
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094865295295643651/0/36312e32382e3130382e302f32342d3234203d3e203137343930.roa
File: 36312e32382e3130382e302f32342d3234203d3e203137343930.roa (raw, json)
Hash identifier: fncXqOd2R+5Fk1BqsrlCFUki0Yj3TQ3y2SYjcEIQInU=
Subject key identifier: 81:1E:48:26:2D:8F:E2:82:52:82:0B:F9:E3:90:3B:01:46:A5:48:A9
Certificate issuer: /CN=5253565A27C06C800009631402F5A6EE85C46456
Certificate serial: 3D7ACC3F72469CB39BC5B44BA19D08EF4429B2E1
Authority key identifier: 52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/36312e32382e3130382e302f32342d3234203d3e203137343930.roa
Signing time: Wed 13 May 2026 05:40:33 +0000
ROA not before: Wed 13 May 2026 05:35:33 +0000
ROA not after: Wed 12 May 2027 05:40:33 +0000
asID: 17490
IP address blocks: 61.28.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl
rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:7a:cc:3f:72:46:9c:b3:9b:c5:b4:4b:a1:9d:08:ef:44:29:b2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5253565A27C06C800009631402F5A6EE85C46456
Validity
Not Before: May 13 05:35:33 2026 GMT
Not After : May 12 05:40:33 2027 GMT
Subject: CN=811E48262D8FE28252820BF9E3903B0146A548A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:00:33:f8:31:9a:32:34:0b:c2:fa:33:d4:1d:
47:dc:bf:8d:f7:61:1c:23:90:bc:cc:a6:f5:03:69:
37:78:e8:af:cb:1b:18:98:5a:b9:70:e7:47:60:05:
98:9f:80:68:60:25:07:ed:75:83:54:d8:de:19:08:
78:40:83:04:94:cb:99:3e:c7:30:74:3f:6b:9a:a2:
bd:44:74:42:84:69:8d:80:b3:9c:dd:63:dc:6a:2e:
37:1a:97:38:70:c4:68:9e:f7:2d:b5:b3:25:3c:55:
cb:f2:74:6a:25:0f:b2:b0:ff:2e:a0:fb:c7:43:b6:
5d:c0:7f:f6:a6:69:d3:62:fa:9e:d9:22:1f:84:cc:
f6:27:55:c7:d4:26:f2:78:a2:7e:26:79:79:16:89:
e4:4f:91:38:e5:ba:c6:83:b2:3d:b2:7f:66:af:5b:
2e:70:92:f8:93:78:fd:39:30:6c:56:32:68:19:06:
db:62:40:4c:b8:11:20:d3:17:97:ac:15:14:ec:53:
af:f2:0f:0b:9d:71:10:54:7b:30:0d:82:97:7b:72:
f8:fb:92:76:16:9a:23:44:22:a4:ce:f2:0c:8b:a1:
a4:af:17:91:ea:25:5b:a5:51:d7:29:3c:9f:d8:dd:
60:fc:a8:db:22:92:aa:2c:92:25:09:c3:90:f7:e7:
62:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1E:48:26:2D:8F:E2:82:52:82:0B:F9:E3:90:3B:01:46:A5:48:A9
X509v3 Authority Key Identifier:
keyid:52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/36312e32382e3130382e302f32342d3234203d3e203137343930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.28.108.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:f9:74:99:29:24:03:3f:da:17:aa:6f:aa:54:f1:ba:9e:24:
