
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e38302e302f32322d3234203d3e20323034373635.roa
File: 3231312e3134392e38302e302f32322d3234203d3e20323034373635.roa (raw, json)
Hash identifier: 67hEqlqvEaXnO/xxtDq8H9rTcGjAQDsqiTm0g9SWTZI=
Subject key identifier: 7A:D5:7C:26:D7:46:46:28:82:C2:07:98:8B:2F:71:88:EE:C0:33:ED
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 38B2959348E0FB0ABD18BFBF599AE30EF3652263
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e38302e302f32322d3234203d3e20323034373635.roa
Signing time: Wed 06 May 2026 06:42:12 +0000
ROA not before: Wed 06 May 2026 06:37:12 +0000
ROA not after: Wed 05 May 2027 06:42:12 +0000
asID: 204765
IP address blocks: 211.149.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:b2:95:93:48:e0:fb:0a:bd:18:bf:bf:59:9a:e3:0e:f3:65:22:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: May 6 06:37:12 2026 GMT
Not After : May 5 06:42:12 2027 GMT
Subject: CN=7AD57C26D746462882C207988B2F7188EEC033ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d4:d9:a5:60:a3:37:17:23:1f:e3:bb:55:9f:
ce:b2:3f:99:27:22:46:ed:c4:b5:31:9e:b1:2d:ce:
79:0b:95:9e:8c:fd:50:54:62:db:8c:ea:f4:59:13:
2f:9d:68:c3:85:90:7c:28:1e:7b:07:75:2c:09:02:
1a:6c:04:62:12:57:86:d3:5b:1e:09:bd:8d:49:35:
58:eb:5a:51:be:5e:c9:52:d1:de:e0:83:ad:a4:6c:
ce:69:09:06:94:25:2f:9e:3d:4f:de:97:3f:ee:b2:
14:38:9d:40:e9:04:e3:08:0a:7e:12:61:bf:1e:55:
c7:49:b8:01:2e:ea:97:c1:c6:09:39:8c:b6:f2:99:
61:7c:ab:45:72:7e:4b:91:09:0a:5b:fd:83:60:0f:
a9:dd:9f:66:78:20:63:84:22:e0:69:6f:82:15:e3:
5e:af:5b:5e:bd:80:be:03:9e:2f:9d:dd:b6:0d:82:
f6:e6:01:db:90:8b:1b:0c:5b:c7:97:c2:9b:43:b1:
c4:0b:03:82:d3:33:69:51:71:da:f1:7c:47:82:14:
76:5e:66:ef:61:e6:46:d0:1f:d8:e9:0f:db:85:27:
8f:00:07:6f:71:5a:4d:d9:fe:e9:25:75:0d:fb:d7:
40:35:c6:72:11:13:6a:24:99:67:61:c7:7e:db:a5:
b8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D5:7C:26:D7:46:46:28:82:C2:07:98:8B:2F:71:88:EE:C0:33:ED
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e38302e302f32322d3234203d3e20323034373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.149.80.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:69:e6:1b:35:64:bd:ad:20:27:6e:9b:e7:54:ae:a4:cb:d9:
44:c9:33:31:4e:f7:e9:36:60:11:6c:78:b3:30:7b:16:d1:c5:
da:0d:c1:c2:f7:d3:11:e6:77:41:e8:f7:08:4c:eb:b3:e6:07:
db:9a:ee:fa:98:6a:9b:40:b9:1c:92:35:eb:c7:af:e3:40:7b:
85:81:ff:90:02:47:70:b9:dc:eb:40:bf:60:45:bd:3c:9a:5a:
97:4b:50:ef:af:99:40:7c:72:76:e1:7c:14:c2:54:42:bb:e2:
df:f0:83:70:b3:a5:c3:5c:d0:ad:eb:24:a5:81:e9:fb:ba:2f:
29:24:2e:dc:86:17:43:60:90:53:f4:25:26:d1:7b:a7:c0:91:
a8:d6:94:9e:0b:c8:71:c4:03:5f:0a:4f:d4:21:8d:6b:4f:02:
68:97:e5:9b:08:5a:b6:2d:3c:7a:51:f2:39:20:60:3b:00:f1:
9f:f8:67:05:ab:b9:d3:d0:67:bc:f6:b8:e6:c8:14:2a:0f:6c:
f4:11:dc:84:52:f9:6f:c7:ba:11:af:72:42:94:24:12:34:f9:
1a:1a:30:33:a4:20:02:0b:cf:24:32:b0:8e:67:35:ed:6e:7f:
9d:05:5b:be:7d:18:10:ae:25:07:be:24:9e:eb:06:76:40:9c:
32:3d:7f:7d
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUOLKVk0jg+wq9GL+/WZrjDvNlImMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0
NEM5RUY4RTAeFw0yNjA1MDYwNjM3MTJaFw0yNzA1MDUwNjQyMTJaMDMxMTAvBgNV
BAMTKDdBRDU3QzI2RDc0NjQ2Mjg4MkMyMDc5ODhCMkY3MTg4RUVDMDMzRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm1NmlYKM3FyMf47tVn86yP5kn
IkbtxLUxnrEtznkLlZ6M/VBUYtuM6vRZEy+daMOFkHwoHnsHdSwJAhpsBGISV4bT
Wx4JvY1JNVjrWlG+XslS0d7gg62kbM5pCQaUJS+ePU/elz/ushQ4nUDpBOMICn4S
Yb8eVcdJuAEu6pfBxgk5jLbymWF8q0VyfkuRCQpb/YNgD6ndn2Z4IGOEIuBpb4IV
416vW169gL4Dni+d3bYNgvbmAduQixsMW8eXwptDscQLA4LTM2lRcdrxfEeCFHZe
Zu9h5kbQH9jpD9uFJ48AB29xWk3Z/ukldQ3710A1xnIRE2okmWdhx37bpbiLAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUetV8JtdGRiiCwgeYiy9xiO7AM+0wHwYDVR0j
BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2
NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1MjUyNTEvMC8zMjMxMzEyZTMx
MzQzOTJlMzgzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzYzNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAtOVUDANBgkqhkiG9w0BAQsFAAOCAQEAK2nmGzVkva0gJ26b51Su
pMvZRMkzMU736TZgEWx4szB7FtHF2g3BwvfTEeZ3Qej3CEzrs+YH25ru+phqm0C5
HJI168ev40B7hYH/kAJHcLnc60C/YEW9PJpal0tQ76+ZQHxyduF8FMJUQrvi3/CD
cLOlw1zQreskpYHp+7ovKSQu3IYXQ2CQU/QlJtF7p8CRqNaUngvIccQDXwpP1CGN
a08CaJflmwhati08elHyOSBgOwDxn/hnBau509BnvPa45sgUKg9s9BHchFL5b8e6
Ea9yQpQkEjT5GhowM6QgAgvPJDKwjmc17W5/nQVbvn0YEK4lB74knusGdkCcMj1/
fQ==
-----END CERTIFICATE-----
Generated at Wed May 13 14:24:16 2026 by rpki-client