
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3132352e3235342e3138342e302f32322d3232203d3e2039383038.roa
File: 3132352e3235342e3138342e302f32322d3232203d3e2039383038.roa (raw, json)
Hash identifier: NlDd9BCZI1vexAS9RN7hym8yGfxboK98UaNTFRfwRVg=
Subject key identifier: 1C:69:1D:D7:29:40:84:4A:DC:EE:E3:AE:08:EA:46:44:97:CA:6B:03
Certificate issuer: /CN=51110140697A5E791546E594A2208042F4C4C6DB
Certificate serial: 783003E1B6D3F2F74155C027ECC4C60AEC162739
Authority key identifier: 51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3132352e3235342e3138342e302f32322d3232203d3e2039383038.roa
Signing time: Mon 20 Apr 2026 07:28:08 +0000
ROA not before: Mon 20 Apr 2026 07:23:08 +0000
ROA not after: Mon 19 Apr 2027 07:28:08 +0000
asID: 9808
IP address blocks: 125.254.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl
rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:58:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:30:03:e1:b6:d3:f2:f7:41:55:c0:27:ec:c4:c6:0a:ec:16:27:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51110140697A5E791546E594A2208042F4C4C6DB
Validity
Not Before: Apr 20 07:23:08 2026 GMT
Not After : Apr 19 07:28:08 2027 GMT
Subject: CN=1C691DD72940844ADCEEE3AE08EA464497CA6B03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:67:18:e2:b6:ac:18:cb:b0:c8:c4:4d:d4:c9:
9a:e8:06:b4:d6:34:c6:64:ce:b3:cb:92:e2:4b:06:
a2:1a:dc:6a:cb:ef:9c:15:b5:b4:94:45:15:6c:bb:
c0:87:e2:04:c4:58:46:8a:e5:70:b7:d5:c1:ad:79:
78:6e:21:ef:5e:cb:96:42:24:ce:0d:48:36:75:26:
36:71:cc:bd:61:12:b7:21:8a:46:7a:0d:2e:bc:60:
48:df:39:e2:36:48:58:bc:8d:02:82:ff:0c:dd:1c:
45:9b:d4:64:02:85:64:32:e5:8d:cd:4c:1c:38:20:
52:87:a1:e6:75:dd:f8:a9:a3:f1:28:df:f6:89:95:
6d:65:cf:64:53:7b:c4:7c:82:32:55:ef:3b:91:d4:
76:a1:59:69:40:6b:44:33:83:df:7a:cc:46:e6:d9:
c6:59:1c:ca:70:e5:0c:5c:0e:68:dd:40:71:a8:4a:
ff:27:83:40:22:90:6f:ac:e6:0d:fb:4a:dc:5d:62:
3c:5c:14:b7:80:5d:6b:01:c1:cb:f9:ff:0f:f2:45:
f5:02:b7:e2:db:af:46:c0:8c:56:b3:63:09:63:11:
f4:ed:5a:9f:4b:d1:c3:4f:b4:6c:d1:5a:56:d0:be:
9e:72:3c:86:90:05:d4:3e:17:d4:4b:08:3d:2b:31:
7d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:69:1D:D7:29:40:84:4A:DC:EE:E3:AE:08:EA:46:44:97:CA:6B:03
X509v3 Authority Key Identifier:
keyid:51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3132352e3235342e3138342e302f32322d3232203d3e2039383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
125.254.184.0/22
Signature Algorithm: sha256WithRSAEncryption
28:f3:e0:95:bb:ff:cc:9b:68:e2:f5:08:70:00:5d:57:8c:0a:
