
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714749953/0/3231312e3135342e3134342e302f32302d3230203d3e20313334373734.roa
File: 3231312e3135342e3134342e302f32302d3230203d3e20313334373734.roa (raw, json)
Hash identifier: alpjFmWgEiBbogthwEkCRvKizOOuc9cKPE88pENyGHA=
Subject key identifier: 7D:A8:A7:21:C6:72:4B:27:5E:DC:7D:8D:B7:55:38:C9:79:8C:82:6D
Certificate issuer: /CN=9B87DFEBDCCDA813116988D4421B088404578168
Certificate serial: 7AF625DBD989C6653B9114DEBF85DB71FB7E6B02
Authority key identifier: 9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/3231312e3135342e3134342e302f32302d3230203d3e20313334373734.roa
Signing time: Fri 24 Apr 2026 02:42:01 +0000
ROA not before: Fri 24 Apr 2026 02:37:01 +0000
ROA not after: Fri 23 Apr 2027 02:42:01 +0000
asID: 134774
IP address blocks: 211.154.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:f6:25:db:d9:89:c6:65:3b:91:14:de:bf:85:db:71:fb:7e:6b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B87DFEBDCCDA813116988D4421B088404578168
Validity
Not Before: Apr 24 02:37:01 2026 GMT
Not After : Apr 23 02:42:01 2027 GMT
Subject: CN=7DA8A721C6724B275EDC7D8DB75538C9798C826D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8b:6a:e5:c7:62:0a:8f:b9:29:a7:f1:4e:4f:
b8:9e:43:d0:f1:b7:aa:0a:93:cc:37:1a:4f:3e:bc:
10:ce:ab:fc:a3:87:48:16:dd:34:b0:97:39:2f:78:
71:92:47:b5:cf:34:10:72:d0:9c:cd:3f:50:2f:9c:
80:c8:5d:f9:93:24:31:ac:dd:15:8e:70:41:e1:a5:
e0:f2:6b:6d:8f:6d:54:3f:f9:16:c0:34:5f:39:b6:
f5:bb:b1:69:58:5f:41:74:36:e5:f1:42:b2:11:b0:
2a:88:6e:35:d9:5f:9b:1a:d2:fc:df:3e:3d:24:2b:
1c:71:35:1c:7d:fe:bf:dc:a4:0f:1e:82:ea:94:55:
3f:9d:d7:4a:c3:27:a1:9b:5a:85:f8:fb:77:c5:61:
6f:c1:a3:29:81:94:1b:c8:1e:f3:20:0f:32:7e:9c:
89:ff:84:2e:d3:21:f1:2f:9c:06:90:78:cf:4b:90:
7b:ec:b1:61:ef:02:6d:e9:7f:4a:1d:aa:68:fd:b3:
dd:f7:b8:40:c6:20:06:d5:d9:75:06:49:f1:db:ec:
fa:2f:60:9e:f6:8c:88:b7:0b:03:d4:c0:28:7d:b2:
eb:90:af:d5:08:c6:ae:c3:82:93:64:d5:2f:cb:ea:
92:ab:49:27:0c:88:ab:70:06:85:b4:24:d7:59:2b:
b3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A8:A7:21:C6:72:4B:27:5E:DC:7D:8D:B7:55:38:C9:79:8C:82:6D
X509v3 Authority Key Identifier:
keyid:9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/3231312e3135342e3134342e302f32302d3230203d3e20313334373734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.154.144.0/20
Signature Algorithm: sha256WithRSAEncryption
35:03:5e:ad:4d:fe:71:40:47:8a:fe:a6:40:8e:80:90:ea:78:
16:ca:23:14:77:09:e5:83:54:6f:b4:72:b9:25:54:9b:d0:6c:
a0:94:25:d1:f7:cc:e0:19:71:37:5c:c1:d7:68:14:6c:2a:1a:
87:59:24:ee:2f:c2:60:2a:8f:b5:99:b9:cc:74:f9:90:a3:15:
fe:12:48:a2:24:cf:74:49:95:22:43:59:bb:cf:19:85:d5:7e:
50:c9:cb:bf:da:2d:dc:b4:dc:a5:96:93:82:56:02:fd:46:84:
13:87:bd:12:b0:41:0c:1b:28:84:26:25:b0:e4:70:89:b8:f7:
73:8c:aa:a2:05:e6:59:0b:02:60:51:ee:e6:55:e3:4e:6e:8d:
84:98:6a:f0:1f:76:21:d1:3e:12:f7:ae:fc:f0:ec:b8:18:3c:
26:f6:e4:76:bc:75:da:56:56:73:25:2d:62:c9:7e:ba:55:87:
d3:f8:0c:a9:a7:56:fa:be:e0:88:94:7f:54:df:2a:77:6c:35:
a1:73:57:75:69:95:46:9c:5f:49:cb:f6:9e:ff:7e:ec:b6:69:
f4:08:1d:a1:a6:b9:46:22:fe:13:54:12:45:da:3f:77:a9:68:
9a:45:51:41:f6:bd:bf:39:e0:1c:74:6e:fb:70:3a:0e:ac:b3:
ff:49:54:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:37:09 2026 by rpki-client