
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3138332e38312e3137332e302f32342d3234203d3e20313334373030.roa
File: 3138332e38312e3137332e302f32342d3234203d3e20313334373030.roa (raw, json)
Hash identifier: lC9BH/8Dkc5XyJPt1hnvPrCRZqXceORZdULnSdFi0Yk=
Subject key identifier: 96:84:A9:8C:93:73:5A:4E:00:78:5C:AC:C4:9D:52:42:70:35:05:4E
Certificate issuer: /CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1
Certificate serial: 60215EA51E4735DF1E9F936784A1B04882D95CB8
Authority key identifier: FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3138332e38312e3137332e302f32342d3234203d3e20313334373030.roa
Signing time: Mon 27 Apr 2026 10:24:23 +0000
ROA not before: Mon 27 Apr 2026 10:19:23 +0000
ROA not after: Mon 26 Apr 2027 10:24:23 +0000
asID: 134700
IP address blocks: 183.81.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:42:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:21:5e:a5:1e:47:35:df:1e:9f:93:67:84:a1:b0:48:82:d9:5c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1
Validity
Not Before: Apr 27 10:19:23 2026 GMT
Not After : Apr 26 10:24:23 2027 GMT
Subject: CN=9684A98C93735A4E00785CACC49D52427035054E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ba:54:74:66:bb:de:ba:f6:2e:2f:a4:92:83:
fb:a8:4e:0b:9d:76:86:61:82:85:8e:97:1e:06:84:
28:7f:ec:b4:88:17:7f:82:f9:ab:64:e1:bd:5c:4b:
08:c4:b0:0a:a4:9d:bf:72:32:c6:3f:3c:58:82:b7:
d2:04:0f:96:a1:e5:9a:5b:de:4a:b1:8d:cf:cb:58:
38:84:48:58:83:d1:d8:73:ab:6f:16:a0:a1:85:07:
9f:db:ec:0b:34:13:5b:24:22:c4:2c:99:59:e8:10:
8f:e9:5e:90:40:cd:db:78:bd:12:cc:15:58:76:ac:
f2:32:e2:7f:ba:17:5f:89:41:84:a9:1f:78:a3:a2:
5d:43:15:30:b8:0b:30:9d:f5:55:23:d3:c4:d2:b1:
95:06:f6:cb:e3:9f:b6:57:89:e3:37:96:f2:88:47:
d2:0c:31:9a:f0:3b:db:d1:36:a9:2b:a8:6e:a3:bb:
f2:1c:fc:52:c7:27:98:4b:da:22:09:5c:bd:ba:fe:
ae:2b:23:c4:04:62:3a:7c:97:9b:a8:e6:00:ec:4e:
28:6a:18:f6:05:0b:20:72:c3:d2:80:95:87:b4:3c:
66:34:64:0c:ca:94:ac:7d:e7:aa:d2:24:bf:7b:0b:
b2:6b:80:82:6a:3b:17:f1:39:4d:0a:0b:72:e9:0b:
09:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:84:A9:8C:93:73:5A:4E:00:78:5C:AC:C4:9D:52:42:70:35:05:4E
X509v3 Authority Key Identifier:
keyid:FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3138332e38312e3137332e302f32342d3234203d3e20313334373030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
183.81.173.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:74:83:94:05:aa:4a:30:78:3d:fc:63:bd:4d:16:e3:49:2f:
