
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3231302e37362e36342e302f31392d3139203d3e20313334373733.roa
File: 3231302e37362e36342e302f31392d3139203d3e20313334373733.roa (raw, json)
Hash identifier: us7GnuSdY3zKMXwmCkSqs755xEWQfRCvuiuGZb18nyI=
Subject key identifier: 6A:EF:0B:21:B9:C0:62:A6:74:80:1A:FE:FA:CF:D5:4A:DD:88:A9:7E
Certificate issuer: /CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6
Certificate serial: 3173EF4B5F8315C68CFA5C394F6DAE0F1076FD37
Authority key identifier: 45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3231302e37362e36342e302f31392d3139203d3e20313334373733.roa
Signing time: Mon 27 Apr 2026 08:06:16 +0000
ROA not before: Mon 27 Apr 2026 08:01:16 +0000
ROA not after: Mon 26 Apr 2027 08:06:16 +0000
asID: 134773
IP address blocks: 210.76.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:48:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:73:ef:4b:5f:83:15:c6:8c:fa:5c:39:4f:6d:ae:0f:10:76:fd:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6
Validity
Not Before: Apr 27 08:01:16 2026 GMT
Not After : Apr 26 08:06:16 2027 GMT
Subject: CN=6AEF0B21B9C062A674801AFEFACFD54ADD88A97E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:71:02:82:c6:4b:47:c3:54:80:02:db:06:bf:
ae:48:48:43:fe:9c:e6:67:07:d2:8a:35:95:68:0d:
bf:c0:d8:ad:2b:4d:bc:b4:d7:0e:bd:cf:76:43:73:
4a:d5:d2:eb:cb:57:8a:a3:d3:81:95:66:3a:23:de:
d7:ac:9b:1c:d0:28:c2:78:68:0a:e4:58:5e:9a:46:
dc:fe:4b:34:a5:3d:0c:af:f8:50:d7:5c:01:d6:93:
84:89:7f:50:07:35:e6:6b:1d:32:91:f9:41:9e:a5:
53:bd:c6:f9:e5:16:89:fa:ec:e2:c1:ad:ce:13:f2:
66:4c:8e:ad:f5:64:77:ac:94:bb:74:a7:ee:41:13:
8c:43:48:8b:66:4a:00:64:68:34:41:e4:99:fc:f8:
95:0a:b7:a6:98:22:75:33:9f:08:1e:10:a3:05:5a:
b5:b6:80:2b:d1:6a:df:94:dd:4e:42:84:55:0f:c8:
ba:b9:fd:74:9a:9b:0f:45:40:2f:04:b5:0c:6c:6f:
65:ea:55:58:84:b7:b5:1e:98:7b:0b:54:aa:aa:5a:
40:89:34:d5:4a:a2:e9:5a:7d:d6:ac:d1:1f:ec:b6:
3a:03:86:82:cc:7e:11:66:af:b0:8f:52:f5:64:02:
0e:55:58:a8:35:19:0d:bd:a8:78:23:b1:3a:24:bc:
e9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EF:0B:21:B9:C0:62:A6:74:80:1A:FE:FA:CF:D5:4A:DD:88:A9:7E
X509v3 Authority Key Identifier:
keyid:45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3231302e37362e36342e302f31392d3139203d3e20313334373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.76.64.0/19
Signature Algorithm: sha256WithRSAEncryption
0b:eb:ba:73:88:75:4a:d7:52:32:ce:cc:2b:1e:28:fe:b2:f7:
72:86:b4:ca:a6:55:d0:32:e0:ae:d2:b0:6a:0c:a3:66:4b:66:
24:4f:39:25:29:77:ba:14:58:bc:bc:ba:fc:b4:30:25:95:1a:
cc:66:a6:31:56:db:93:1c:3f:15:fe:58:a9:c8:70:d9:66:03:
00:05:6a:f0:e9:d1:34:52:92:d5:12:8c:a9:70:c1:b2:70:27:
03:27:67:0b:26:b8:da:34:30:58:ae:29:ea:0f:45:aa:ab:cb:
ab:26:02:8a:a2:65:02:e6:57:01:a1:a6:77:19:08:f9:15:c3:
a0:0e:02:ec:6a:bb:45:48:5e:8b:5c:a0:41:ea:2f:3c:c5:5e:
4b:57:0c:06:3b:e9:ff:fb:ef:6c:7f:64:4e:18:17:33:78:08:
cf:48:ba:92:b8:9e:e4:a5:c2:9f:d3:6c:64:f8:60:6e:c7:d9:
c1:e2:c6:8f:e2:54:7f:67:73:36:ae:2a:0c:62:bf:1d:c9:4a:
c9:4f:55:95:fb:cd:a7:fb:16:cd:08:40:62:97:46:51:88:93:
7c:17:63:be:a4:51:91:56:b4:bd:8b:f8:f9:80:a8:05:a7:09:
d6:97:94:0a:0a:3f:75:90:21:b8:74:b3:a9:d3:a9:47:78:84:
7f:02:e3:c7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 12:40:13 2026 by rpki-client