
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3131362e3139362e31352e302f32342d3234203d3e20313334373030.roa
File: 3131362e3139362e31352e302f32342d3234203d3e20313334373030.roa (raw, json)
Hash identifier: 6lUh4H/tWfmt6Eo7IJApDXDqi/4+5MMSqK6+ovuN2NY=
Subject key identifier: E0:7C:73:07:9C:49:C6:27:B7:F6:84:47:36:D4:21:6B:15:F2:36:87
Certificate issuer: /CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1
Certificate serial: 6F3457491CD4DCA02255A3A38C55F3253C979296
Authority key identifier: FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3131362e3139362e31352e302f32342d3234203d3e20313334373030.roa
Signing time: Mon 27 Apr 2026 10:24:24 +0000
ROA not before: Mon 27 Apr 2026 10:19:24 +0000
ROA not after: Mon 26 Apr 2027 10:24:24 +0000
asID: 134700
IP address blocks: 116.196.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:42:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:34:57:49:1c:d4:dc:a0:22:55:a3:a3:8c:55:f3:25:3c:97:92:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1
Validity
Not Before: Apr 27 10:19:24 2026 GMT
Not After : Apr 26 10:24:24 2027 GMT
Subject: CN=E07C73079C49C627B7F6844736D4216B15F23687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b7:17:cf:97:87:a5:8e:9f:ab:54:2e:e4:95:
d7:74:40:cf:10:30:fb:30:1a:cd:fc:21:73:39:8e:
ee:da:11:79:fd:1b:52:87:8e:88:da:3f:39:d7:51:
f0:14:89:ce:38:48:be:65:55:b5:4e:09:dd:b9:d2:
e5:2a:69:bd:d8:f0:46:94:b2:98:f6:17:98:60:56:
56:16:d7:a0:93:3b:24:f4:b5:97:8c:dd:8e:28:5b:
3b:6c:94:59:2a:45:6d:7c:47:69:1b:ee:0f:fb:7c:
a0:71:7f:10:c8:e4:9b:1e:bd:90:5b:27:fe:d3:8f:
3f:95:08:53:55:57:73:55:90:1a:a0:7f:3f:88:f3:
c3:4f:81:dd:f8:c6:b1:3b:de:1b:d1:ba:f5:3a:05:
9d:dd:7e:ba:ce:d7:26:9e:fe:51:1e:26:a0:13:17:
4d:5d:05:50:ea:e3:dd:ca:e4:28:dc:36:c8:6f:f4:
eb:71:57:d9:e3:52:61:eb:c4:f0:36:6a:aa:53:f2:
e3:ed:a3:9b:e6:e6:ed:ed:61:7e:e8:d9:82:fb:39:
27:03:4e:06:1d:b8:96:69:c8:7c:d5:27:fd:3e:4f:
15:b4:06:06:0c:88:95:23:c7:a4:7c:3d:19:44:51:
03:11:cb:fe:00:a3:29:ac:d7:2b:34:c9:e9:20:82:
2b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7C:73:07:9C:49:C6:27:B7:F6:84:47:36:D4:21:6B:15:F2:36:87
X509v3 Authority Key Identifier:
keyid:FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3131362e3139362e31352e302f32342d3234203d3e20313334373030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.196.15.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:62:b3:12:c0:dd:47:c9:94:6e:1f:cf:79:20:1d:28:b9:4e:
9d:34:c3:a2:2c:9a:f8:0f:7a:02:c7:5d:2e:97:3a:56:54:eb:
77:9e:88:7a:18:6e:d8:df:b9:96:dc:f4:b2:4c:ef:45:a9:99:
b5:36:7c:29:4e:d0:6d:f6:de:3e:9c:71:e5:28:ae:25:f3:c5:
12:ff:34:2a:40:b1:f4:28:e0:69:4c:34:05:06:11:1a:24:c2:
fc:ea:9e:08:3b:1c:c2:54:6f:d4:ac:4d:93:49:61:4d:dd:80:
85:e9:57:94:bc:bf:01:4f:71:2e:b4:5b:84:13:34:56:63:16:
2f:b2:5e:3f:e5:95:4a:3d:a5:63:bd:42:08:02:55:fd:e5:90:
1f:ce:d4:af:64:11:8d:7b:ac:a9:10:19:3e:7c:e4:73:f6:5f:
82:07:42:85:fb:36:27:9b:b3:cd:4a:36:5c:df:68:d8:3f:2b:
cb:bc:1a:dc:6a:e0:6f:ee:32:10:06:46:aa:85:5e:3a:a8:6a:
34:1d:e6:b9:bb:55:c7:19:04:b3:df:09:b3:fc:56:85:f2:bf:
1f:da:f1:6d:bc:c7:b3:5d:3d:76:e9:8f:a3:18:c8:15:b9:91:
21:e1:c6:c7:9a:e1:df:b3:bc:df:0c:ea:1b:0c:87:52:7b:ac:
35:fe:ab:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:04:06 2026 by rpki-client