b5:dc:ae:7a:db:34:c5:bc:fd:1a:d2:d2:d5:c8:66:64:c7:2c:
ab:cb:56:9c:c0:d2:17:f0:11:ac:34:f1:48:b4:b2:eb:f4:5c:
5f:45:57:04:30:36:1a:b1:29:10:c3:9f:fc:97:a9:ca:08:be:
91:6b:63:a4:c2:6d:86:16:7c:00:46:ef:d5:a7:27:d6:ab:90:
ed:73:fb:f7:52:9c:fe:53:c1:3f:12:13:96:24:e9:c0:a6:81:
96:d6:5d:8f:8b:bf:46:bd:9e:c2:d3:82:fc:de:d1:2b:94:a8:
ac:48:c8:90:25:68:35:3a:75:87:57:45:24:c2:15:8f:22:93:
7b:e4:b6:5d:6e:b5:53:66:13:4b:43:8d:02:60:84:93:a3:f6:
98:ef:77:5f:25:a9:c6:b4:08:e5:8d:cc:88:c6:a7:28:a3:8c:
a3:c5:24:d0:51:e7:d6:48:3d:35:6f:25:fa:08:50:d7:03:ed:
dc:50:99:13:83:a0:c3:bc:3e:24:ec:48:35:72:0e:97:e5:ef:
9d:42:49:46:fd:2c:81:28:d4:00:ca:b5:68:c2:e7:03:b2:c1:
d8:4b:3e:60:7d:ad:18:11:78:56:22:49:02:97:9b:16:7c:84:
79:f5:83:78
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUPXrMP3JGnLObxbRLoZ0I70QpsuEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTI1MzU2NUEyN0MwNkM4MDAwMDk2MzE0MDJGNUE2RUU4
NUM0NjQ1NjAeFw0yNjA1MTMwNTM1MzNaFw0yNzA1MTIwNTQwMzNaMDMxMTAvBgNV
BAMTKDgxMUU0ODI2MkQ4RkUyODI1MjgyMEJGOUUzOTAzQjAxNDZBNTQ4QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqADP4MZoyNAvC+jPUHUfcv433
YRwjkLzMpvUDaTd46K/LGxiYWrlw50dgBZifgGhgJQftdYNU2N4ZCHhAgwSUy5k+
xzB0P2uaor1EdEKEaY2As5zdY9xqLjcalzhwxGie9y21syU8VcvydGolD7Kw/y6g
+8dDtl3Af/amadNi+p7ZIh+EzPYnVcfUJvJ4on4meXkWieRPkTjlusaDsj2yf2av
Wy5wkviTeP05MGxWMmgZBttiQEy4ESDTF5esFRTsU6/yDwudcRBUezANgpd7cvj7
knYWmiNEIqTO8gyLoaSvF5HqJVulUdcpPJ/Y3WD8qNsikqoskiUJw5D352KfAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUgR5IJi2P4oJSggv545A7AUalSKkwHwYDVR0j
BBgwFoAUUlNWWifAbIAACWMUAvWm7oXEZFYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDg2NTI5NTI5NTY0MzY1MS8wLzUyNTM1NjVBMjdDMDZDODAwMDA5NjMxNDAyRjVB
NkVFODVDNDY0NTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTI1MzU2NUEyN0MwNkM4MDAwMDk2MzE0MDJGNUE2RUU4NUM0NjQ1Ni5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk0ODY1Mjk1Mjk1NjQzNjUxLzAvMzYzMTJlMzIzODJl
MzEzMDM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM0MzkzMC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAD0cbDANBgkqhkiG9w0BAQsFAAOCAQEAXvl0mSkkAz/aF6pvqlTxup4ktdyu
ets0xbz9GtLS1chmZMcsq8tWnMDSF/ARrDTxSLSy6/RcX0VXBDA2GrEpEMOf/Jep
ygi+kWtjpMJthhZ8AEbv1acn1quQ7XP791Kc/lPBPxITliTpwKaBltZdj4u/Rr2e
wtOC/N7RK5SorEjIkCVoNTp1h1dFJMIVjyKTe+S2XW61U2YTS0ONAmCEk6P2mO93
XyWpxrQI5Y3MiManKKOMo8Uk0FHn1kg9NW8l+ghQ1wPt3FCZE4Ogw7w+JOxINXIO
l+XvnUJJRv0sgSjUAMq1aMLnA7LB2Es+YH2tGBF4ViJJApebFnyEefWDeA==
-----END CERTIFICATE-----
Generated at Wed May 13 21:31:36 2026 by rpki-client