
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e3132342e302f32322d3232203d3e203538353431.roa
File: 3231312e3135352e3132342e302f32322d3232203d3e203538353431.roa (raw, json)
Hash identifier: NOufZeeVBWAEETKbJl+H6zHNtoZyY/S4SDIVSid74d0=
Subject key identifier: F2:7E:0F:F9:F8:BE:6D:9E:7B:AE:20:72:A9:FC:DE:85:08:36:55:DF
Certificate issuer: /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
Certificate serial: 75175C76B82B81BB4DF1A140ABEF6E159FC462BD
Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e3132342e302f32322d3232203d3e203538353431.roa
Signing time: Mon 11 May 2026 02:50:14 +0000
ROA not before: Mon 11 May 2026 02:45:14 +0000
ROA not after: Mon 10 May 2027 02:50:14 +0000
asID: 58541
IP address blocks: 211.155.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:17:5c:76:b8:2b:81:bb:4d:f1:a1:40:ab:ef:6e:15:9f:c4:62:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
Validity
Not Before: May 11 02:45:14 2026 GMT
Not After : May 10 02:50:14 2027 GMT
Subject: CN=F27E0FF9F8BE6D9E7BAE2072A9FCDE85083655DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9c:09:3d:7b:b1:47:04:7c:a8:ed:ab:e8:e7:
70:d9:78:fb:db:47:57:6f:1b:95:10:8e:19:2e:55:
3b:6c:b4:72:87:be:06:45:43:33:57:57:6c:16:f2:
9e:bc:d0:11:7b:12:f4:ea:48:1c:87:09:7e:1c:7a:
5a:ee:cf:ca:1f:f5:04:7e:f3:a5:5d:0d:9f:3c:c3:
a8:c4:16:34:63:86:eb:7c:84:2e:58:40:f8:4a:4c:
e0:35:07:da:bd:1c:c1:a3:ae:28:9d:79:17:ee:6c:
6d:0b:61:ae:09:42:df:95:db:18:a5:e3:14:31:5c:
13:82:89:e4:55:98:8d:2d:24:be:44:f1:be:bf:6a:
84:9d:33:f3:5e:1e:1a:60:ed:40:08:db:69:42:dc:
20:bd:80:58:f3:6e:3e:70:ba:03:15:d4:da:a8:f3:
06:48:d1:58:41:eb:22:b8:d2:32:4e:f4:da:80:e7:
39:3c:64:f2:97:94:a0:54:a6:33:64:bf:92:19:2d:
50:92:b1:4d:5e:15:8a:83:80:d1:2c:0c:69:50:55:
5c:ec:4a:0e:45:bd:b6:97:95:a7:4e:cb:e2:d7:ee:
f1:bf:1b:8b:88:c7:88:8a:50:7f:c4:16:99:db:bc:
18:31:44:ff:73:e5:78:ec:67:ef:c7:25:8d:68:38:
e0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7E:0F:F9:F8:BE:6D:9E:7B:AE:20:72:A9:FC:DE:85:08:36:55:DF
X509v3 Authority Key Identifier:
keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e3132342e302f32322d3232203d3e203538353431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.155.124.0/22
Signature Algorithm: sha256WithRSAEncryption
59:f5:87:46:83:51:62:e5:fa:bc:e8:52:12:11:73:92:f7:56:
41:a9:32:13:1a:34:09:56:79:eb:e5:be:f4:f1:1b:4d:e9:8f:
aa:37:63:4c:d1:dd:b2:14:57:47:ce:cc:55:65:ce:8a:97:3d:
37:f6:6c:37:a0:be:46:2c:0b:fa:41:9e:bc:44:cc:c9:42:42:
2c:b5:bc:a6:0e:09:08:b3:4d:9d:f7:d8:e1:4c:fd:57:db:30:
e5:fe:05:63:01:c7:a5:56:63:ec:cf:60:2d:d4:44:e5:7e:52:
fb:97:12:7b:2e:33:be:29:8c:b7:b2:a3:03:70:4b:a2:8c:9f:
3b:bb:d2:93:de:76:58:d5:9f:c6:33:12:73:7c:c9:a6:23:36:
a7:c9:f7:f0:0d:6d:48:96:fb:60:f3:e5:85:67:e9:6a:a0:65:
ec:63:e0:b0:92:c7:2b:07:eb:8d:ac:90:68:fb:35:ca:d6:2c:
15:d1:c6:75:28:52:3a:a0:b0:b5:c2:dd:13:a9:6b:d1:75:c7:
54:2b:17:71:fb:be:81:4e:5c:9e:93:bf:34:33:a2:51:f8:ee:
79:c3:2d:c7:22:d8:64:63:21:fb:5a:71:0c:ee:50:36:cb:52:
25:6a:a8:a1:65:6f:e5:72:f2:c8:e6:31:af:d9:a2:67:08:1a:
70:a3:8f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:09:22 2026 by rpki-client