
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3138322e35302e352e302f32342d3234203d3e20313334373030.roa
File: 3138322e35302e352e302f32342d3234203d3e20313334373030.roa (raw, json)
Hash identifier: Hc6qPVaMuIOmLxt0qBk9KufKDt6pDV+7wig6bn4hjro=
Subject key identifier: 76:FE:2B:A3:F8:08:B8:9D:77:6F:18:73:0F:B7:E8:4D:07:37:A3:C8
Certificate issuer: /CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1
Certificate serial: 5A9C33D4379B56850D2B734B6A52CAF0878C3EF9
Authority key identifier: FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3138322e35302e352e302f32342d3234203d3e20313334373030.roa
Signing time: Mon 27 Apr 2026 10:24:23 +0000
ROA not before: Mon 27 Apr 2026 10:19:23 +0000
ROA not after: Mon 26 Apr 2027 10:24:23 +0000
asID: 134700
IP address blocks: 182.50.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:42:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:9c:33:d4:37:9b:56:85:0d:2b:73:4b:6a:52:ca:f0:87:8c:3e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1
Validity
Not Before: Apr 27 10:19:23 2026 GMT
Not After : Apr 26 10:24:23 2027 GMT
Subject: CN=76FE2BA3F808B89D776F18730FB7E84D0737A3C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2b:8b:35:2c:7d:79:a2:65:d2:4b:23:4a:fc:
07:31:04:96:ff:6b:bd:69:2c:73:53:80:48:3d:ab:
80:0c:3b:2e:f6:47:f7:29:08:2c:b1:5d:73:21:aa:
b9:fc:95:2e:a5:ae:94:c8:ce:0e:bd:38:c0:60:f8:
27:f1:3e:a4:41:81:c3:50:e5:f8:68:22:6b:c3:25:
23:60:c5:be:15:1d:57:92:01:10:d4:96:b8:03:ac:
26:dd:6a:87:f3:14:47:2c:2d:14:94:ac:00:53:82:
3c:51:37:91:ae:c8:c4:f4:82:2d:f4:b6:85:d2:94:
fc:f3:a5:41:17:58:5f:ef:a4:27:a3:5b:a0:7f:05:
04:a8:63:9d:bd:2f:cb:80:48:ee:8c:a6:cd:6e:81:
a8:37:74:03:eb:57:f6:c4:66:67:57:4e:b9:ed:2a:
d4:b2:56:0f:84:c0:8b:6e:5a:79:c4:e2:84:bc:75:
7f:ad:08:2f:5a:60:c9:29:f4:9e:4c:ee:80:6d:ce:
20:40:69:9d:c9:da:17:04:aa:c8:7a:73:78:eb:68:
76:2a:57:39:a8:df:af:d2:08:1f:0e:cd:26:fa:a5:
53:d5:58:d3:e3:36:23:3c:67:b1:b2:f9:9b:4b:55:
b6:91:8f:c9:13:13:a4:fa:16:6c:d6:7b:73:c7:2b:
ed:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FE:2B:A3:F8:08:B8:9D:77:6F:18:73:0F:B7:E8:4D:07:37:A3:C8
X509v3 Authority Key Identifier:
keyid:FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3138322e35302e352e302f32342d3234203d3e20313334373030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.50.5.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:51:b8:21:19:70:ed:8c:98:96:38:d6:4d:11:a6:b1:23:64:
00:a8:46:51:93:5a:6c:bf:39:fd:b4:34:95:5f:6e:2a:84:ec:
11:77:d5:53:43:a4:3b:05:04:60:54:f9:38:5f:f0:56:4b:09:
19:c6:b0:bd:a0:5f:67:5d:73:18:04:28:40:1a:78:db:e2:10:
21:d8:91:ca:fd:25:05:03:f8:c4:7a:07:77:74:fa:e0:44:07:
8d:0f:81:85:4a:11:4e:7c:23:e8:47:96:f3:94:35:d0:35:69:
42:85:94:9c:f9:d5:0f:7e:8f:f5:b1:69:18:b3:29:3e:61:7a:
05:bf:60:7c:f6:5f:e1:20:1a:c5:1f:fe:cc:ae:fa:15:16:9e:
51:51:b9:80:32:37:ec:2b:04:c0:14:00:e6:af:c0:71:41:d5:
eb:f4:64:67:6d:e5:cb:71:c7:0f:ec:fe:1d:0f:ff:c5:4c:75:
8f:69:45:8a:e2:d1:86:35:c1:e0:28:00:4f:f2:55:1f:11:bc:
af:a8:6e:d3:91:ce:3c:52:dc:63:f0:0c:3b:4e:b4:00:74:6a:
f7:91:75:91:4f:e0:58:70:9d:de:8a:cd:fa:10:50:00:2a:62:
9c:fd:15:44:4e:07:3d:1a:eb:c1:6e:7e:83:07:ba:cf:45:ab:
59:92:21:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:56:32 2026 by rpki-client