
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3230382e302f32342d3332203d3e20313432313332.roa
File: 3131342e32382e3230382e302f32342d3332203d3e20313432313332.roa (raw, json)
Hash identifier: sEXvQYAKgu0GSKkPqckvTqGwVYvZuzNpzSoyWNIxB2o=
Subject key identifier: 79:72:79:D5:C9:0C:8A:66:54:AE:1E:CE:84:88:6F:12:F7:D4:D4:BD
Certificate issuer: /CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
Certificate serial: 4FD7C27801C9F9FB9DCFE934197A6A8ABDF2261D
Authority key identifier: EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3230382e302f32342d3332203d3e20313432313332.roa
Signing time: Sat 09 May 2026 08:03:36 +0000
ROA not before: Sat 09 May 2026 07:58:36 +0000
ROA not after: Sat 08 May 2027 08:03:36 +0000
asID: 142132
IP address blocks: 114.28.208.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:40:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:d7:c2:78:01:c9:f9:fb:9d:cf:e9:34:19:7a:6a:8a:bd:f2:26:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
Validity
Not Before: May 9 07:58:36 2026 GMT
Not After : May 8 08:03:36 2027 GMT
Subject: CN=797279D5C90C8A6654AE1ECE84886F12F7D4D4BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:71:3a:81:0f:fd:21:bb:14:15:19:e5:c7:8a:
e7:a9:93:cc:95:f3:60:74:e0:2a:fb:91:d8:fe:32:
61:94:da:61:ec:0f:19:0f:fe:26:8d:7b:43:04:29:
08:31:dd:a4:1e:e4:34:65:21:a6:fd:90:60:e3:38:
de:38:3d:25:a8:a1:ee:89:af:e9:59:0f:f1:1e:8f:
c9:7c:e3:1d:eb:1f:51:be:e3:a7:85:66:ac:fc:b9:
47:3a:6b:45:bc:19:24:41:56:36:06:40:a5:b0:e5:
9a:cd:9c:5d:2e:dd:25:da:e3:83:a1:eb:bf:df:38:
56:6d:a6:a9:c4:88:d2:38:54:23:e0:32:ea:3a:c9:
ae:b0:c4:54:e9:c9:73:26:04:46:4f:5c:ca:c4:1f:
0a:8b:d0:d2:83:17:55:2f:3c:a0:81:04:f3:e8:f2:
46:fe:0a:41:ce:2a:ff:ea:5a:82:00:65:b9:57:13:
68:e3:17:b8:38:e0:7b:f6:21:39:c4:93:62:d9:9b:
23:0e:09:b2:bf:76:77:6a:20:a0:5b:5b:1c:21:2b:
fd:45:16:5e:ab:1d:c4:8b:6f:be:4e:ab:bd:6b:70:
ca:f3:15:f2:8c:c7:88:d8:85:96:f9:63:40:13:e5:
2c:27:37:95:ca:64:a4:cd:49:fe:7e:07:74:cd:67:
a5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:72:79:D5:C9:0C:8A:66:54:AE:1E:CE:84:88:6F:12:F7:D4:D4:BD
X509v3 Authority Key Identifier:
keyid:EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3230382e302f32342d3332203d3e20313432313332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.28.208.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:67:cb:96:34:9b:39:ca:fe:a4:9f:bd:ba:af:d6:0c:47:e7:
eb:37:3e:ba:37:4c:9b:5c:74:6b:1e:8a:fa:22:f8:9d:1c:f1:
5a:81:79:49:06:46:2f:69:c4:25:ad:d6:7d:69:d3:5c:61:91:
3e:94:3d:19:af:ea:3f:42:75:40:0b:a2:0c:56:5a:8d:90:73:
64:02:19:14:b3:f0:78:b4:d6:8b:ae:ce:99:db:eb:61:ae:e0:
50:d6:ab:94:6d:46:0d:83:5c:96:05:f9:3c:b9:dc:46:41:1e:
0a:69:1b:16:86:3e:49:72:fa:84:fc:73:88:f9:47:17:8f:a6:
f4:3b:7b:8e:6e:f3:8e:9e:47:68:14:e4:81:d6:23:c4:0a:0a:
df:3e:e8:a0:92:de:11:41:d7:73:97:f7:e7:94:d0:29:7f:82:
c0:0e:56:71:2b:26:c9:e0:fd:20:a9:3e:de:09:36:e6:6a:98:
e0:e0:a4:49:9a:f7:d3:a0:29:fa:cd:67:88:d7:b4:26:2b:cb:
bd:d4:9e:c9:40:33:89:ff:f3:46:cc:cb:af:f1:47:2f:e1:2b:
08:d6:2d:6c:06:75:26:51:ac:3b:a4:66:12:d4:eb:e6:f7:f1:
14:55:c5:be:65:bb:62:66:79:4f:3c:0a:37:20:b2:50:12:fb:
d7:db:a6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:57:19 2026 by rpki-client