
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3234342e302f32322d3234203d3e20323034373635.roa
File: 3130312e3233322e3234342e302f32322d3234203d3e20323034373635.roa (raw, json)
Hash identifier: qTFtnHASG68zSGtWmwjNOPx8Jlp0Y3EGfOQZJoN/GIY=
Subject key identifier: 21:01:1F:8E:B9:ED:8D:0A:B1:A7:95:78:E4:B2:04:D3:ED:1B:33:1B
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 0BEF57FFCFFFB21E11D90000D00FAAD5B9E667F7
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3234342e302f32322d3234203d3e20323034373635.roa
Signing time: Wed 06 May 2026 06:45:21 +0000
ROA not before: Wed 06 May 2026 06:40:21 +0000
ROA not after: Wed 05 May 2027 06:45:21 +0000
asID: 204765
IP address blocks: 101.232.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:ef:57:ff:cf:ff:b2:1e:11:d9:00:00:d0:0f:aa:d5:b9:e6:67:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: May 6 06:40:21 2026 GMT
Not After : May 5 06:45:21 2027 GMT
Subject: CN=21011F8EB9ED8D0AB1A79578E4B204D3ED1B331B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:26:77:98:ba:c9:cf:dd:91:90:67:f4:f4:96:
23:e4:d3:7f:54:de:3d:ea:e4:18:78:da:96:70:d7:
60:76:85:b1:db:bd:3c:a0:d9:8a:76:d0:ea:2d:34:
4d:eb:97:41:9d:98:d7:33:14:79:ce:61:bc:d9:9f:
28:c9:d0:1d:65:86:c9:40:52:7f:ba:53:94:0b:2e:
46:87:22:78:f3:44:60:56:6a:7b:83:09:77:ec:83:
b3:ba:12:ef:43:20:ae:3e:8c:cb:d3:76:fa:1c:e3:
43:1c:38:12:7e:1c:18:67:52:87:ea:7b:b0:e1:f5:
b6:23:62:86:35:3d:e0:d5:10:24:d1:9a:bf:f5:c2:
e3:6e:be:6e:1f:05:07:9e:6b:03:92:cc:72:87:96:
be:ea:56:ac:2c:92:e7:97:7f:73:9f:f1:4d:74:20:
a6:be:cd:33:05:f9:97:62:94:4a:1d:a3:f6:e4:d1:
a9:8e:cd:5c:ce:8b:d5:58:6e:5a:93:e8:6f:e5:fe:
d6:35:c9:07:af:6d:15:99:e9:4e:4c:38:ae:69:97:
b0:0d:ba:ad:59:11:f1:96:b1:d5:ee:0b:52:11:62:
3b:51:23:0c:b4:39:ea:bf:32:94:53:35:b6:7d:ed:
5a:c9:56:5e:7e:91:5f:b6:f3:66:de:9a:7f:a0:da:
9c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:01:1F:8E:B9:ED:8D:0A:B1:A7:95:78:E4:B2:04:D3:ED:1B:33:1B
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3234342e302f32322d3234203d3e20323034373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.232.244.0/22
Signature Algorithm: sha256WithRSAEncryption
91:82:93:ac:c0:09:b5:42:02:7c:28:af:8a:cf:21:c1:a3:ac:
7b:d3:bb:fd:20:04:0f:c9:f8:6b:f0:31:f4:42:90:76:72:90:
cc:13:91:28:1f:e2:c5:6b:a9:86:1d:87:44:75:3d:16:af:83:
3a:88:b0:46:82:d2:08:ac:f6:3b:2a:b3:c7:f7:5d:2c:0b:8d:
84:a3:ed:fa:90:a1:54:d0:aa:64:da:a7:ce:0d:51:b1:89:ce:
30:81:53:7d:32:8c:e7:97:15:59:1a:2a:59:ba:9d:3e:99:f1:
15:40:43:8a:68:dc:a7:31:60:a3:84:fe:44:d5:40:eb:8a:c0:
57:5a:fb:af:eb:03:b2:0f:54:a3:1e:80:a7:e7:1f:d8:58:29:
69:49:f4:27:ea:c8:a1:b8:b7:c5:8e:07:18:c9:55:5d:dd:08:
c5:29:e7:24:24:d5:a8:06:1f:42:a0:85:c9:e0:f7:78:c3:b2:
e5:80:0c:df:6c:d6:ac:46:08:05:68:ee:eb:79:cc:b6:de:a0:
2d:39:b1:6a:82:3d:88:91:3c:a0:2f:58:82:34:fa:68:77:a1:
af:58:83:08:ed:2e:a3:ea:9f:9c:2e:4c:04:a0:a7:ea:a7:c1:
bf:68:c2:a4:95:46:55:2b:0f:1a:fc:ea:2c:38:f9:fd:a6:cf:
c1:ef:b4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:23:27 2026 by rpki-client