
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3138332e38312e3137342e302f32342d3234203d3e20313334373030.roa
File: 3138332e38312e3137342e302f32342d3234203d3e20313334373030.roa (raw, json)
Hash identifier: gmGr7tb+LJTZbz2XvRkEJr+CEAbCgnv2Ur01noSTdE8=
Subject key identifier: A4:71:10:5E:37:70:AD:8E:3B:8A:EE:EF:0F:B9:70:D6:8E:7C:AE:07
Certificate issuer: /CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1
Certificate serial: 5F0EF23C0ABD2B8C9302EFBB2306B0379EA568B3
Authority key identifier: FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3138332e38312e3137342e302f32342d3234203d3e20313334373030.roa
Signing time: Mon 27 Apr 2026 10:24:23 +0000
ROA not before: Mon 27 Apr 2026 10:19:23 +0000
ROA not after: Mon 26 Apr 2027 10:24:23 +0000
asID: 134700
IP address blocks: 183.81.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:42:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:0e:f2:3c:0a:bd:2b:8c:93:02:ef:bb:23:06:b0:37:9e:a5:68:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1
Validity
Not Before: Apr 27 10:19:23 2026 GMT
Not After : Apr 26 10:24:23 2027 GMT
Subject: CN=A471105E3770AD8E3B8AEEEF0FB970D68E7CAE07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:79:d7:86:f7:3c:39:f3:7d:af:11:1c:31:76:
ea:fd:1c:f2:91:b0:1f:a4:e5:d1:dd:f3:a6:32:56:
c7:5c:57:bb:3d:f7:03:a1:e7:18:33:09:2c:4d:49:
0c:20:3d:d6:12:22:59:52:e0:70:d9:84:53:d7:15:
43:f3:2c:e0:d0:8b:70:6a:f8:96:97:85:86:82:98:
15:30:d4:f8:ed:cc:36:1e:09:e5:10:af:95:c0:29:
d5:ea:62:7b:f6:84:53:40:0f:6b:28:2a:c4:87:42:
94:72:6a:ee:1d:c9:54:d4:4d:af:f0:53:9e:bb:9e:
8d:4d:ef:b4:f6:73:b7:a0:d6:4f:da:12:04:9f:8c:
76:32:a5:71:f6:92:9c:1d:99:c6:5f:ba:52:07:f9:
31:03:36:07:66:98:ee:2c:42:2c:ae:16:fd:a9:6e:
4b:5c:75:65:63:b0:17:67:b2:ff:f3:f0:25:0d:9b:
88:d5:45:1b:0c:9f:9c:25:1a:9b:f1:f8:fa:48:25:
39:58:15:0d:6f:5f:3e:92:66:14:2c:3e:a8:c8:a2:
b2:eb:8c:f7:dc:5b:a0:57:e1:5c:a2:e7:39:ec:42:
06:3d:69:4e:a5:54:1e:80:48:76:23:76:86:16:ad:
21:df:65:1e:58:83:b1:68:27:4f:dd:ad:0c:48:5e:
8d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:71:10:5E:37:70:AD:8E:3B:8A:EE:EF:0F:B9:70:D6:8E:7C:AE:07
X509v3 Authority Key Identifier:
keyid:FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3138332e38312e3137342e302f32342d3234203d3e20313334373030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
183.81.174.0/24
Signature Algorithm: sha256WithRSAEncryption
33:9a:22:34:79:b5:dc:1f:9f:d0:28:c8:72:6a:11:de:2e:d5:
11:7b:62:87:55:a6:d4:f2:df:ba:16:17:45:e0:c5:97:11:90:
db:60:11:b3:e0:d8:16:5a:8d:25:3f:f6:ec:db:03:29:28:b4:
f7:05:51:81:dc:25:4b:9d:33:74:ea:7e:9a:cb:ff:ba:66:da:
e2:48:58:79:fa:b5:7e:b9:f3:99:18:06:d3:61:7d:c9:b8:01:
57:7c:87:3b:0f:f9:da:e5:98:a7:6b:87:c4:ca:07:6f:06:23:
b7:4d:c4:40:53:ea:84:8c:15:1e:96:27:be:2c:39:7d:84:ee:
1f:8f:37:e5:a9:4f:62:ec:b2:ae:cb:5f:c9:30:19:c6:e2:b9:
3b:38:82:29:3d:f7:7c:dc:df:45:9c:39:31:05:ab:d2:65:16:
2a:f6:dc:77:ff:03:1e:2d:55:38:64:d7:a7:d7:c6:88:92:44:
19:05:ed:6d:de:f5:84:0b:82:7d:3f:2e:49:1e:e6:7a:cf:38:
85:21:ec:82:03:d4:64:21:8c:50:b2:a1:42:40:f7:32:0e:50:
9f:3a:3c:f1:ee:95:c7:97:51:11:d7:d7:96:4b:84:3d:d7:be:
1c:41:5d:38:7d:99:44:43:7a:5a:d6:f0:ac:ec:50:c7:fe:e3:
e9:fe:cc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:41:34 2026 by rpki-client