
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101689704551546887/0/3231302e37352e3139322e302f31392d3139203d3e203138323339.roa
File: 3231302e37352e3139322e302f31392d3139203d3e203138323339.roa (raw, json)
Hash identifier: 027EUoyERWAO9UGugZNEma8D4f9DTdiu6kJNHKsmx4Y=
Subject key identifier: 59:82:DF:E4:DA:6E:28:23:2B:1A:6D:0B:B6:9F:FA:F8:39:93:C6:7A
Certificate issuer: /CN=95B08F18D0CF8E4AFAD49A08A907521317F19024
Certificate serial: 025448EF71EFEB0DA6AB64374970C8E9A1F5A670
Authority key identifier: 95:B0:8F:18:D0:CF:8E:4A:FA:D4:9A:08:A9:07:52:13:17:F1:90:24
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/3231302e37352e3139322e302f31392d3139203d3e203138323339.roa
Signing time: Wed 29 Apr 2026 02:07:54 +0000
ROA not before: Wed 29 Apr 2026 02:02:54 +0000
ROA not after: Wed 28 Apr 2027 02:07:54 +0000
asID: 18239
IP address blocks: 210.75.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.crl
rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:54:48:ef:71:ef:eb:0d:a6:ab:64:37:49:70:c8:e9:a1:f5:a6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95B08F18D0CF8E4AFAD49A08A907521317F19024
Validity
Not Before: Apr 29 02:02:54 2026 GMT
Not After : Apr 28 02:07:54 2027 GMT
Subject: CN=5982DFE4DA6E28232B1A6D0BB69FFAF83993C67A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d2:44:ba:c6:ec:0c:68:37:a2:56:7a:bf:58:
31:59:b4:0d:4e:55:ac:52:02:c0:8a:ce:d6:94:ac:
94:4c:4d:8e:24:4c:1a:5b:75:5b:44:14:86:0c:9c:
e4:26:3d:5e:21:2c:40:a8:77:bc:eb:e0:9a:59:51:
cf:33:68:44:1a:aa:20:ab:6c:c7:6b:25:da:b4:a8:
29:e1:a1:c3:4f:f1:e8:d1:1a:d7:a7:d1:58:25:f2:
e9:8b:d3:bf:d2:81:cc:ab:d9:c4:3a:88:35:6d:f4:
4d:30:15:5b:3c:56:99:48:95:a3:32:6d:ed:8e:07:
69:1a:9e:9a:8b:a7:ba:b6:fe:84:60:1c:91:c3:7c:
69:be:5a:6d:98:bc:c8:05:f3:d6:5f:e3:3d:5f:e5:
a2:ae:60:ef:a4:99:f4:d7:a0:86:03:c6:91:19:99:
e3:26:27:f2:88:59:91:cb:7d:75:8d:40:5f:ad:24:
15:b7:c8:0c:c9:d9:07:df:14:d2:a5:ef:58:2b:67:
6b:4d:18:d1:a8:2c:65:1d:f1:0b:3f:5b:33:88:43:
3e:43:0e:69:35:f4:f8:da:4b:03:1a:fd:f9:e6:18:
1b:9e:67:53:d6:78:07:7b:42:9a:33:95:58:c3:7d:
38:73:77:31:f6:42:04:1c:ee:fb:ff:1e:c5:1b:14:
45:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:82:DF:E4:DA:6E:28:23:2B:1A:6D:0B:B6:9F:FA:F8:39:93:C6:7A
X509v3 Authority Key Identifier:
keyid:95:B0:8F:18:D0:CF:8E:4A:FA:D4:9A:08:A9:07:52:13:17:F1:90:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/3231302e37352e3139322e302f31392d3139203d3e203138323339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.75.192.0/19
Signature Algorithm: sha256WithRSAEncryption
4f:ce:39:1c:e8:6f:b4:40:fe:ff:17:02:d8:44:54:1e:59:8e:
01:f2:45:20:da:f6:8e:e3:47:2f:02:5e:1e:da:6a:fb:d1:09:
7b:03:51:01:a4:90:7a:67:18:53:23:98:bf:9e:89:a4:64:d4:
7b:3c:f5:9f:c6:f0:96:c0:60:f6:ea:d5:08:11:bc:3c:55:02:
4a:60:f3:9d:26:0b:fa:18:5d:9c:75:6d:79:f8:79:09:89:0f:
7e:49:22:9f:71:d2:5c:cb:5a:11:43:32:98:c3:0c:cd:ae:33:
d7:fe:e6:12:87:77:c8:ec:93:c1:26:63:a3:a4:c0:ae:dd:96:
67:2f:7c:8c:a4:7d:7b:da:61:61:67:e0:b3:d8:02:20:8b:d0:
05:00:1a:a2:1d:a2:7c:16:16:62:a2:e2:9a:9c:8b:81:e6:00:
74:8b:0c:9f:cd:ae:37:58:cf:18:b6:17:9a:cb:ef:5d:9d:3a:
21:eb:01:4e:33:60:00:cc:e4:2e:c3:8a:be:73:b8:c5:c9:2a:
40:03:7e:a0:ec:b8:22:3e:63:8c:27:98:43:28:2c:1f:52:39:
d5:cb:0f:e7:e5:88:a7:c3:a2:41:db:48:72:24:54:98:d3:db:
dc:4c:e2:69:e6:0a:8f:0c:ff:76:4c:2d:e1:eb:60:78:86:30:
be:49:9f:a9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 21:31:33 2026 by rpki-client