9b:05:f2:d0:53:c9:30:f9:33:01:22:f2:3d:55:11:54:6f:19:
3a:62:5f:64:a2:41:a1:cc:5c:0e:ba:db:8c:37:c2:69:7f:4c:
4b:36:2f:b5:59:75:4f:15:80:51:72:89:c3:68:0f:0f:42:ca:
b5:a7:e9:61:28:ae:ad:aa:56:63:cc:4f:ba:c8:20:79:e1:67:
70:a1:46:d3:99:12:3e:92:51:56:04:bc:ab:3f:1f:c2:84:8c:
80:73:52:b5:0b:5c:c6:aa:a8:71:4a:fc:6a:0a:df:1b:4e:e4:
2a:4c:97:00:06:fc:e4:2a:63:30:6f:18:09:2e:03:9d:28:97:
d6:04:7f:9f:c9:10:8c:81:a8:96:98:2c:47:f3:2e:a0:19:b9:
10:2c:ce:01:c9:35:25:82:80:c7:b1:e8:44:41:a4:7a:46:4a:
11:b0:65:85:1b:d5:eb:5e:9a:65:15:7c:e8:c5:1e:cc:3d:8a:
2c:3c:be:d8:aa:d3:0f:4f:8c:91:62:fc:2e:63:5e:4e:86:ca:
48:f5:c3:1c:df:90:3c:b1:62:a2:9c:d5:19:66:73:f8:9b:c4:
3b:82:40:e4:47:8a:85:b2:4e:cc:c1:27:ba:1b:b7:8b:55:31:
7a:c5:3d:25
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUYCFepR5HNd8en5NnhKGwSILZXLgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY0RTY4RUQxMEFBQjA3RDhGNEVFQzA1RkQwMzQ1Nzk1
M0Y5MzdFMTAeFw0yNjA0MjcxMDE5MjNaFw0yNzA0MjYxMDI0MjNaMDMxMTAvBgNV
BAMTKDk2ODRBOThDOTM3MzVBNEUwMDc4NUNBQ0M0OUQ1MjQyNzAzNTA1NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ulR0ZrveuvYuL6SSg/uoTgud
doZhgoWOlx4GhCh/7LSIF3+C+atk4b1cSwjEsAqknb9yMsY/PFiCt9IED5ah5Zpb
3kqxjc/LWDiESFiD0dhzq28WoKGFB5/b7As0E1skIsQsmVnoEI/pXpBAzdt4vRLM
FVh2rPIy4n+6F1+JQYSpH3ijol1DFTC4CzCd9VUj08TSsZUG9svjn7ZXieM3lvKI
R9IMMZrwO9vRNqkrqG6ju/Ic/FLHJ5hL2iIJXL26/q4rI8QEYjp8l5uo5gDsTihq
GPYFCyByw9KAlYe0PGY0ZAzKlKx956rSJL97C7JrgIJqOxfxOU0KC3LpCwkPAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUloSpjJNzWk4AeFysxJ1SQnA1BU4wHwYDVR0j
BBgwFoAU/05o7RCqsH2PTuwF/QNFeVP5N+EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTU5MDc4Ny8wL0ZGNEU2OEVEMTBBQUIwN0Q4RjRFRUMwNUZEMDM0
NTc5NTNGOTM3RTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkY0RTY4RUQxMEFBQjA3RDhGNEVFQzA1RkQwMzQ1Nzk1M0Y5MzdFMS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1OTA3ODcvMC8zMTM4MzMyZTM4
MzEyZTMxMzczMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM3MzAzMC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEALdRrTANBgkqhkiG9w0BAQsFAAOCAQEA3HSDlAWqSjB4PfxjvU0W
40kvmwXy0FPJMPkzASLyPVURVG8ZOmJfZKJBocxcDrrbjDfCaX9MSzYvtVl1TxWA
UXKJw2gPD0LKtafpYSiurapWY8xPusggeeFncKFG05kSPpJRVgS8qz8fwoSMgHNS
tQtcxqqocUr8agrfG07kKkyXAAb85CpjMG8YCS4DnSiX1gR/n8kQjIGolpgsR/Mu
oBm5ECzOAck1JYKAx7HoREGkekZKEbBlhRvV616aZRV86MUezD2KLDy+2KrTD0+M
kWL8LmNeTobKSPXDHN+QPLFiopzVGWZz+JvEO4JA5EeKhbJOzMEnuhu3i1UxesU9
JQ==
-----END CERTIFICATE-----
Generated at Wed May 13 17:10:38 2026 by rpki-client