45:df:b8:b2:ab:fb:31:a4:52:9d:2e:54:49:0f:4a:cb:0c:75:
83:9f:4e:bb:5e:d9:93:ff:ee:5a:14:49:79:f5:23:c0:2b:b9:
24:7b:05:dd:bd:c9:b8:f0:9d:90:66:d6:99:eb:33:16:3d:f3:
9f:b5:70:19:ca:74:08:70:9c:90:4d:df:d2:be:b6:05:9a:f6:
46:cb:c3:5f:08:0b:a3:21:ef:02:9f:b5:d3:88:21:dc:47:df:
81:8a:b5:b0:c6:d4:03:b5:4a:5a:ca:21:c1:80:71:b9:be:68:
8c:4b:a5:42:7e:bf:bc:89:de:e7:1e:b0:54:0a:3d:9c:4f:ed:
64:06:91:02:29:bc:01:14:ba:89:f2:c8:08:9f:91:f7:9b:b8:
fa:98:38:aa:8c:bc:89:f5:6a:30:e5:41:eb:5b:80:0d:2d:4e:
e4:e7:12:62:ec:60:82:81:52:53:7e:3b:f5:8a:5a:ed:10:74:
57:e7:b6:9d:8d:b7:0e:eb:02:19:3b:96:00:cf:42:2c:65:43:
94:47:0a:1f:da:e3:3e:69:c0:81:a8:bb:fd:a7:e1:7c:b4:11:
dc:16:3c:83:8a:36:a6:96:28:46:3a:1e:d6:95:d4:a9:51:4f:
11:90:c7:fb
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUeDAD4bbT8vdBVcAn7MTGCuwWJzkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTExMTAxNDA2OTdBNUU3OTE1NDZFNTk0QTIyMDgwNDJG
NEM0QzZEQjAeFw0yNjA0MjAwNzIzMDhaFw0yNzA0MTkwNzI4MDhaMDMxMTAvBgNV
BAMTKDFDNjkxREQ3Mjk0MDg0NEFEQ0VFRTNBRTA4RUE0NjQ0OTdDQTZCMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWZxjitqwYy7DIxE3UyZroBrTW
NMZkzrPLkuJLBqIa3GrL75wVtbSURRVsu8CH4gTEWEaK5XC31cGteXhuIe9ey5ZC
JM4NSDZ1JjZxzL1hErchikZ6DS68YEjfOeI2SFi8jQKC/wzdHEWb1GQChWQy5Y3N
TBw4IFKHoeZ13fipo/Eo3/aJlW1lz2RTe8R8gjJV7zuR1HahWWlAa0Qzg996zEbm
2cZZHMpw5QxcDmjdQHGoSv8ng0AikG+s5g37StxdYjxcFLeAXWsBwcv5/w/yRfUC
t+Lbr0bAjFazYwljEfTtWp9L0cNPtGzRWlbQvp5yPIaQBdQ+F9RLCD0rMX01AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUHGkd1ylAhErc7uOuCOpGRJfKawMwHwYDVR0j
BBgwFoAUUREBQGl6XnkVRuWUoiCAQvTExtswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
ODQ4OTI0NTU1MjYwNzIzNS8wLzUxMTEwMTQwNjk3QTVFNzkxNTQ2RTU5NEEyMjA4
MDQyRjRDNEM2REIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTExMTAxNDA2OTdBNUU3OTE1NDZFNTk0QTIyMDgwNDJGNEM0QzZEQi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5ODQ4OTI0NTU1MjYwNzIzNS8wLzMxMzIzNTJlMzIz
NTM0MmUzMTM4MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzOTM4MzAzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAn3+uDANBgkqhkiG9w0BAQsFAAOCAQEAKPPglbv/zJto4vUIcABdV4wK
Rd+4sqv7MaRSnS5USQ9Kywx1g59Ou17Zk//uWhRJefUjwCu5JHsF3b3JuPCdkGbW
meszFj3zn7VwGcp0CHCckE3f0r62BZr2RsvDXwgLoyHvAp+104gh3EffgYq1sMbU
A7VKWsohwYBxub5ojEulQn6/vIne5x6wVAo9nE/tZAaRAim8ARS6ifLICJ+R95u4
+pg4qoy8ifVqMOVB61uADS1O5OcSYuxggoFSU3479Ypa7RB0V+e2nY23DusCGTuW
AM9CLGVDlEcKH9rjPmnAgai7/afhfLQR3BY8g4o2ppYoRjoe1pXUqVFPEZDH+w==
-----END CERTIFICATE-----
Generated at Wed May 13 15:23:38 2026 by rpki-client