
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3131342e3134312e3136302e302f31392d3139203d3e203435303631.roa
File: 3131342e3134312e3136302e302f31392d3139203d3e203435303631.roa (raw, json)
Hash identifier: JCIREiuOF9Kv/Vlb/fhDKY/AqbnrP7VRNXpBzQfkI54=
Subject key identifier: E8:16:13:22:4E:B7:57:9E:89:BA:EC:72:73:BD:73:31:87:A1:62:B2
Certificate issuer: /CN=8421F0680EB1B3756485D0F7681F78067E9C172E
Certificate serial: 16C0EE62C011F7D018F4BA448BFDFE0C665C88E4
Authority key identifier: 84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3131342e3134312e3136302e302f31392d3139203d3e203435303631.roa
Signing time: Sat 09 May 2026 11:55:54 +0000
ROA not before: Sat 09 May 2026 11:50:54 +0000
ROA not after: Sat 08 May 2027 11:55:54 +0000
asID: 45061
IP address blocks: 114.141.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:c0:ee:62:c0:11:f7:d0:18:f4:ba:44:8b:fd:fe:0c:66:5c:88:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8421F0680EB1B3756485D0F7681F78067E9C172E
Validity
Not Before: May 9 11:50:54 2026 GMT
Not After : May 8 11:55:54 2027 GMT
Subject: CN=E81613224EB7579E89BAEC7273BD733187A162B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:12:5e:ee:ee:d0:93:52:8c:98:a2:91:56:9a:
0b:a2:34:a9:38:f9:a4:3d:ec:e2:c4:50:51:f0:6a:
85:6f:50:82:7e:cc:09:97:6f:ce:2c:92:a9:ef:e9:
64:58:35:35:9e:09:e4:f4:0d:df:6b:0f:7e:72:d8:
4f:b7:ad:6a:06:f0:f7:87:75:5b:f1:2e:0e:72:1d:
14:a4:d5:f5:47:f8:7a:f4:7f:bb:25:d7:6b:65:b7:
f5:79:38:d3:40:1f:2f:a4:27:1f:a4:6f:dc:39:1f:
49:11:9d:9c:bd:c4:b5:c9:dc:5b:43:1b:94:75:bf:
f4:5f:b2:54:27:23:44:02:b9:4f:e9:6d:77:12:be:
7f:02:74:69:58:81:af:4f:c7:0c:e4:ab:42:fb:92:
42:cd:23:2f:2f:21:9f:a9:2b:ed:47:a4:08:fc:69:
11:6e:fb:3f:9e:8f:60:74:83:d4:7c:b5:28:ea:a4:
72:0e:a9:76:9f:ac:3f:1a:84:94:f1:25:10:eb:96:
80:0d:2e:6d:70:ec:45:70:6c:ba:ac:6a:95:1f:3d:
0f:f1:f9:71:17:27:c5:2d:5a:39:ed:b6:3b:da:6e:
12:a4:f9:ed:6a:9c:4d:42:0d:b7:c0:61:ad:cf:5f:
e3:c3:0a:cb:d0:ed:f2:9a:c9:ed:fe:9a:01:55:2c:
5e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:16:13:22:4E:B7:57:9E:89:BA:EC:72:73:BD:73:31:87:A1:62:B2
X509v3 Authority Key Identifier:
keyid:84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3131342e3134312e3136302e302f31392d3139203d3e203435303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.141.160.0/19
Signature Algorithm: sha256WithRSAEncryption
4d:29:37:6b:2f:d4:82:f1:5e:3a:0c:96:ce:9b:12:c0:94:06:
9b:82:05:ac:16:78:e1:46:a7:6b:bb:47:33:92:3b:bb:f2:06:
af:a8:0f:e0:b4:53:3c:9d:da:92:47:4d:3e:4f:f7:3a:c6:cb:
96:f3:78:8b:55:dd:f8:db:8c:59:2d:81:51:23:f3:26:9b:07:
e4:d2:63:61:2e:c3:4b:7f:fe:ef:d2:d9:7f:ca:3c:60:97:05:
68:47:c4:5d:cf:49:c7:49:3f:58:19:59:a6:69:44:49:df:59:
2a:8f:72:d0:99:66:a9:44:9c:9c:cb:a9:e7:65:53:01:7c:1f:
3f:ee:d8:ae:73:7c:f9:d8:b2:20:d2:42:c8:d7:c6:5c:9f:0d:
9b:0e:1f:a5:e7:3e:f9:7d:7f:76:6b:d5:90:a6:1b:30:71:c8:
5a:12:98:23:b0:17:c4:3c:e0:7f:a2:8d:12:22:34:2d:1f:5c:
66:17:95:69:97:ab:3b:7c:5a:d2:6f:1a:e3:f9:a9:4e:5b:53:
65:19:c3:b6:68:f3:75:b6:af:ee:2f:fa:c5:ff:77:f2:48:a9:
dd:9b:fd:87:a1:71:b3:cb:bb:ec:16:fd:e1:e5:7d:b1:de:fc:
eb:6c:34:cd:8e:62:26:b9:b2:b3:0b:bd:9b:43:fd:8e:aa:d8:
63:64:af:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:37 2026 by rpki-client