
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129459715/0/3131302e37352e3232342e302f31392d3234203d3e203337393633.roa
File: 3131302e37352e3232342e302f31392d3234203d3e203337393633.roa (raw, json)
Hash identifier: BBXrRq1dBs684+XzgxyxLmN3kZjKe3o4jkqpub3A5Vk=
Subject key identifier: 89:AC:1F:F7:43:5C:24:72:3A:F0:A6:1C:5C:27:D3:B9:82:41:BD:7E
Certificate issuer: /CN=C82667C2BCBB537DEB7A3E415577B2690521D5DD
Certificate serial: 2A9715EB074691330AE2ED87962F7BF07545EE9F
Authority key identifier: C8:26:67:C2:BC:BB:53:7D:EB:7A:3E:41:55:77:B2:69:05:21:D5:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/3131302e37352e3232342e302f31392d3234203d3e203337393633.roa
Signing time: Wed 25 Mar 2026 16:08:10 +0000
ROA not before: Wed 25 Mar 2026 16:03:10 +0000
ROA not after: Wed 24 Mar 2027 16:08:10 +0000
asID: 37963
IP address blocks: 110.75.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 09:59:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:97:15:eb:07:46:91:33:0a:e2:ed:87:96:2f:7b:f0:75:45:ee:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C82667C2BCBB537DEB7A3E415577B2690521D5DD
Validity
Not Before: Mar 25 16:03:10 2026 GMT
Not After : Mar 24 16:08:10 2027 GMT
Subject: CN=89AC1FF7435C24723AF0A61C5C27D3B98241BD7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:06:40:2a:f9:cf:2b:91:0d:52:45:59:40:86:
4a:c8:96:bb:ce:8e:3f:6f:76:d1:4a:a3:9f:05:93:
d9:f9:28:17:dd:d8:21:52:c7:5f:07:ec:36:36:0d:
95:10:1e:48:1e:a5:d9:00:1a:59:56:e9:05:d5:7b:
e8:22:b9:b4:34:b0:90:e1:a0:ce:ae:86:09:a2:c4:
5b:db:41:e5:b4:18:2f:00:bb:d6:0c:42:0e:2a:87:
de:07:53:42:a7:f1:d1:b1:ba:08:5d:bf:6b:c8:a6:
53:0c:be:61:fe:42:51:79:ec:a1:54:38:97:7e:7e:
f7:a1:64:b2:99:12:4d:a1:49:6f:76:3b:18:9b:8c:
3a:73:ae:85:12:11:e2:27:cd:a2:8a:62:39:37:ef:
7d:bb:5d:b4:33:eb:c7:39:1c:b3:ae:d1:5a:5b:68:
9b:97:a9:09:b3:60:ac:d6:1f:a6:7d:58:10:e5:15:
95:6b:a0:f2:9f:eb:6f:36:6c:c2:9c:d7:05:a9:64:
f8:96:6a:a9:22:30:54:09:5e:a4:b6:8d:7a:ad:b1:
19:db:dd:75:73:56:ed:76:4c:db:69:93:31:83:5e:
22:34:be:d5:8e:cc:e3:d1:a1:f3:b9:b9:5c:89:ec:
18:7c:85:22:71:29:a0:9b:16:ed:5c:38:ec:24:5c:
a1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AC:1F:F7:43:5C:24:72:3A:F0:A6:1C:5C:27:D3:B9:82:41:BD:7E
X509v3 Authority Key Identifier:
keyid:C8:26:67:C2:BC:BB:53:7D:EB:7A:3E:41:55:77:B2:69:05:21:D5:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/3131302e37352e3232342e302f31392d3234203d3e203337393633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.75.224.0/19
Signature Algorithm: sha256WithRSAEncryption
36:5e:45:60:1a:54:36:cf:8e:e8:db:35:4b:44:9b:40:c9:e3:
08:03:81:55:be:ad:d5:1c:c5:11:ac:7d:95:1e:66:98:b1:ca:
28:7c:c3:93:e4:c3:63:1c:64:31:0f:d4:cb:95:f4:24:4f:28:
46:6c:d7:f5:9d:0c:9e:7d:52:39:e6:8f:5d:17:cd:1c:35:c9:
63:d7:1d:56:d3:21:7c:d5:62:bc:33:40:df:72:2c:f1:f6:79:
1f:cf:45:31:cd:b0:6a:28:5a:6a:68:c1:5f:b7:c1:8b:0c:93:
01:3b:81:16:22:22:b8:86:ee:c1:d5:3b:02:2e:31:52:82:c4:
37:fc:e6:c5:d5:6d:34:bd:ce:74:13:0a:15:14:30:5a:9e:95:
f8:1b:9d:64:58:3a:01:2e:e3:a4:da:88:b2:c8:56:42:a4:fe:
99:9c:2d:f7:bf:26:e5:5b:3a:4f:8b:63:f4:f4:bd:21:07:d3:
57:d2:65:ff:c7:10:83:b4:12:a4:f8:73:41:ac:58:f8:ea:ec:
ac:75:a0:83:29:ce:88:e6:1d:cd:eb:49:fb:a8:4c:90:6d:dd:
9f:d8:c5:05:d6:dc:4e:56:18:ba:c7:fa:53:ef:cb:ce:69:45:
7c:a8:37:e3:2b:07:d1:16:af:ad:b4:4e:72:1d:1e:e2:a6:16:
0e:c5:4c:57
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:48:23 2026 by rpki-client