
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3233362e302f32322d3234203d3e20323034373635.roa
File: 3130312e3233322e3233362e302f32322d3234203d3e20323034373635.roa (raw, json)
Hash identifier: xENI2aGTlMtmg546zZZwyRSMqUMNSpbg7VPrQqjlx9o=
Subject key identifier: 4F:EC:1F:33:1D:AE:B8:CA:C5:1B:D2:2B:CA:A6:AC:90:34:2C:DB:18
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 612A9C96E42D42941CECFD9AE760D5B8B16A3B02
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3233362e302f32322d3234203d3e20323034373635.roa
Signing time: Wed 06 May 2026 06:45:05 +0000
ROA not before: Wed 06 May 2026 06:40:05 +0000
ROA not after: Wed 05 May 2027 06:45:05 +0000
asID: 204765
IP address blocks: 101.232.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:2a:9c:96:e4:2d:42:94:1c:ec:fd:9a:e7:60:d5:b8:b1:6a:3b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: May 6 06:40:05 2026 GMT
Not After : May 5 06:45:05 2027 GMT
Subject: CN=4FEC1F331DAEB8CAC51BD22BCAA6AC90342CDB18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a1:3e:57:65:c3:7c:a2:9b:57:1a:98:a1:3f:
35:2b:da:69:08:ef:64:66:ac:18:7a:d8:fd:f9:4f:
4d:52:29:67:ad:7b:91:8e:68:17:21:25:95:75:cc:
25:44:02:47:9b:7b:c5:af:b1:cd:c0:c5:0b:1f:9f:
5e:7a:b4:aa:ee:b7:f5:5f:27:1a:f6:e2:36:29:8a:
6c:70:73:ed:67:9b:c1:f4:4b:8b:cd:94:ad:08:b8:
78:e3:f1:89:42:de:5b:34:69:68:9b:e6:fe:29:ff:
76:ef:6d:9d:ec:ba:13:5e:c0:5d:b6:34:79:a0:4d:
2b:08:39:69:42:b2:12:1d:a8:3a:77:44:21:d2:dc:
e1:82:67:df:94:36:bc:c1:3b:5a:04:43:6a:fb:72:
63:c7:4f:3f:b0:da:c4:07:7c:02:da:cb:78:8d:b9:
46:75:24:79:bb:e8:a5:0e:8f:42:0f:c4:00:ae:c0:
fb:0a:26:7f:80:aa:45:a1:a1:ab:b7:63:52:66:43:
34:83:aa:bd:1e:12:32:21:5d:ad:eb:36:54:c8:a5:
e2:43:89:0e:64:f1:32:b7:bc:8d:68:ec:d2:66:0d:
bb:b7:e9:f0:d5:29:3e:f0:be:e5:ed:dc:42:87:90:
8e:69:c7:39:5a:e3:95:a0:1e:b9:64:d1:26:12:0a:
17:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EC:1F:33:1D:AE:B8:CA:C5:1B:D2:2B:CA:A6:AC:90:34:2C:DB:18
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3233362e302f32322d3234203d3e20323034373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.232.236.0/22
Signature Algorithm: sha256WithRSAEncryption
34:52:9d:67:20:47:d0:0f:5a:17:8e:4c:0f:55:93:c6:ec:b8:
c5:db:e3:80:d2:e5:8d:c2:65:20:fe:b1:fe:ff:85:74:6e:17:
91:8e:cc:7f:52:1d:b0:28:90:aa:3c:3e:69:7d:c1:e7:24:21:
4e:35:a7:9f:03:f2:f3:a3:c5:aa:2d:eb:8e:43:34:4a:2a:5e:
98:46:d0:b2:67:54:be:1e:d4:92:c3:3c:09:6d:b3:5c:3c:4e:
5d:70:1b:1a:d9:f4:b2:ed:60:20:57:f1:3d:cd:fe:7b:ad:08:
58:1c:cf:f1:48:c0:c2:4b:97:0e:e5:46:0e:c3:86:7c:77:09:
55:7c:1f:cc:fd:38:68:9d:a8:ea:95:a4:c6:a0:ad:05:af:19:
c8:d3:00:fa:82:26:6f:16:46:e2:a3:ed:31:bd:7f:e7:73:7b:
74:31:00:59:9f:38:50:92:5b:1d:4b:44:c5:0f:53:60:a6:58:
36:fd:3d:63:a7:f6:37:7e:f7:10:2b:7d:4d:1a:c5:ae:7b:44:
82:48:91:47:a7:81:69:cb:62:89:a3:6e:2e:18:96:6b:cd:5c:
f9:ea:76:03:e9:db:85:31:ee:09:b6:23:b2:68:3e:2b:5b:ed:
c0:c7:b0:60:a0:4b:15:1d:d6:a1:09:98:37:57:9c:93:b5:eb:
31:bd:17:9b
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUYSqcluQtQpQc7P2a52DVuLFqOwIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0
NEM5RUY4RTAeFw0yNjA1MDYwNjQwMDVaFw0yNzA1MDUwNjQ1MDVaMDMxMTAvBgNV
BAMTKDRGRUMxRjMzMURBRUI4Q0FDNTFCRDIyQkNBQTZBQzkwMzQyQ0RCMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZoT5XZcN8optXGpihPzUr2mkI
72RmrBh62P35T01SKWete5GOaBchJZV1zCVEAkebe8Wvsc3AxQsfn156tKrut/Vf
Jxr24jYpimxwc+1nm8H0S4vNlK0IuHjj8YlC3ls0aWib5v4p/3bvbZ3suhNewF22
NHmgTSsIOWlCshIdqDp3RCHS3OGCZ9+UNrzBO1oEQ2r7cmPHTz+w2sQHfALay3iN
uUZ1JHm76KUOj0IPxACuwPsKJn+AqkWhoau3Y1JmQzSDqr0eEjIhXa3rNlTIpeJD
iQ5k8TK3vI1o7NJmDbu36fDVKT7wvuXt3EKHkI5pxzla45WgHrlk0SYSChcfAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUT+wfMx2uuMrFG9IryqaskDQs2xgwHwYDVR0j
BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2
NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5NTI1MjUxLzAvMzEzMDMxMmUz
MjMzMzIyZTMyMzMzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzYz
NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAmXo7DANBgkqhkiG9w0BAQsFAAOCAQEANFKdZyBH0A9aF45M
D1WTxuy4xdvjgNLljcJlIP6x/v+FdG4XkY7Mf1IdsCiQqjw+aX3B5yQhTjWnnwPy
86PFqi3rjkM0SipemEbQsmdUvh7UksM8CW2zXDxOXXAbGtn0su1gIFfxPc3+e60I
WBzP8UjAwkuXDuVGDsOGfHcJVXwfzP04aJ2o6pWkxqCtBa8ZyNMA+oImbxZG4qPt
Mb1/53N7dDEAWZ84UJJbHUtExQ9TYKZYNv09Y6f2N373ECt9TRrFrntEgkiRR6eB
actiiaNuLhiWa81c+ep2A+nbhTHuCbYjsmg+K1vtwMewYKBLFR3WoQmYN1eck7Xr
Mb0Xmw==
-----END CERTIFICATE-----
Generated at Wed May 13 15:06:27 2026 by rpki-client