
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3231362e302f32322d3234203d3e20323034373635.roa
File: 3130312e3233322e3231362e302f32322d3234203d3e20323034373635.roa (raw, json)
Hash identifier: tQzRVbc3Cn9S9Ns6qBu7g7x57J102OL0egFulcZxEas=
Subject key identifier: 08:E4:C8:C4:38:EB:5B:66:04:01:10:3C:75:3E:DB:F2:2C:29:89:5E
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 133C1635123A28741C6D999CB71F7425EDE92E3F
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3231362e302f32322d3234203d3e20323034373635.roa
Signing time: Wed 06 May 2026 06:44:32 +0000
ROA not before: Wed 06 May 2026 06:39:32 +0000
ROA not after: Wed 05 May 2027 06:44:32 +0000
asID: 204765
IP address blocks: 101.232.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:3c:16:35:12:3a:28:74:1c:6d:99:9c:b7:1f:74:25:ed:e9:2e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: May 6 06:39:32 2026 GMT
Not After : May 5 06:44:32 2027 GMT
Subject: CN=08E4C8C438EB5B660401103C753EDBF22C29895E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:82:eb:fc:fc:05:5e:86:10:f2:cb:8e:a0:4f:
f8:06:ae:f3:2c:af:39:5b:20:57:d4:7d:9c:2d:38:
29:c0:49:52:25:db:1c:a3:32:f2:bc:cb:cf:0e:dd:
b7:e6:31:07:50:73:f2:61:d4:e3:8f:f5:c7:2a:af:
51:fa:6f:94:6c:87:56:3b:f2:f8:1b:97:e3:9f:c0:
0e:06:f7:f1:16:f6:89:e2:e0:c1:a7:e0:17:8e:64:
fe:76:6e:b9:df:44:70:91:93:45:d4:be:f6:5b:b8:
23:93:6a:b5:23:b1:a5:b2:a1:d4:61:c1:c4:fc:ac:
61:fe:47:92:96:18:be:82:2a:93:91:a0:0a:e5:33:
bc:b8:eb:50:2a:52:c4:d1:f9:2b:24:83:5b:67:bb:
d7:c1:3d:20:e7:8c:ec:68:cb:e7:fe:d5:73:31:98:
6e:bf:21:f5:67:fe:fc:24:f9:30:2a:8a:8b:d1:53:
ed:7d:9d:60:0d:f1:55:04:e6:04:a7:70:64:e5:c7:
46:ef:2a:38:d4:c8:04:7b:0a:4c:27:c7:29:3c:5d:
71:20:63:7b:83:2c:de:2f:3d:fe:0a:a6:a7:1d:e9:
fa:aa:f8:04:b5:6f:52:3f:b6:06:cc:a2:4e:03:56:
b3:60:9b:e2:d3:16:b5:43:68:ce:b0:95:2a:56:85:
0c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E4:C8:C4:38:EB:5B:66:04:01:10:3C:75:3E:DB:F2:2C:29:89:5E
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3231362e302f32322d3234203d3e20323034373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.232.216.0/22
Signature Algorithm: sha256WithRSAEncryption
20:10:72:00:d1:71:df:df:53:0e:1f:92:9c:a8:14:38:bc:96:
41:73:93:51:1f:1c:66:44:fb:a2:84:f9:05:d0:af:25:f4:79:
7f:97:95:8b:c7:3d:76:85:2b:f8:2c:ca:1f:2f:88:26:d6:08:
a4:17:28:b3:cd:95:88:32:ae:6a:f7:05:e8:59:66:64:ff:da:
7c:4e:59:83:b8:e9:9d:cd:a0:93:32:e7:c9:ac:c4:53:df:dc:
f9:78:90:af:bf:04:17:5e:21:67:3c:93:5e:44:27:b6:1d:31:
9c:89:b0:6d:25:f7:ab:57:ec:f0:a5:02:58:fb:2c:96:de:2b:
81:c7:39:40:06:4b:2d:9b:ec:6e:b9:43:f1:0b:41:bc:d2:99:
36:2d:77:d4:74:31:6b:3f:db:ab:c1:a7:77:a2:46:7f:04:d0:
bc:22:69:5c:b5:3d:00:75:30:a4:70:af:23:7b:cf:42:91:66:
d6:a9:7a:f1:2f:a7:0d:54:04:e3:ed:4b:07:7b:ef:ae:33:e0:
f5:8d:69:cf:54:d8:f8:8d:32:73:91:50:f0:bf:7e:b6:f4:bf:
4a:5b:7e:a4:1b:82:29:99:c2:65:78:9e:55:ba:53:88:d5:c9:
5e:3d:2e:e3:84:74:14:3c:56:0e:fa:99:7a:28:8a:88:2b:cf:
af:1c:88:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:36:50 2026 by rpki-client