
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e34342e302f32322d3234203d3e20323034373635.roa
File: 3231312e3134392e34342e302f32322d3234203d3e20323034373635.roa (raw, json)
Hash identifier: 0d3U+ubk0JOJdQzBBX1BzvDs83O6VewFfTp4TtLiFCI=
Subject key identifier: B9:FC:45:B3:7D:9C:30:43:8E:FA:CC:E6:5B:B8:FB:EB:25:61:EB:43
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 37128163C5988BE69F9625267BDAB0C510D87788
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e34342e302f32322d3234203d3e20323034373635.roa
Signing time: Wed 06 May 2026 06:40:54 +0000
ROA not before: Wed 06 May 2026 06:35:54 +0000
ROA not after: Wed 05 May 2027 06:40:54 +0000
asID: 204765
IP address blocks: 211.149.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:12:81:63:c5:98:8b:e6:9f:96:25:26:7b:da:b0:c5:10:d8:77:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: May 6 06:35:54 2026 GMT
Not After : May 5 06:40:54 2027 GMT
Subject: CN=B9FC45B37D9C30438EFACCE65BB8FBEB2561EB43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8e:d1:b6:87:60:03:b1:9d:20:05:23:42:44:
7d:5b:16:bf:ca:d9:08:94:85:91:8a:53:55:0d:ab:
3f:ee:14:26:b5:95:db:4a:38:e4:42:ff:da:16:3e:
84:07:71:1f:3d:05:a1:aa:6c:bb:21:8a:de:f7:7f:
bf:52:56:91:6c:52:01:7e:a1:cf:07:04:c1:14:4e:
e0:cd:aa:12:1d:34:7e:07:39:a9:05:fa:6a:d5:3b:
24:a0:bb:5d:96:a6:78:23:2d:fc:e0:ae:1f:14:19:
88:0b:81:25:36:d9:93:91:8e:c6:eb:dd:8f:61:7f:
18:fc:48:e7:9f:3e:69:ac:17:41:cb:c2:a2:a1:90:
e8:8d:56:26:b0:ae:8a:dd:c6:df:06:ab:b9:29:d1:
14:c3:cd:af:71:0e:a9:be:8f:f9:56:0f:dd:c2:2b:
cb:87:0b:e2:57:d3:cd:43:19:6d:fb:67:ff:d6:14:
67:94:e9:54:6c:dc:7b:81:10:3d:12:dd:1f:56:c7:
e6:e0:62:03:00:03:e7:33:0c:63:23:07:50:37:9e:
ad:2f:a9:8e:8f:d2:bd:6c:b9:a8:60:ac:d9:38:cb:
ed:1e:e4:7f:c0:a2:10:19:ea:0f:aa:93:ae:fa:33:
5b:d5:55:d3:21:a6:13:88:5f:f0:0b:e1:92:c5:1f:
bd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FC:45:B3:7D:9C:30:43:8E:FA:CC:E6:5B:B8:FB:EB:25:61:EB:43
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e34342e302f32322d3234203d3e20323034373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.149.44.0/22
Signature Algorithm: sha256WithRSAEncryption
04:f3:75:81:9e:7d:4d:63:3b:38:09:55:a9:04:b6:24:47:6e:
35:a5:b1:73:68:33:a4:59:cc:da:15:83:83:8a:af:17:7d:40:
3a:87:fa:17:7c:0c:50:e1:59:0c:05:8a:b6:67:c8:59:61:bd:
89:05:1e:01:1d:bf:e3:84:76:e1:a7:49:93:d3:ab:c2:7c:56:
32:43:f5:dd:4d:ff:b4:ec:e8:01:92:cf:b9:d0:af:90:de:a2:
99:5a:25:d5:c6:0b:8b:af:1b:95:d0:b2:d9:ed:fd:cc:66:a9:
39:8e:19:85:b3:0f:72:70:a0:62:1d:36:13:24:c4:de:79:36:
d1:d0:36:c6:52:4f:d9:a7:60:a3:fd:07:6b:b6:73:14:e4:8b:
42:12:10:70:a2:76:64:b0:33:e4:10:49:45:cb:ec:04:f3:f7:
9f:8a:a5:1d:3c:1f:d1:4b:09:6e:cf:3a:96:d2:37:17:7d:85:
c6:eb:13:f9:3c:26:e6:a0:64:df:5f:e7:52:c1:2a:58:af:35:
d0:aa:fe:f1:2a:da:27:ad:44:71:c4:98:6a:34:2d:30:91:e3:
45:18:a0:72:a8:18:e6:9f:7e:68:ab:5e:c5:90:fc:a1:84:3e:
20:ad:10:62:6e:d2:f5:78:e3:d4:16:48:08:2e:37:de:14:8d:
37:0e:ea:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:46:03 2026 by rpki-client