
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/1/3135382e3134302e3235352e302f32342d3234203d3e2034383136.roa
File: 3135382e3134302e3235352e302f32342d3234203d3e2034383136.roa (raw, json)
Hash identifier: kE6wKBhuMjUgxfn0PWTZvjM6ZUZVSUsYT25Ok7nH0lY=
Subject key identifier: 06:FE:C0:EA:3B:81:05:D7:AB:EA:26:F3:2F:05:42:E1:72:E4:6B:D9
Certificate issuer: /CN=855381EC93CF009732540F616E4905D544D838C8
Certificate serial: 5132B66208DAB7D9A78F79D31ACE9F2FB4533B25
Authority key identifier: 85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/3135382e3134302e3235352e302f32342d3234203d3e2034383136.roa
Signing time: Thu 07 May 2026 15:59:00 +0000
ROA not before: Thu 07 May 2026 15:54:00 +0000
ROA not after: Thu 06 May 2027 15:59:00 +0000
asID: 4816
IP address blocks: 158.140.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:32:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:32:b6:62:08:da:b7:d9:a7:8f:79:d3:1a:ce:9f:2f:b4:53:3b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855381EC93CF009732540F616E4905D544D838C8
Validity
Not Before: May 7 15:54:00 2026 GMT
Not After : May 6 15:59:00 2027 GMT
Subject: CN=06FEC0EA3B8105D7ABEA26F32F0542E172E46BD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:65:02:18:8b:84:3f:f6:a8:7a:a2:26:ed:31:
f6:a4:94:80:51:be:89:dd:ac:29:bb:95:96:22:8b:
02:f1:67:85:d8:65:6c:ba:7f:1d:73:2e:f9:b3:f6:
e9:f2:b2:83:54:e9:3b:63:9c:15:1c:c4:51:ad:a7:
46:3a:6a:03:bd:8a:3a:3c:92:40:8a:37:db:0d:29:
97:da:77:9c:4b:ed:31:e5:2b:ab:53:14:f2:20:14:
0a:f4:18:36:b0:60:da:82:8a:61:33:52:58:a1:42:
94:dd:d5:82:26:3e:0c:b1:87:f3:60:95:f9:48:d4:
28:e9:48:d5:60:75:ce:ad:80:f4:0f:9d:61:8f:16:
b4:01:aa:ba:2c:2b:fa:ed:e0:66:ad:dd:eb:66:12:
38:80:54:1a:9f:a9:24:5b:57:0c:6e:1b:b6:fc:0e:
d9:d7:2c:ed:1a:12:89:fd:4a:f4:2b:73:bd:02:4a:
72:0a:a5:b6:83:ce:ad:d2:81:09:a7:f5:5a:cf:5a:
d0:28:06:da:1d:54:87:28:82:83:d3:62:58:a5:ac:
68:93:41:a3:d0:7c:4c:80:66:61:02:08:aa:f0:37:
31:33:16:18:9d:fa:5e:a4:19:f7:a2:94:41:57:18:
2f:a4:41:3d:fd:16:0f:c4:be:75:3a:e8:06:cf:32:
f9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FE:C0:EA:3B:81:05:D7:AB:EA:26:F3:2F:05:42:E1:72:E4:6B:D9
X509v3 Authority Key Identifier:
keyid:85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/3135382e3134302e3235352e302f32342d3234203d3e2034383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.140.255.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:b5:51:b9:0f:86:62:26:4f:15:24:87:ad:af:ad:68:4a:bd:
18:da:4b:01:5d:a4:e8:73:8e:0b:51:9f:09:01:8f:23:10:f9:
c0:0e:54:62:0f:fa:4e:14:40:08:6a:30:5a:43:fe:51:18:31:
dd:fa:7a:c7:68:31:6c:dc:7b:40:78:6d:cf:da:cb:a1:37:f8:
b0:19:39:41:30:52:84:9b:65:9f:0a:2d:04:50:ec:00:ee:99:
b4:d5:75:d1:92:fb:62:39:e7:ae:cb:cf:bd:93:82:47:f2:93:
49:cc:b3:00:d0:fe:67:dd:43:57:44:ce:d6:7d:17:6d:d9:29:
a1:7f:84:71:31:11:97:55:f0:6c:1f:dc:0a:1a:60:b0:7e:8a:
70:f5:ae:03:0d:f9:d7:8c:3e:19:d7:4b:a1:2f:a1:6a:29:25:
8c:37:c9:e3:02:fc:e9:b4:c4:70:e6:47:ab:47:79:98:96:79:
1c:2d:b3:74:75:6f:84:1b:07:cd:69:36:e4:41:b4:c5:a5:98:
a0:70:7a:4f:c2:71:25:f6:55:56:1c:a3:6d:6b:2e:94:6e:ae:
69:be:18:42:5f:57:23:74:fe:ee:c1:a3:e5:bf:88:65:ec:48:
ca:94:6a:d8:6e:b4:e8:47:b9:04:90:95:3c:1c:a3:ae:d2:86:
10:3c:d6:f8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 13:33:58 2026 by rpki-client