
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3132352e3235342e3136302e302f32312d3231203d3e2039383038.roa
File: 3132352e3235342e3136302e302f32312d3231203d3e2039383038.roa (raw, json)
Hash identifier: AcV4NAuhquGQiXzXHhe6PxT9YUwoosZYwjCzDNKqliI=
Subject key identifier: 70:05:D0:DB:56:6A:5E:F0:18:76:E7:8D:BB:CD:19:F0:ED:67:6D:EB
Certificate issuer: /CN=51110140697A5E791546E594A2208042F4C4C6DB
Certificate serial: 6412DCC16EC5FC30674D150573DA2FDDB1110950
Authority key identifier: 51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3132352e3235342e3136302e302f32312d3231203d3e2039383038.roa
Signing time: Mon 20 Apr 2026 07:26:38 +0000
ROA not before: Mon 20 Apr 2026 07:21:38 +0000
ROA not after: Mon 19 Apr 2027 07:26:38 +0000
asID: 9808
IP address blocks: 125.254.160.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl
rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:58:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:12:dc:c1:6e:c5:fc:30:67:4d:15:05:73:da:2f:dd:b1:11:09:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51110140697A5E791546E594A2208042F4C4C6DB
Validity
Not Before: Apr 20 07:21:38 2026 GMT
Not After : Apr 19 07:26:38 2027 GMT
Subject: CN=7005D0DB566A5EF01876E78DBBCD19F0ED676DEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d8:81:4f:c8:da:b9:a4:f3:74:40:61:14:73:
40:b5:4c:36:3c:0e:79:f8:80:21:f6:ca:94:20:2a:
3b:74:77:d8:44:db:e3:03:a4:fa:f8:64:81:7f:b8:
0f:0c:97:c6:3b:48:97:e4:ee:ac:04:62:b6:09:95:
8d:a9:05:7a:d3:d9:e8:1b:84:91:45:64:fc:c3:d7:
da:37:cc:b8:2b:4d:ca:b7:54:43:76:a1:f7:7f:6f:
8d:18:80:ac:89:e5:72:98:cb:d7:ad:96:9d:b5:85:
4c:f2:c6:ea:fd:13:98:6b:a8:71:1d:04:a2:a9:72:
e1:bf:1b:46:5b:9b:63:2e:df:f3:c1:b0:75:d9:e2:
69:d2:1b:7d:99:94:11:93:3b:b3:4e:d8:08:42:c5:
3f:5f:d4:d8:15:cf:ff:39:9f:b6:d4:30:f4:2f:6b:
05:6b:08:05:93:d4:83:06:3c:32:ac:76:8e:65:a1:
43:fd:bc:04:98:87:22:fb:4d:0c:da:d5:33:73:b4:
3b:45:f0:31:de:64:87:a8:0d:91:7b:85:01:9f:93:
73:a0:f9:b1:8c:8a:a2:9b:32:10:5f:84:2f:f2:29:
6b:57:40:11:d9:8a:a0:43:16:1f:b7:b9:b1:0f:e6:
0a:04:b5:12:ce:d8:b5:df:95:46:95:dc:51:ff:59:
6d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:05:D0:DB:56:6A:5E:F0:18:76:E7:8D:BB:CD:19:F0:ED:67:6D:EB
X509v3 Authority Key Identifier:
keyid:51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3132352e3235342e3136302e302f32312d3231203d3e2039383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
125.254.160.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:f5:8e:2b:a8:14:ce:bd:cd:65:5e:e4:cd:66:3b:f7:be:a2:
4d:0d:5a:cd:cc:1a:49:64:34:bd:87:f1:87:a7:7d:78:e9:81:
76:77:e3:18:6a:74:ab:ea:f8:9c:be:0a:57:33:ba:f1:23:48:
89:be:e7:72:d8:57:7f:1e:a9:9c:be:65:3a:ff:d2:35:97:d7:
98:d7:09:cf:49:a7:61:e0:86:2b:9d:f0:1d:d1:83:13:f5:f0:
95:d4:61:60:c2:00:bd:26:98:3e:bb:49:b6:6f:f6:cb:c6:8d:
c7:f8:bd:c1:4f:8f:98:b0:9e:87:70:96:64:cd:85:ef:1b:63:
d6:3d:50:72:14:81:9d:0f:72:11:b5:ed:0a:d8:92:78:0b:f1:
b4:ca:a8:4a:36:ab:b4:9a:95:50:5b:19:b0:dd:53:f3:d6:17:
25:7f:cb:bd:4f:bc:a3:c0:cd:dd:4c:64:aa:35:4f:a1:f4:14:
7f:0c:f2:d4:c5:42:09:c2:eb:83:2e:4f:5a:9b:33:ad:9e:c7:
1e:a0:ef:7f:b8:01:a2:ba:4a:92:55:17:38:7a:d8:5c:04:b0:
c3:2f:87:39:63:7a:a2:27:4b:b8:52:96:bd:9d:62:1d:19:98:
3d:c4:a7:ee:87:f2:ef:b0:a1:e6:3d:e0:42:5f:1b:8f:1b:d5:
b8:16:f4:ce
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 15:03:48 2026 by rpki-client