
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e34302e302f32322d3234203d3e20323034373635.roa
File: 3231312e3134392e34302e302f32322d3234203d3e20323034373635.roa (raw, json)
Hash identifier: VO5OJNSEUdlOs/FaBLyF/tc16MYOe09oXKs+dmGlCvI=
Subject key identifier: 32:63:C4:49:94:E7:22:91:CE:2F:B2:82:0C:DE:78:D0:F9:CE:00:7A
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 09940EE76E194F97BF0BCA8A07D39A82FA762ABA
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e34302e302f32322d3234203d3e20323034373635.roa
Signing time: Wed 06 May 2026 06:40:47 +0000
ROA not before: Wed 06 May 2026 06:35:47 +0000
ROA not after: Wed 05 May 2027 06:40:47 +0000
asID: 204765
IP address blocks: 211.149.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:94:0e:e7:6e:19:4f:97:bf:0b:ca:8a:07:d3:9a:82:fa:76:2a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: May 6 06:35:47 2026 GMT
Not After : May 5 06:40:47 2027 GMT
Subject: CN=3263C44994E72291CE2FB2820CDE78D0F9CE007A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:92:28:52:3c:2e:0a:89:f8:30:29:6d:16:9e:
36:f5:6a:71:73:94:36:93:65:bc:e8:c0:3c:e0:4c:
76:61:16:66:e8:bd:5d:97:72:fa:25:39:ed:f6:0c:
d4:fb:98:aa:1c:2d:79:10:b6:cc:65:8c:0b:59:a3:
da:f2:1f:75:e5:10:c3:ce:93:4a:34:c8:61:b6:3d:
db:85:73:60:d1:95:ce:23:9e:b2:4f:b6:8f:d4:91:
66:56:6f:6e:68:71:4b:78:1f:3b:b0:46:d2:53:f2:
e8:0c:f9:09:f9:1b:c1:4d:0c:7b:4b:9b:c5:a7:2d:
d8:66:0f:2b:92:8e:65:4c:e9:cc:17:39:ea:57:2e:
b4:43:18:07:7c:94:b4:8e:cf:7e:5e:84:d7:4a:94:
7b:e2:ec:e8:9e:aa:33:18:07:b4:9b:55:03:16:da:
15:b4:4a:59:05:7b:01:dd:c2:11:a5:3b:5f:ad:fc:
24:50:39:47:83:7d:0a:03:e1:52:f6:3f:3f:a6:92:
2d:b1:28:0d:d1:ce:8f:93:0b:a2:18:72:1a:a3:53:
dc:0b:19:40:7d:c0:b7:3c:33:d5:ff:5f:c0:63:b0:
cd:8e:94:55:d4:43:59:92:30:0e:6a:3e:69:fe:95:
25:c9:83:a6:d5:a0:e6:0a:df:1e:b1:7a:3f:31:5e:
4b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:63:C4:49:94:E7:22:91:CE:2F:B2:82:0C:DE:78:D0:F9:CE:00:7A
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e34302e302f32322d3234203d3e20323034373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.149.40.0/22
Signature Algorithm: sha256WithRSAEncryption
94:af:49:55:57:77:76:e7:eb:b5:c9:58:89:05:96:08:50:10:
c4:d7:68:b5:4d:40:33:d6:d1:0a:a8:69:3b:e2:28:cd:24:17:
cc:65:aa:2a:be:d3:b9:9c:12:07:4c:42:8e:c2:51:43:96:22:
55:ad:67:f7:09:e6:e1:8f:91:11:54:8d:80:dc:88:53:30:fa:
3e:40:67:71:0b:f9:22:ee:c0:05:0f:98:a8:2f:3b:e5:9e:93:
09:29:0c:00:e7:13:7a:4b:32:4f:13:02:e9:49:2b:2e:7f:aa:
18:0b:29:57:13:46:1b:a6:eb:a5:c0:c0:29:67:dd:e8:c3:03:
31:50:c8:ba:da:35:65:d8:a1:59:b1:08:69:55:d4:43:5e:5c:
a7:ca:39:b6:af:33:be:7b:38:46:23:26:7f:6a:f8:87:c0:ef:
2a:e6:3b:66:61:73:7a:30:47:a6:29:cd:4b:c4:63:77:2a:88:
11:30:2f:e4:b3:98:9c:d6:06:62:5d:1d:b4:03:41:6f:ca:d5:
4b:87:59:6e:af:9a:b5:64:35:b0:dd:a4:bd:1c:0e:f4:a1:7d:
a6:68:ac:ed:cc:5e:34:77:f1:4f:bd:b3:96:91:2a:fa:2e:15:
f0:f9:68:0f:b7:6e:0b:c6:6d:a7:68:12:d3:a0:37:a7:f8:37:
f8:1b:2f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:24:06 2026 by rpki-client