14:47:f4:8a:56:07:01:b7:6a:a0:93:
4d:bc:ae:5d:cb:53:2c:96:7d:d6:71:dc:7d:72:b4:
4c:2a:ba:a6:79:8a:e0:05:4b:e5:d1:90:8c:b5:04:
b2:a3:36:34:1a:3d:f3:f9:13:3c:ff:e5:33:64:83:
9e:78:5c:d7:4a:73:e2:9f:79:6a:69:32:e5:1d:6c:
85:1f:b4:7b:1b:6a:0c:4f:d4:11:ec:67:0b:34:b6:
19:79:fc:26:f4:6f:ef:8b:28:88:ca:c9:53:97:b8:
f8:60:16:bf:b1:7a:ef:17:2c:57:6f:8a:94:a1:85:
b3:34:59:75:e7:ee:c8:a3:1a:ca:25:97:09:66:fe:
50:56:d7:06:f3:b1:cb:11:49:30:43:52:bd:c5:24:
6f:f9:91:29:73:d0:f9:1c:51:e8:5a:41:80:39:34:
20:8b:65:45:a0:b2:3e:84:fc:3d:98:2e:50:2b:10:
d1:f9:a4:c5:f0:55:6d:50:f0:fc:c0:f1:6a:40:b3:
f8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D8:12:AA:10:FB:12:DD:ED:FF:2B:E0:70:4E:39:4F:7E:1F:23:59
X509v3 Authority Key Identifier:
keyid:0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/3131362e3235312e36342e302f31382d3234203d3e203337393633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.251.64.0/18
Signature Algorithm: sha256WithRSAEncryption
ac:53:23:3f:2f:a6:92:4d:97:c8:8b:cf:41:c7:ba:fd:a7:d8:
7d:b0:bb:b7:c9:c7:2b:97:8b:eb:db:95:6b:20:3c:ce:8e:7b:
33:0b:56:95:11:19:53:fa:df:0f:e1:6e:7b:2f:57:e6:db:ad:
06:e2:08:f0:d3:c4:21:c7:3c:64:ad:88:7b:18:8a:70:37:37:
20:b2:61:8e:8c:d6:c3:73:88:e3:d1:e3:0f:11:e3:89:0b:ee:
cf:96:64:f6:af:5e:c8:4d:c5:09:7f:61:15:35:8d:1d:db:03:
80:8c:6d:9d:10:d0:5f:a8:ef:b9:bf:10:43:19:6b:7a:01:94:
8a:1b:13:4b:07:c4:17:3c:7c:51:06:5a:f6:17:71:5e:68:80:
33:8b:11:2a:16:d4:e3:86:ad:83:b6:d0:62:8a:8a:31:f1:71:
3f:66:07:56:35:f7:1f:3c:67:6c:a7:c9:ef:f1:15:28:ca:6b:
3d:0c:27:de:69:82:0e:d7:de:88:b3:77:2e:8f:49:94:4c:70:
03:25:43:4b:74:e0:4f:b1:9b:fc:72:63:7c:e5:59:31:6c:86:
fb:ad:0d:1f:ea:3c:b1:89:22:cd:2a:3e:b5:59:18:1a:f5:39:
f3:cc:93:19:f7:7e:90:d0:6b:f1:72:be:e9:3c:10:25:46:d1:
d6:ae:bb:87
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 11:56:19 2026 by rpki-client