
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3131342e32382e3132382e302f32302d3230203d3e2034383131.roa
File: 3131342e32382e3132382e302f32302d3230203d3e2034383131.roa (raw, json)
Hash identifier: 7ctkGQpyisi9zH2u2VKxvHKRSH6rZz0X8ZJdtm7yPBk=
Subject key identifier: FD:AE:F3:B9:9D:6A:E8:BD:18:72:47:82:F9:7D:49:A3:A2:39:70:D6
Certificate issuer: /CN=8421F0680EB1B3756485D0F7681F78067E9C172E
Certificate serial: 0CAAB4C371328F491245571706B3786EA149D5E6
Authority key identifier: 84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3131342e32382e3132382e302f32302d3230203d3e2034383131.roa
Signing time: Sat 09 May 2026 11:55:54 +0000
ROA not before: Sat 09 May 2026 11:50:54 +0000
ROA not after: Sat 08 May 2027 11:55:54 +0000
asID: 4811
IP address blocks: 114.28.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 13:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:aa:b4:c3:71:32:8f:49:12:45:57:17:06:b3:78:6e:a1:49:d5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8421F0680EB1B3756485D0F7681F78067E9C172E
Validity
Not Before: May 9 11:50:54 2026 GMT
Not After : May 8 11:55:54 2027 GMT
Subject: CN=FDAEF3B99D6AE8BD18724782F97D49A3A23970D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f3:d9:57:c1:e4:e1:72:47:bf:69:f5:56:24:
ed:f7:32:2e:6f:a5:df:f1:6c:32:40:96:11:4e:b9:
84:87:9a:6b:70:ea:4c:68:d7:62:ba:d6:e8:66:bc:
ae:f3:d0:7f:ec:4e:39:53:4c:d9:ff:8f:2d:f8:eb:
79:9e:7e:a4:a6:84:ec:fd:cb:b1:2d:f4:2b:aa:09:
cf:be:b7:18:d0:4d:b2:71:50:e3:69:41:f5:98:b1:
35:15:72:77:5b:2a:6c:c4:c1:24:bb:15:ef:a4:6d:
3a:9c:f4:38:17:64:4a:6c:f9:51:a0:14:40:3d:ae:
40:74:44:27:70:bc:d7:35:ae:61:d3:cc:97:c9:fc:
3f:c0:2d:e2:4c:50:a6:11:b8:bc:42:f5:9b:a0:be:
7c:ec:b7:19:ad:57:c8:9c:d3:14:e0:89:f8:6e:bb:
89:a3:4e:98:f5:7e:b7:ba:29:d7:ca:8a:6c:f4:d3:
5e:72:96:0d:e4:90:17:d6:9d:66:03:03:7b:86:f9:
39:9b:fa:af:eb:bd:50:97:58:dd:65:e9:a4:1d:13:
e2:2d:6d:af:b5:c3:bf:d6:30:d2:5c:18:ba:58:c8:
e6:b5:74:05:7b:70:03:14:fc:3f:96:fd:65:43:8a:
2b:61:ea:9b:35:18:96:37:f7:7c:dd:5c:c0:04:15:
71:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AE:F3:B9:9D:6A:E8:BD:18:72:47:82:F9:7D:49:A3:A2:39:70:D6
X509v3 Authority Key Identifier:
keyid:84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3131342e32382e3132382e302f32302d3230203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.28.128.0/20
Signature Algorithm: sha256WithRSAEncryption
a0:cd:26:ab:2a:fa:9f:9f:6e:ea:c0:10:e3:af:84:0a:5c:69:
16:fa:ad:95:ec:94:ab:3b:b8:5f:2f:a7:af:ac:09:21:28:78:
a8:dd:60:43:f6:9e:2b:ef:2d:44:a1:62:82:6c:e0:db:0d:c3:
70:43:07:f9:33:02:4e:da:e1:fe:66:14:7e:61:fc:68:1a:92:
0b:74:c7:d6:06:8a:42:ab:f3:88:6c:cc:ab:b7:65:d3:9c:df:
d7:fa:14:82:8b:f4:91:f0:98:f2:dc:d5:b6:e5:62:63:b8:94:
98:3d:43:aa:b5:2b:34:82:a4:65:b2:e0:24:50:3d:5b:45:db:
f4:8b:55:d0:62:ca:26:0d:e2:f6:d2:d0:67:db:6b:ea:20:81:
45:79:ae:42:9d:54:4a:30:29:6a:40:8d:a8:74:17:31:5c:7d:
ed:99:01:1d:0d:27:09:95:a2:fc:03:1a:6b:5c:e9:a0:84:b3:
0b:d3:cd:94:a7:df:76:62:bc:1d:1d:39:a2:b0:2f:b1:39:1c:
84:e4:0d:c6:40:b6:4e:dc:f5:c0:45:d9:e5:fd:33:10:6a:32:
f0:7f:41:5d:75:17:e6:6d:f7:78:79:f1:df:43:b4:3c:87:c8:
2f:b2:20:78:67:67:b3:e9:46:da:d2:05:34:64:69:7c:1b:38:
cb:55:e4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:02 2026 by rpki-client