
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e36302e302f32322d3234203d3e20323034373635.roa
File: 3231312e3134392e36302e302f32322d3234203d3e20323034373635.roa (raw, json)
Hash identifier: wH55LwI9Wzq4bzO881qYVZz04sFRGDbdra4xyN1Fldw=
Subject key identifier: 43:B0:59:F3:08:6E:21:93:8A:F0:19:BE:C6:D3:5F:E7:F2:9F:66:CD
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 65B8EA2468F845C277D8AE9219874118CC131275
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e36302e302f32322d3234203d3e20323034373635.roa
Signing time: Wed 06 May 2026 06:41:27 +0000
ROA not before: Wed 06 May 2026 06:36:27 +0000
ROA not after: Wed 05 May 2027 06:41:27 +0000
asID: 204765
IP address blocks: 211.149.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:b8:ea:24:68:f8:45:c2:77:d8:ae:92:19:87:41:18:cc:13:12:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: May 6 06:36:27 2026 GMT
Not After : May 5 06:41:27 2027 GMT
Subject: CN=43B059F3086E21938AF019BEC6D35FE7F29F66CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3e:3a:3d:84:a9:4b:b2:74:f0:1f:a8:4d:85:
60:af:a6:14:08:36:fc:85:ac:b0:32:1c:2e:78:42:
1e:8c:74:e9:c1:c6:c8:e3:a9:b7:28:70:b9:80:74:
29:77:4b:4a:4d:c5:51:77:0f:45:b7:59:66:8f:45:
dc:64:a7:76:6a:21:1b:6c:1e:00:f8:15:f5:05:44:
b5:53:9d:4b:6d:ed:81:63:81:be:f2:a4:ee:16:82:
1b:2a:b1:ec:49:5e:c6:a9:27:54:4c:18:7f:19:ee:
09:69:2d:e2:25:5a:04:79:b4:23:14:24:68:2d:31:
63:98:68:b4:07:68:f1:5f:73:3a:f7:2a:c1:e6:22:
86:66:9d:8b:f9:f9:d1:3f:dd:cc:52:ee:3f:6b:a3:
97:c9:04:d6:3f:5d:85:c9:5e:d8:8c:4b:a1:c5:c8:
c1:4d:71:98:51:16:6b:f7:d3:72:e5:c4:a4:84:48:
2c:56:78:ac:fc:6e:14:46:1f:44:e7:ea:4a:1c:b1:
d5:e5:cc:ed:ce:92:fc:52:1c:36:33:e9:8a:ee:bd:
91:5f:cc:92:d3:e9:03:ce:5d:d3:b4:3a:6e:65:08:
c5:fc:39:96:69:c4:90:77:79:d9:7f:bb:fb:25:30:
bf:c3:22:d0:af:8c:76:db:fa:86:ec:db:72:e0:0d:
29:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B0:59:F3:08:6E:21:93:8A:F0:19:BE:C6:D3:5F:E7:F2:9F:66:CD
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e36302e302f32322d3234203d3e20323034373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.149.60.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:4b:75:38:b4:e3:19:12:78:13:45:a6:d9:52:f2:c8:ab:4e:
88:ae:c5:70:bd:e2:d4:5d:63:8e:7f:0d:d2:19:d7:ba:a3:ce:
1f:a2:c6:ef:20:7e:b0:9e:bb:a0:93:c8:4e:05:d7:6b:06:73:
ef:59:f3:73:d6:e3:f1:4a:1e:c6:5e:f1:a8:0f:aa:1e:b3:db:
63:1d:84:df:60:09:3e:49:cf:8c:00:9e:da:d4:d6:11:1d:e7:
34:57:4c:27:fd:59:80:bb:f0:b7:f5:e1:08:00:ed:39:a3:58:
b1:98:54:f9:1f:76:52:98:bb:e3:f2:f7:be:73:81:ef:e3:fc:
68:fb:83:5a:3b:a9:61:e6:1d:7d:3f:bf:c3:14:0f:d3:7d:e9:
5a:9c:53:4f:db:86:b3:e9:af:8e:ac:10:cc:03:75:f9:9a:1a:
f7:c4:84:ce:69:25:a1:6d:73:ff:6e:f0:a8:cf:0a:3c:d7:96:
58:da:df:2e:df:39:64:3a:b7:3a:3f:58:51:8c:90:5d:6c:ec:
5f:bf:1e:37:26:78:83:98:8f:2e:c5:68:e5:da:e1:2a:41:dc:
69:d7:f8:1f:87:c5:03:e1:25:6d:59:ab:77:56:b4:e6:c9:85:
af:00:c9:2d:17:f2:e8:36:98:b0:71:3a:7a:6a:a8:6e:26:6d:
e9:16:36:ef
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUZbjqJGj4RcJ32K6SGYdBGMwTEnUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0
NEM5RUY4RTAeFw0yNjA1MDYwNjM2MjdaFw0yNzA1MDUwNjQxMjdaMDMxMTAvBgNV
BAMTKDQzQjA1OUYzMDg2RTIxOTM4QUYwMTlCRUM2RDM1RkU3RjI5RjY2Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUPjo9hKlLsnTwH6hNhWCvphQI
NvyFrLAyHC54Qh6MdOnBxsjjqbcocLmAdCl3S0pNxVF3D0W3WWaPRdxkp3ZqIRts
HgD4FfUFRLVTnUtt7YFjgb7ypO4WghsqsexJXsapJ1RMGH8Z7glpLeIlWgR5tCMU
JGgtMWOYaLQHaPFfczr3KsHmIoZmnYv5+dE/3cxS7j9ro5fJBNY/XYXJXtiMS6HF
yMFNcZhRFmv303LlxKSESCxWeKz8bhRGH0Tn6kocsdXlzO3OkvxSHDYz6YruvZFf
zJLT6QPOXdO0Om5lCMX8OZZpxJB3edl/u/slML/DItCvjHbb+obs23LgDSk1AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUQ7BZ8whuIZOK8Bm+xtNf5/KfZs0wHwYDVR0j
BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2
NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1MjUyNTEvMC8zMjMxMzEyZTMx
MzQzOTJlMzYzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzYzNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAtOVPDANBgkqhkiG9w0BAQsFAAOCAQEAuEt1OLTjGRJ4E0Wm2VLy
yKtOiK7FcL3i1F1jjn8N0hnXuqPOH6LG7yB+sJ67oJPITgXXawZz71nzc9bj8Uoe
xl7xqA+qHrPbYx2E32AJPknPjACe2tTWER3nNFdMJ/1ZgLvwt/XhCADtOaNYsZhU
+R92Upi74/L3vnOB7+P8aPuDWjupYeYdfT+/wxQP033pWpxTT9uGs+mvjqwQzAN1
+Zoa98SEzmkloW1z/27wqM8KPNeWWNrfLt85ZDq3Oj9YUYyQXWzsX78eNyZ4g5iP
LsVo5drhKkHcadf4H4fFA+ElbVmrd1a05smFrwDJLRfy6DaYsHE6emqobiZt6RY2
7w==
-----END CERTIFICATE-----
Generated at Wed May 13 14:25:19 2026 by rpki-client