
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e39322e302f32322d3234203d3e20323034373635.roa
File: 3231312e3134392e39322e302f32322d3234203d3e20323034373635.roa (raw, json)
Hash identifier: O2KUtwnKQTdxp2fOwwphKru0DcVaxgu2CEyhbFeYIgk=
Subject key identifier: 5A:82:35:45:96:C6:3F:CB:F9:5A:1B:08:FB:09:14:4E:29:00:3A:3C
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 2865D8FD5B9334B7EEF9223B29276A7D67FE3AA2
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e39322e302f32322d3234203d3e20323034373635.roa
Signing time: Wed 06 May 2026 06:42:59 +0000
ROA not before: Wed 06 May 2026 06:37:59 +0000
ROA not after: Wed 05 May 2027 06:42:59 +0000
asID: 204765
IP address blocks: 211.149.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:65:d8:fd:5b:93:34:b7:ee:f9:22:3b:29:27:6a:7d:67:fe:3a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: May 6 06:37:59 2026 GMT
Not After : May 5 06:42:59 2027 GMT
Subject: CN=5A82354596C63FCBF95A1B08FB09144E29003A3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7f:b3:2f:4f:ff:1e:b0:5c:56:1a:8a:6d:8e:
1f:ca:32:3b:3e:cc:65:69:7d:54:36:7e:d9:4c:6b:
ea:9f:68:ab:25:69:fb:5a:e6:78:50:59:ec:92:d0:
ee:31:a8:49:3c:c7:b9:cc:67:ca:03:13:fa:1e:66:
db:63:b1:0b:e3:c0:7b:dd:b7:9e:34:7b:3b:bd:2e:
23:7e:3a:ff:08:b9:73:17:c8:fc:5b:d5:17:89:ea:
9e:63:09:4c:07:a5:fc:71:ad:23:2a:0b:41:99:8e:
77:a8:ae:53:de:f1:3d:e1:1a:03:54:2b:26:b7:07:
2a:93:81:9b:4f:a1:5e:ea:a0:18:13:63:65:5d:5c:
46:eb:0f:e2:00:60:f8:ec:fe:65:5f:84:c4:d7:26:
e5:ee:a5:15:14:03:80:9d:0d:81:b0:e0:7c:25:38:
99:4c:c2:a4:2e:64:b4:91:94:ba:cb:53:2b:33:35:
43:52:d4:2b:14:30:a2:7f:09:c2:ce:f9:a4:c3:4c:
d4:6e:3c:bb:ab:27:2b:6e:41:dc:74:cd:4a:65:0b:
fc:b7:28:7d:72:48:d9:6a:96:6c:c1:59:09:27:bb:
5a:80:c4:d5:e5:69:77:18:21:64:0f:72:b6:f8:a5:
84:60:ed:5d:42:d3:70:37:98:85:21:fa:d3:b1:df:
6b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:82:35:45:96:C6:3F:CB:F9:5A:1B:08:FB:09:14:4E:29:00:3A:3C
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e39322e302f32322d3234203d3e20323034373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.149.92.0/22
Signature Algorithm: sha256WithRSAEncryption
05:8f:71:fe:0c:7f:69:26:d7:d4:eb:23:44:d0:eb:e5:c3:c4:
33:23:17:09:10:cc:60:c6:9d:07:92:d5:42:4b:fa:c0:b3:0f:
62:b3:b8:2b:88:8a:ea:00:04:17:7f:a2:93:9a:e5:5f:0f:55:
7c:83:04:ea:c1:9d:2d:54:86:25:12:0f:db:ad:3e:ac:ca:33:
97:8b:7c:17:cb:bc:87:33:ec:f1:9a:8a:71:48:36:42:5b:3b:
df:d8:14:4c:ec:7c:11:2a:58:c2:7a:fd:6f:c3:7b:d1:e8:1d:
22:ac:7a:0b:b7:73:cf:52:0d:c0:ad:db:bf:f4:57:82:14:e9:
61:68:b6:16:72:de:53:a0:78:df:62:bc:1c:57:c3:73:ed:90:
fd:c0:21:c1:45:d8:bf:5f:73:fe:93:df:8e:43:5c:0b:43:85:
32:a4:50:4a:fc:ea:ab:56:d2:dc:92:ca:68:d7:ff:d3:3b:f1:
4d:2a:b5:32:b7:7d:52:8b:48:ee:6b:5d:ba:21:fe:5d:e4:f4:
91:ff:dc:0a:3d:d9:ad:31:3a:5e:75:80:6c:6f:b3:bb:be:ea:
1c:b9:b9:a7:43:6c:50:e0:4e:f6:4a:ba:01:bf:72:a4:a8:81:
9d:10:24:0e:91:b1:50:b3:66:4f:d2:b3:f3:7b:64:1c:bb:d1:
01:d0:f8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:58:53 2026 by rpki-client