
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3131312e3232332e31322e302f32322d3232203d3e203133333738.roa
File: 3131312e3232332e31322e302f32322d3232203d3e203133333738.roa (raw, json)
Hash identifier: T+zF8s1DkC0h+i4l2t4YAum0HCEk5EVa8px4a8bXXUA=
Subject key identifier: 49:27:1D:DE:35:A0:86:B6:A0:6C:B4:1C:15:3C:52:C1:2E:A3:59:57
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 6FC2019FB6A6B77483E6E5E78AB3237D42FB8EFA
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3131312e3232332e31322e302f32322d3232203d3e203133333738.roa
Signing time: Mon 28 Sep 2026 01:00:40 +0000
ROA not before: Mon 28 Sep 2026 00:55:40 +0000
ROA not after: Mon 27 Sep 2027 01:00:40 +0000
asID: 13378
IP address blocks: 111.223.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 09:52:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:c2:01:9f:b6:a6:b7:74:83:e6:e5:e7:8a:b3:23:7d:42:fb:8e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Sep 28 00:55:40 2026 GMT
Not After : Sep 27 01:00:40 2027 GMT
Subject: CN=49271DDE35A086B6A06CB41C153C52C12EA35957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e8:35:c9:a4:df:f6:85:2a:32:c9:b0:2b:c6:
8d:b6:2a:e9:bd:91:3c:d0:40:e8:01:1b:63:ac:cc:
d8:23:0d:8d:7b:99:55:ce:c5:da:de:01:64:8b:5f:
b8:01:9b:f0:a0:79:43:2e:66:bb:53:24:c4:cf:c6:
cd:62:19:5a:d8:fa:48:ec:c6:73:54:ec:f9:f7:8f:
ef:ee:4c:ff:9f:8e:64:9f:ba:b7:3a:8a:1e:d6:ef:
0f:03:c4:39:64:6e:b0:45:bc:ed:39:3f:80:20:25:
74:f2:30:13:12:55:eb:b2:98:4c:ee:c0:ce:7d:d8:
64:bf:e2:22:08:0f:e8:4f:f1:b2:8f:2a:5a:5b:d8:
8d:19:5a:8a:34:74:07:ab:d2:e4:05:8e:c2:34:37:
4a:82:b6:a7:11:c4:d5:87:5f:3f:26:75:89:c3:8b:
48:17:84:39:83:e5:b3:d6:a3:68:9c:33:97:ca:4e:
b2:e6:96:cd:3a:14:0d:9b:39:54:f7:1b:36:8e:36:
5d:cc:9a:73:dd:4b:c8:25:21:ba:c8:74:a4:5e:84:
52:aa:df:d9:8e:63:8e:d6:be:fb:63:c3:2e:fb:d0:
32:1f:69:9d:64:31:8b:c3:88:a9:99:4d:c4:64:7a:
4a:54:b5:50:2a:cd:ec:c5:d9:6f:7f:d0:c5:04:3f:
bd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:27:1D:DE:35:A0:86:B6:A0:6C:B4:1C:15:3C:52:C1:2E:A3:59:57
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3131312e3232332e31322e302f32322d3232203d3e203133333738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.223.12.0/22
Signature Algorithm: sha256WithRSAEncryption
15:e9:f0:1d:d9:90:c0:6a:79:11:4a:30:45:18:c4:56:6c:95:
e7:06:d3:a3:a4:c6:00:f9:30:4a:be:99:c2:46:81:62:23:e4:
db:63:17:27:71:2d:92:7d:c7:69:cc:c3:af:75:d6:35:e3:ae:
6b:c6:f0:c0:42:f2:dd:54:78:7f:84:53:c8:27:c4:0a:8b:66:
d4:cc:88:50:fc:fe:d4:7e:81:7c:ae:73:2f:35:4a:e3:a1:b2:
8b:a3:8a:38:24:a9:67:02:08:70:a6:0f:98:6d:7b:86:49:fe:
99:4e:56:17:ae:29:1e:b6:58:bb:35:6d:89:0f:75:10:34:64:
dd:45:81:df:bb:a3:4d:b2:ca:8a:cb:39:26:56:ab:b7:de:bc:
e3:83:5b:80:35:d9:46:06:c2:93:8d:4b:5d:95:4e:10:94:de:
6a:73:e4:4a:41:46:29:9b:92:67:29:77:b5:6c:af:b0:96:ca:
ec:a9:fa:c1:2c:2c:ef:fc:ae:5d:b7:78:89:29:73:9f:dc:f6:
c2:2b:06:16:c8:4a:cf:8f:4e:7d:88:ba:3c:c6:aa:7d:66:78:
da:de:34:d1:b9:26:48:89:c1:cf:e0:96:41:01:a6:ec:97:e1:
ab:ec:78:e7:97:7f:06:1d:bb:a6:4e:42:d4:04:cd:90:93:cc:
44:7e:d5:45
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Oct 11 15:07:29 2026 by rpki-client