
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/AS58542.roa
File: AS58542.roa (raw, json)
Hash identifier: AEO/fpBXkvkzlHfKHc7bxC8ekrI/SS0qPJSMlWtqud8=
Subject key identifier: 34:91:9A:E1:23:CE:65:9C:11:3C:51:B2:9D:AD:88:2B:99:C2:1C:23
Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial: 074D32FBAAB9348EEDE1256588D38B4030584ED5
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/AS58542.roa
Signing time: Wed 01 Jul 2026 13:08:38 +0000
ROA not before: Wed 01 Jul 2026 13:03:38 +0000
ROA not after: Wed 30 Jun 2027 13:08:38 +0000
asID: 58542
IP address blocks: 180.184.24.0/21 maxlen: 24
180.184.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 01:38:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:4d:32:fb:aa:b9:34:8e:ed:e1:25:65:88:d3:8b:40:30:58:4e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Validity
Not Before: Jul 1 13:03:38 2026 GMT
Not After : Jun 30 13:08:38 2027 GMT
Subject: CN=34919AE123CE659C113C51B29DAD882B99C21C23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1b:26:6a:0f:52:a3:c8:97:1d:fc:f0:95:fa:
b8:0c:20:44:63:88:89:bf:a4:74:e0:69:f3:32:40:
82:a6:f8:3a:2c:32:3a:90:9f:35:97:a7:6f:2b:cb:
d1:06:86:f9:3c:5f:27:fb:a5:d8:0b:da:96:b2:b7:
b1:a1:24:11:79:a1:98:0d:3f:6c:ea:e0:9b:28:26:
59:df:d0:d5:dc:c7:c9:e5:8c:61:a0:ad:f3:32:89:
de:72:17:58:f7:f7:e2:f5:c5:8c:7f:4f:22:53:bd:
ab:f0:3f:82:2e:18:ba:65:c5:6b:36:32:6b:54:e7:
d3:23:7e:11:09:6b:8f:36:98:bb:8d:67:d3:cf:77:
34:31:2a:0f:6d:ff:c6:7c:ac:60:5b:1d:81:98:b4:
d4:38:00:9c:74:43:74:98:fa:7c:d6:7f:3e:dd:1d:
24:8d:0d:be:a9:cf:65:f0:b5:51:7f:45:ad:c5:a9:
d5:2c:e7:42:6c:b4:c5:91:f5:5c:41:12:93:d0:ff:
8a:0f:60:fb:62:dd:6f:ee:01:f3:e6:32:a4:f3:19:
95:2b:13:de:89:23:45:2c:73:9b:55:38:76:69:df:
7d:b1:52:bf:95:34:48:76:cc:80:bb:2f:bd:6d:61:
bb:db:10:e3:4c:39:98:5b:91:89:22:71:61:4d:17:
b8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:91:9A:E1:23:CE:65:9C:11:3C:51:B2:9D:AD:88:2B:99:C2:1C:23
X509v3 Authority Key Identifier:
keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/AS58542.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.184.24.0/21
180.184.56.0/21
Signature Algorithm: sha256WithRSAEncryption
60:d3:d0:0e:a9:40:d3:ae:c3:ee:09:58:0a:96:0c:2e:17:3d:
d3:43:2b:91:22:92:1f:0b:5b:c4:b5:35:b2:37:b7:e9:7b:b9:
50:91:a8:5c:59:40:a9:2d:2a:7e:81:10:9c:4e:ed:68:a8:5d:
43:cc:8f:0e:0e:57:b9:74:cc:9c:3d:25:ec:5d:43:28:1c:26:
11:e5:ca:c6:ba:1c:e9:82:a2:08:72:4c:18:ac:fb:70:18:27:
1a:ec:b7:3a:32:e5:94:7e:c2:0f:07:ab:05:c6:eb:35:46:07:
ee:90:43:11:ac:86:14:3d:a4:39:f8:0c:85:e5:7d:e1:01:40:
f6:3b:66:03:7b:7f:81:de:a3:3e:b1:43:6c:13:4b:3c:70:79:
32:f6:a5:8d:6e:53:13:31:3e:66:0b:27:06:e0:ce:c4:c9:5f:
87:73:67:11:fb:46:38:73:d4:58:9e:51:51:17:e9:e4:2c:10:
f1:c7:56:b5:67:dc:df:72:9c:e3:9a:c7:84:b2:98:81:db:bc:
d9:20:b1:34:d8:bc:b6:04:79:d1:43:55:45:3a:f6:b3:0d:50:
67:9a:00:e9:2b:62:4a:ff:10:44:33:23:3b:55:a1:28:8c:8d:
6c:0f:b5:f0:1a:dc:55:0b:d1:9d:fd:bb:0e:ce:c9:c6:02:8c:
ea:7e:09:06
-----BEGIN CERTIFICATE-----
MIIE3zCCA8egAwIBAgIUB00y+6q5NI7t4SVliNOLQDBYTtUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJE
MUVFRjM4RjAeFw0yNjA3MDExMzAzMzhaFw0yNzA2MzAxMzA4MzhaMDMxMTAvBgNV
BAMTKDM0OTE5QUUxMjNDRTY1OUMxMTNDNTFCMjlEQUQ4ODJCOTlDMjFDMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgGyZqD1KjyJcd/PCV+rgMIERj
iIm/pHTgafMyQIKm+DosMjqQnzWXp28ry9EGhvk8Xyf7pdgL2payt7GhJBF5oZgN
P2zq4JsoJlnf0NXcx8nljGGgrfMyid5yF1j39+L1xYx/TyJTvavwP4IuGLplxWs2
MmtU59MjfhEJa482mLuNZ9PPdzQxKg9t/8Z8rGBbHYGYtNQ4AJx0Q3SY+nzWfz7d
HSSNDb6pz2XwtVF/Ra3FqdUs50JstMWR9VxBEpPQ/4oPYPti3W/uAfPmMqTzGZUr
E96JI0Usc5tVOHZp332xUr+VNEh2zIC7L71tYbvbEONMOZhbkYkicWFNF7g9AgMB
AAGjggHpMIIB5TAdBgNVHQ4EFgQUNJGa4SPOZZwRPFGyna2IK5nCHCMwHwYDVR0j
BBgwFoAUMHdGU7O3vxWzi4u//XOlwtHu848wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTY0OTM0NTY5MTY1MC8wLzMwNzc0NjUzQjNCN0JGMTVCMzhCOEJCRkZENzNB
NUMyRDFFRUYzOEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJEMUVFRjM4Ri5jZXIw
XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU2OTE2NTAvMC9BUzU4NTQyLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA
ATAMAwQDtLgYAwQDtLg4MA0GCSqGSIb3DQEBCwUAA4IBAQBg09AOqUDTrsPuCVgK
lgwuFz3TQyuRIpIfC1vEtTWyN7fpe7lQkahcWUCpLSp+gRCcTu1oqF1DzI8ODle5
dMycPSXsXUMoHCYR5crGuhzpgqIIckwYrPtwGCca7Lc6MuWUfsIPB6sFxus1Rgfu
kEMRrIYUPaQ5+AyF5X3hAUD2O2YDe3+B3qM+sUNsE0s8cHky9qWNblMTMT5mCycG
4M7EyV+Hc2cR+0Y4c9RYnlFRF+nkLBDxx1a1Z9zfcpzjmseEspiB27zZILE02Ly2
BHnRQ1VFOvazDVBnmgDpK2JK/xBEMyM7VaEojI1sD7XwGtxVC9Gd/bsOzsnGAozq
fgkG
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:11 2026 by rpki-client