
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e37322e302f32322d3234203d3e20323034373635.roa
File: 3231312e3134392e37322e302f32322d3234203d3e20323034373635.roa (raw, json)
Hash identifier: p6acnYOdr2x8lpqQvfC7wUgUqmxwbyhC6MW034IXrGo=
Subject key identifier: 5C:36:5C:37:12:38:0A:89:43:1F:A7:78:0A:35:3A:B0:CF:64:F8:C3
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 38C710553BE4695B0B110958C88DA037CEC5D906
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e37322e302f32322d3234203d3e20323034373635.roa
Signing time: Wed 06 May 2026 06:41:49 +0000
ROA not before: Wed 06 May 2026 06:36:49 +0000
ROA not after: Wed 05 May 2027 06:41:49 +0000
asID: 204765
IP address blocks: 211.149.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:c7:10:55:3b:e4:69:5b:0b:11:09:58:c8:8d:a0:37:ce:c5:d9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: May 6 06:36:49 2026 GMT
Not After : May 5 06:41:49 2027 GMT
Subject: CN=5C365C3712380A89431FA7780A353AB0CF64F8C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ef:83:a4:0a:a1:30:88:6a:cd:15:5d:d5:34:
08:7b:9e:66:8d:04:cc:34:f9:32:76:f5:c5:2f:dd:
53:38:b3:e8:6f:5d:32:bc:22:81:45:f4:79:24:05:
59:51:2e:42:1a:41:b9:32:8f:b9:50:27:fc:0e:57:
a4:97:8b:65:60:77:9a:38:4f:3a:fb:46:49:2a:68:
ee:cb:8c:03:c0:66:58:75:c7:b1:9c:63:cd:61:f1:
77:ca:e2:ae:a4:42:de:ea:11:60:85:8d:9e:36:2a:
f7:c1:91:3b:bb:d1:f3:6b:f7:79:fb:e9:73:6c:8f:
14:ae:8b:76:08:57:e1:dc:2e:79:62:98:36:25:fe:
03:bf:e7:d3:7a:d9:3b:fd:90:39:e1:a9:72:d2:cf:
87:01:f3:10:33:cc:64:f2:5d:23:b2:7a:26:47:29:
ce:14:17:62:1f:41:30:c9:5f:0e:17:d5:06:d5:63:
20:f6:7a:1b:46:58:e6:e5:fc:18:9d:b7:49:18:9f:
79:65:72:6f:0c:9d:b3:d4:7e:83:f9:c7:ce:b6:5b:
6e:b0:22:b5:da:82:97:c2:df:74:77:5b:e1:d9:6b:
fd:03:62:32:a8:70:e4:8e:a6:ca:e8:3b:a3:87:11:
48:9c:ad:ff:66:da:0e:6e:e1:4a:ef:32:74:53:31:
de:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:36:5C:37:12:38:0A:89:43:1F:A7:78:0A:35:3A:B0:CF:64:F8:C3
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e37322e302f32322d3234203d3e20323034373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.149.72.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:ad:4f:e1:71:41:ab:18:7f:52:36:3d:cd:2e:11:09:81:62:
76:cc:bf:ff:9f:80:33:37:a2:1c:dc:78:16:10:19:4b:50:6e:
58:5d:e7:3a:da:cb:50:a3:c1:7d:ac:f3:0b:21:94:23:6d:26:
83:75:c3:2a:30:4f:07:05:d1:f6:90:a8:e7:b5:f7:4b:d3:ef:
60:68:53:7e:3b:64:0e:8f:94:d8:cb:35:cc:6f:cd:87:45:a8:
5f:fd:af:f0:c9:73:cc:49:12:23:cd:7f:14:76:cf:83:ab:d2:
41:c1:b8:7d:ad:8f:66:8b:14:ac:59:5d:1a:5b:2b:60:c6:9f:
39:a5:15:87:03:35:72:a1:28:d6:2a:71:a6:af:f1:1f:da:83:
7d:49:28:5a:9d:50:40:5e:68:1b:76:66:fe:5f:36:f0:8b:68:
d5:1a:fa:1d:90:57:35:fa:23:d1:d7:3d:01:a1:c3:1a:b9:b3:
f8:15:a8:02:5b:55:ca:2f:43:9e:3c:de:02:ee:e0:a6:0e:e5:
66:09:a7:de:a3:de:b5:50:98:87:ad:e3:a9:0f:48:14:cb:89:
ea:a0:c9:fa:ad:71:ef:c0:1d:d4:05:b3:f8:00:3a:ac:ea:1e:
79:ff:c2:0d:98:b3:b6:a3:d9:3a:b5:f3:32:cd:1d:a0:a6:1e:
cd:46:e9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:03:45 2026 by rpki-client