
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094865295295643651/0/36312e32382e34392e302f32342d3234203d3e203137343930.roa
File: 36312e32382e34392e302f32342d3234203d3e203137343930.roa (raw, json)
Hash identifier: 1qAL1pYEAu0DoDcmCnnrMvVFEKrQOKExgEB4+TQvGO4=
Subject key identifier: BD:64:4E:54:6F:5A:49:91:54:D7:E5:94:55:D1:E1:C0:65:9A:41:43
Certificate issuer: /CN=5253565A27C06C800009631402F5A6EE85C46456
Certificate serial: 2451CE41DF8449E9BBF3A7F77216E54256AE630B
Authority key identifier: 52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/36312e32382e34392e302f32342d3234203d3e203137343930.roa
Signing time: Wed 13 May 2026 05:40:33 +0000
ROA not before: Wed 13 May 2026 05:35:33 +0000
ROA not after: Wed 12 May 2027 05:40:33 +0000
asID: 17490
IP address blocks: 61.28.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl
rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:51:ce:41:df:84:49:e9:bb:f3:a7:f7:72:16:e5:42:56:ae:63:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5253565A27C06C800009631402F5A6EE85C46456
Validity
Not Before: May 13 05:35:33 2026 GMT
Not After : May 12 05:40:33 2027 GMT
Subject: CN=BD644E546F5A499154D7E59455D1E1C0659A4143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:b1:52:b8:07:f1:16:1e:66:94:6a:85:5d:
db:02:ac:f0:b6:b1:30:b7:60:d3:eb:c4:51:30:4d:
49:b1:ee:4b:9e:53:c9:51:88:1e:bc:f1:4a:f9:52:
d3:29:7e:77:77:a2:0c:8d:13:e8:40:ff:5a:cc:7e:
48:a4:23:86:8a:2b:dd:30:33:bb:01:82:04:3e:c3:
14:1a:eb:bf:73:57:a4:bf:91:4d:b1:c1:9d:46:da:
f0:70:21:96:1e:e4:52:f3:e5:8a:41:42:27:25:ab:
7c:c7:86:08:c0:c9:d0:d2:cd:4e:ae:a1:b5:71:bf:
ae:f1:b2:81:11:49:de:bc:11:77:18:df:77:8b:dc:
38:cc:1f:19:3a:56:e0:15:40:8e:4f:65:f0:1c:93:
d8:25:6f:b8:57:6e:29:a3:a0:72:17:06:37:47:5e:
b6:fb:99:16:c3:d6:c7:af:b4:55:69:f0:29:ad:74:
8d:81:da:b3:78:d5:ab:91:b0:22:9e:22:d0:e2:72:
15:69:0a:5e:f2:93:57:10:26:f3:ed:a2:85:01:58:
40:de:54:21:55:2e:28:4b:da:6a:c3:18:84:89:28:
8a:dd:7c:7a:a3:ad:74:e4:fd:22:cd:1f:f2:22:76:
0e:1a:ef:6c:6a:e0:8c:4a:31:75:ae:29:95:fa:7b:
15:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:64:4E:54:6F:5A:49:91:54:D7:E5:94:55:D1:E1:C0:65:9A:41:43
X509v3 Authority Key Identifier:
keyid:52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/36312e32382e34392e302f32342d3234203d3e203137343930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.28.49.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:3f:ed:e5:e9:25:1e:76:08:e9:15:0d:c3:df:34:85:ec:4d:
20:55:86:59:6b:03:ac:71:c7:77:b6:e9:1c:a0:81:ad:a0:8d:
77:63:36:98:77:ac:4f:e4:75:2c:ef:f0:5c:40:25:45:c7:74:
cb:69:bb:a2:b1:d8:30:d1:e2:f6:38:6d:03:f8:61:e6:59:8b:
30:a8:51:9a:77:3a:24:0b:c7:9d:62:d9:2a:1f:d0:0e:82:0d:
a2:61:0b:39:5a:c1:e2:72:d6:2f:81:c3:93:b8:4f:09:33:26:
51:83:92:1b:33:1d:30:6d:46:a7:1b:d9:40:b1:e7:00:5c:04:
1f:d2:72:ad:15:58:5d:0e:a6:2f:a4:a6:98:98:38:8a:b0:22:
4d:89:e7:25:53:d4:65:9f:44:14:8f:db:5a:21:67:15:2d:e6:
23:6e:e9:d4:3c:f6:a0:6d:9f:98:db:99:17:91:d5:67:eb:77:
d0:65:ee:b0:11:99:a1:40:3c:5a:0b:e6:b5:99:06:be:1d:41:
f7:64:ec:d5:e5:ba:94:a0:5d:fd:3a:98:19:a7:86:82:2a:db:
02:1b:95:67:1d:6a:04:1a:cc:0b:9f:fe:d9:e8:e6:8f:db:0a:
7c:7e:b0:a1:bb:14:3d:35:f0:87:0e:92:f1:87:48:e7:e7:26:
d6:92:14:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:31:24 2026 by rpki-client