
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e36342e302f32322d3234203d3e20323034373635.roa
File: 3231312e3134392e36342e302f32322d3234203d3e20323034373635.roa (raw, json)
Hash identifier: 7cEayoj01iFOPeXcJ3zH3vuHtoIgbIb+yaMuct/lo/Q=
Subject key identifier: 4D:D6:08:A9:0E:89:41:73:17:8B:F9:01:BD:CA:5E:AB:AF:98:67:BE
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 55D43F53F9E7A52B255984EADF2E94B7E99A4105
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e36342e302f32322d3234203d3e20323034373635.roa
Signing time: Wed 06 May 2026 06:41:34 +0000
ROA not before: Wed 06 May 2026 06:36:34 +0000
ROA not after: Wed 05 May 2027 06:41:34 +0000
asID: 204765
IP address blocks: 211.149.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:d4:3f:53:f9:e7:a5:2b:25:59:84:ea:df:2e:94:b7:e9:9a:41:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: May 6 06:36:34 2026 GMT
Not After : May 5 06:41:34 2027 GMT
Subject: CN=4DD608A90E894173178BF901BDCA5EABAF9867BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e2:a9:63:73:94:d8:1b:d4:0f:2a:bf:8a:c9:
5a:c6:3e:5e:ce:32:d1:55:7e:01:76:f2:33:17:00:
aa:0e:f5:0c:47:87:16:52:29:47:9c:7b:62:9f:5c:
8f:6c:5e:cb:f4:f5:25:bb:0f:b8:33:01:9e:b9:62:
9f:24:06:16:da:1f:9d:a5:46:e9:b3:c6:81:dc:f9:
a1:73:b4:f4:1c:94:85:83:0f:b1:12:2e:a7:40:04:
69:ce:67:4c:c0:69:16:d7:0f:7b:5d:51:5b:0b:2f:
a4:d4:2c:0d:57:92:36:e6:f4:1c:3e:9d:8c:9a:1f:
cb:a6:c6:bd:b3:52:07:b0:8e:d3:74:90:ee:ea:93:
95:40:0a:0f:2e:5f:07:1c:7a:57:58:4c:ec:7a:96:
84:d7:72:8b:8c:1a:a3:16:f2:13:72:b0:e2:7e:30:
5c:0f:63:c2:00:1a:be:45:10:ec:78:d2:fe:64:5f:
ee:4c:71:c3:fc:0f:26:16:a1:e6:81:6e:ca:2c:e2:
46:f2:17:81:10:c9:da:a0:81:4a:ac:9b:f5:4e:3b:
91:87:16:4c:ea:65:0f:1f:60:78:ef:2d:b5:97:5c:
61:10:98:7c:58:d7:c3:62:a7:a5:b1:bc:35:88:f3:
e7:b4:ac:de:77:f2:f3:15:18:2f:89:75:c7:47:cf:
ac:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D6:08:A9:0E:89:41:73:17:8B:F9:01:BD:CA:5E:AB:AF:98:67:BE
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e36342e302f32322d3234203d3e20323034373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.149.64.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:5e:ee:b6:5b:4e:02:45:bb:6d:2c:80:0c:27:1f:04:8d:33:
6d:c2:6b:e5:1c:b3:a8:7c:bb:88:f7:35:2d:e2:71:f9:fc:08:
28:c1:8a:31:38:bf:fb:26:86:38:4f:2b:cc:cc:14:00:17:fb:
2d:3a:83:fb:ad:e0:24:48:46:0f:7a:66:d6:8a:35:e2:72:1a:
d4:ed:3f:4c:55:69:62:0e:b8:6a:23:b9:65:fa:a3:5e:0f:51:
05:86:38:90:5b:2b:7b:16:3c:ce:23:bb:c6:cb:5d:27:ba:c5:
5f:ae:9a:ac:d3:52:e6:bd:69:9b:07:77:3f:db:56:ef:ea:99:
68:95:d9:79:19:3c:38:05:aa:df:2c:ae:e2:e5:cf:26:68:7b:
68:62:64:21:c1:2b:85:a4:55:38:16:06:eb:2e:42:ff:50:f8:
b6:b2:5c:4e:e6:7d:14:70:71:32:00:99:c1:e3:59:67:25:e3:
6f:81:13:89:a2:d1:2a:e5:65:62:99:85:c9:f2:d3:37:03:06:
5e:af:30:0e:eb:9c:9e:9f:87:0f:49:27:1f:a4:09:13:64:19:
f9:1f:f5:9d:60:16:b7:e7:c7:8f:cd:59:00:d1:9c:38:2d:e2:
87:7a:35:36:9c:fc:77:cf:3f:a8:6c:93:1a:79:41:ab:30:be:
0a:be:04:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:48:11 2026 by rpki-client