
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3131312e3232332e31322e302f32322d3232203d3e2034313334.roa
File: 3131312e3232332e31322e302f32322d3232203d3e2034313334.roa (raw, json)
Hash identifier: u7aoYWMxz4RusGgQSlhKx8OJPfYWOqpgblwBepzIPzk=
Subject key identifier: D0:A7:F6:4D:27:32:EE:2A:CA:60:4C:21:19:F0:68:B9:7E:D5:5A:E2
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 50AA3C15B947B35DE420A48837077DCAFAD78948
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3131312e3232332e31322e302f32322d3232203d3e2034313334.roa
Signing time: Mon 28 Sep 2026 01:00:39 +0000
ROA not before: Mon 28 Sep 2026 00:55:39 +0000
ROA not after: Mon 27 Sep 2027 01:00:39 +0000
asID: 4134
IP address blocks: 111.223.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 11:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:aa:3c:15:b9:47:b3:5d:e4:20:a4:88:37:07:7d:ca:fa:d7:89:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Sep 28 00:55:39 2026 GMT
Not After : Sep 27 01:00:39 2027 GMT
Subject: CN=D0A7F64D2732EE2ACA604C2119F068B97ED55AE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d5:7e:71:c9:20:34:6a:0d:9d:34:2f:86:49:
1e:71:53:4b:c2:12:97:4c:50:78:8d:ac:53:de:cc:
99:f2:06:8b:8a:d7:2a:fa:33:7c:3a:39:db:d2:fa:
fe:3b:84:5d:38:0c:ae:58:10:51:bf:34:79:96:fc:
fd:6b:ec:e5:2f:19:88:1d:ad:07:d8:a0:31:41:92:
ae:6a:60:b4:8c:32:7b:e8:6f:37:a7:12:1c:14:27:
18:c0:7a:e6:86:cc:cb:85:4a:84:ae:82:a2:ba:7b:
63:e9:6c:ab:ca:dd:79:ca:e8:4b:19:fd:9c:f5:4c:
8c:2b:43:0b:1f:ba:50:0b:d5:51:75:92:8c:43:68:
29:dd:1c:90:31:81:c7:f0:f5:9f:10:28:a8:0a:f0:
64:d6:7d:fc:21:43:e6:ab:2e:25:9d:87:fe:59:6e:
4c:39:5d:31:a8:d5:1c:1e:4b:98:d9:ec:64:b7:ff:
f1:62:9f:35:1c:4d:14:1d:df:c3:4b:02:10:9e:21:
8d:aa:b5:83:92:8a:f7:24:9f:d8:fd:17:54:d2:ac:
74:15:56:66:ae:51:7a:65:01:53:86:92:6b:9a:9b:
a9:9c:8b:f0:33:5e:55:50:e5:a8:bd:c6:f5:01:02:
e2:92:01:a0:01:ab:a9:b7:fb:3c:3f:62:b0:49:25:
ca:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A7:F6:4D:27:32:EE:2A:CA:60:4C:21:19:F0:68:B9:7E:D5:5A:E2
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3131312e3232332e31322e302f32322d3232203d3e2034313334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.223.12.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:64:0c:bf:75:5d:b2:b7:83:73:ec:2c:84:1d:fe:44:3b:16:
7c:49:e5:da:41:79:14:8a:c7:fd:70:8e:ef:15:cb:28:01:c7:
4a:95:0d:c3:1f:47:40:6f:0d:c9:87:41:ad:b8:b3:5c:40:fe:
56:af:cf:6d:e9:74:a5:91:06:e8:bb:38:30:ef:b6:05:a2:47:
0b:ad:e9:be:8d:09:67:68:c2:50:1d:8a:48:31:ef:fe:ca:b1:
2a:32:37:e7:fc:83:8e:b6:8b:1e:d2:e0:a2:7e:f7:48:e7:23:
6b:35:e0:d5:f0:ed:2b:2a:8d:f1:86:42:4b:92:a9:a8:22:ad:
69:7a:3a:b0:c6:39:92:aa:c1:99:10:24:28:08:fb:1f:96:94:
62:80:17:eb:f9:89:ac:d3:45:54:e9:ef:56:2e:46:55:8a:30:
22:b1:52:35:d7:5d:04:d8:0b:fe:6f:fa:51:ed:86:d7:31:ab:
94:04:65:77:fc:39:85:c1:bd:cf:22:46:ce:0b:6c:78:9a:15:
1f:76:6a:70:98:49:08:d3:9b:a3:bd:11:aa:6b:b7:f2:b1:ba:
e2:a1:d2:7e:cf:65:44:c3:cd:56:c1:6e:56:db:73:c4:29:16:
b7:47:51:4a:13:5e:06:0d:c1:97:88:b4:b1:fb:b8:d4:e4:30:
47:b9:7d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:02:05 2026 by rpki-client