
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3131342e32382e3136302e302f31392d3139203d3e203435303631.roa
File: 3131342e32382e3136302e302f31392d3139203d3e203435303631.roa (raw, json)
Hash identifier: TjgLKPNifN+3Wr/+k2dIOHUJlqXOKSiGUcoZKgFaxSY=
Subject key identifier: 35:D5:0D:38:76:53:6E:AB:83:F2:12:C3:F1:BA:32:E4:FA:6F:43:D0
Certificate issuer: /CN=8421F0680EB1B3756485D0F7681F78067E9C172E
Certificate serial: 55EAD811DA5A3F2275FE93E14B49D72AB5F47AAD
Authority key identifier: 84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3131342e32382e3136302e302f31392d3139203d3e203435303631.roa
Signing time: Sat 09 May 2026 11:55:55 +0000
ROA not before: Sat 09 May 2026 11:50:55 +0000
ROA not after: Sat 08 May 2027 11:55:55 +0000
asID: 45061
IP address blocks: 114.28.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:ea:d8:11:da:5a:3f:22:75:fe:93:e1:4b:49:d7:2a:b5:f4:7a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8421F0680EB1B3756485D0F7681F78067E9C172E
Validity
Not Before: May 9 11:50:55 2026 GMT
Not After : May 8 11:55:55 2027 GMT
Subject: CN=35D50D3876536EAB83F212C3F1BA32E4FA6F43D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:30:d6:a0:cb:79:cc:65:de:f0:d0:e3:d4:68:
6e:bc:07:55:87:1f:99:78:1f:89:53:56:2c:8f:44:
6e:1d:c5:d1:14:04:34:19:be:45:f3:ee:d8:fa:d9:
60:98:bb:5c:b1:57:08:fc:d2:4f:25:24:2d:a8:bd:
62:c4:8d:9e:09:9a:bd:9a:dd:f0:b0:05:3f:a2:8d:
b0:47:e2:08:fa:d0:f7:7f:98:d3:9f:96:f2:3d:08:
b9:5b:59:3f:60:65:bc:32:a6:90:fd:60:20:d0:d2:
81:68:ee:5e:df:16:df:8b:1c:11:21:d3:b1:0b:41:
c0:73:f2:43:32:44:8b:ec:88:3b:44:7c:01:fb:c9:
93:3b:3a:20:cd:d9:d6:78:fa:da:35:a5:12:9f:cc:
7a:e3:e1:bc:22:29:69:77:c8:2f:39:26:ed:e8:97:
3a:7b:f8:0a:5d:af:fa:c1:e7:93:0b:a0:35:4c:ae:
b9:8f:ed:19:4a:a1:e1:77:ff:4c:a5:28:42:4e:9a:
5c:70:58:0c:b9:9e:21:9e:bf:53:8a:53:bc:48:77:
53:cc:c4:0e:e1:e4:c4:35:87:37:eb:30:47:44:ee:
5f:22:98:44:7b:1a:a1:b5:0e:c0:c2:83:6c:33:38:
0f:95:00:1b:36:79:8d:10:eb:77:12:1b:31:a4:c5:
95:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D5:0D:38:76:53:6E:AB:83:F2:12:C3:F1:BA:32:E4:FA:6F:43:D0
X509v3 Authority Key Identifier:
keyid:84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3131342e32382e3136302e302f31392d3139203d3e203435303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.28.160.0/19
Signature Algorithm: sha256WithRSAEncryption
a7:e5:f3:ab:30:5c:ef:6c:87:cd:39:08:a1:bd:48:4e:65:84:
0a:cb:d9:b3:d1:8b:27:06:53:33:12:d2:a2:10:6c:0b:b8:01:
09:16:ec:cb:28:f1:1e:06:6e:83:57:5f:3e:df:1b:ee:02:08:
4b:7e:0d:07:6a:84:a1:9f:b5:56:44:9e:6a:3d:1d:ac:d2:2c:
fe:65:29:1b:58:e4:95:32:bb:79:c1:28:06:af:57:46:a0:69:
44:54:53:41:f3:78:3e:5c:2b:4e:a0:69:91:d9:e4:db:50:36:
5f:02:51:8f:ac:57:04:93:ad:6f:ca:79:de:d0:0c:4d:50:c7:
26:b0:c3:1c:22:19:32:54:06:48:b6:4b:0d:a9:89:1c:a7:7f:
1f:ae:2d:70:76:18:21:6d:3b:85:bf:da:4c:61:2e:13:5b:6c:
1e:c9:81:69:75:fb:81:4f:d8:8c:c3:92:6e:1c:2c:7d:86:41:
f9:06:85:e8:13:1e:b6:cd:83:b5:7a:62:83:00:65:e7:0d:b1:
fa:3f:fd:39:b5:46:15:77:a3:6b:ca:53:15:5a:88:e2:71:fe:
52:50:67:92:17:db:93:80:b6:d4:c4:78:79:f3:ba:60:83:83:
d8:e6:de:94:0e:5f:72:51:e4:32:53:a7:c5:f1:f0:15:4e:78:
7f:7a:e6:d5
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUVerYEdpaPyJ1/pPhS0nXKrX0eq0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3
RTlDMTcyRTAeFw0yNjA1MDkxMTUwNTVaFw0yNzA1MDgxMTU1NTVaMDMxMTAvBgNV
BAMTKDM1RDUwRDM4NzY1MzZFQUI4M0YyMTJDM0YxQkEzMkU0RkE2RjQzRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJMNagy3nMZd7w0OPUaG68B1WH
H5l4H4lTViyPRG4dxdEUBDQZvkXz7tj62WCYu1yxVwj80k8lJC2ovWLEjZ4Jmr2a
3fCwBT+ijbBH4gj60Pd/mNOflvI9CLlbWT9gZbwyppD9YCDQ0oFo7l7fFt+LHBEh
07ELQcBz8kMyRIvsiDtEfAH7yZM7OiDN2dZ4+to1pRKfzHrj4bwiKWl3yC85Ju3o
lzp7+Apdr/rB55MLoDVMrrmP7RlKoeF3/0ylKEJOmlxwWAy5niGev1OKU7xId1PM
xA7h5MQ1hzfrMEdE7l8imER7GqG1DsDCg2wzOA+VABs2eY0Q63cSGzGkxZUPAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUNdUNOHZTbquD8hLD8boy5PpvQ9AwHwYDVR0j
BBgwFoAUhCHwaA6xs3VkhdD3aB94Bn6cFy4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzQ3MTg3My8wLzg0MjFGMDY4MEVCMUIzNzU2NDg1RDBGNzY4MUY3
ODA2N0U5QzE3MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3RTlDMTcyRS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzQ3MTg3My8wLzMxMzEzNDJlMzIz
ODJlMzEzNjMwMmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzQzNTMwMzYzMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBXIcoDANBgkqhkiG9w0BAQsFAAOCAQEAp+XzqzBc72yHzTkIob1ITmWE
CsvZs9GLJwZTMxLSohBsC7gBCRbsyyjxHgZug1dfPt8b7gIIS34NB2qEoZ+1VkSe
aj0drNIs/mUpG1jklTK7ecEoBq9XRqBpRFRTQfN4PlwrTqBpkdnk21A2XwJRj6xX
BJOtb8p53tAMTVDHJrDDHCIZMlQGSLZLDamJHKd/H64tcHYYIW07hb/aTGEuE1ts
HsmBaXX7gU/YjMOSbhwsfYZB+QaF6BMets2DtXpigwBl5w2x+j/9ObVGFXeja8pT
FVqI4nH+UlBnkhfbk4C21MR4efO6YIOD2ObelA5fclHkMlOnxfHwFU54f3rm1Q==
-----END CERTIFICATE-----
Generated at Wed May 13 12:25:38 2026 by rpki-client