
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3136302e3230322e3232382e302f32322d3232203d3e20313436383137.roa
File: 3136302e3230322e3232382e302f32322d3232203d3e20313436383137.roa (raw, json)
Hash identifier: baMreLEdGVX6ri79ewAaCdw6UTk/Lxr43LKaoNSYACc=
Subject key identifier: F2:E9:06:A6:99:8A:14:3A:42:72:E7:5D:DA:C9:31:78:A8:96:40:49
Certificate issuer: /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial: 42FCB572D186B698B3871A571D242903CB14972E
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3136302e3230322e3232382e302f32322d3232203d3e20313436383137.roa
Signing time: Fri 08 May 2026 09:34:30 +0000
ROA not before: Fri 08 May 2026 09:29:30 +0000
ROA not after: Fri 07 May 2027 09:34:30 +0000
asID: 146817
IP address blocks: 160.202.228.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:fc:b5:72:d1:86:b6:98:b3:87:1a:57:1d:24:29:03:cb:14:97:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
Validity
Not Before: May 8 09:29:30 2026 GMT
Not After : May 7 09:34:30 2027 GMT
Subject: CN=F2E906A6998A143A4272E75DDAC93178A8964049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fa:63:df:e4:c0:6c:ed:7e:4f:8d:af:8c:b3:
20:09:55:1a:77:4b:73:76:b7:38:f5:e3:b9:c0:d0:
04:eb:65:fe:86:b0:e8:92:cf:85:0e:a1:bd:10:ee:
14:b5:bc:11:b5:44:11:39:70:4a:ba:05:f3:26:4a:
8d:47:c0:7a:1c:1d:88:d5:f1:d0:9e:79:03:4a:17:
05:e0:38:c4:a8:cd:ba:0d:45:db:d2:7d:0c:05:f2:
35:c7:d7:a5:9a:7a:5b:17:70:43:b1:ef:6f:32:f7:
62:0d:cf:d5:b6:ed:df:02:4d:7a:4a:5f:47:d9:ee:
43:7d:ab:88:6f:9f:45:a2:e1:46:92:e8:8a:b8:58:
50:04:0c:d2:33:78:c6:32:ca:3c:5a:8a:d6:71:2b:
74:db:c5:88:87:ee:2a:8c:a6:85:2d:b0:99:02:4d:
12:bb:40:5a:05:e0:2f:8c:f7:fe:15:14:86:29:ff:
05:e0:31:44:54:7a:0c:c8:c3:e8:58:e7:0f:dd:a5:
d5:a9:a8:5b:63:29:bf:95:b6:dd:74:6d:dd:51:71:
2b:2f:fa:1d:5d:18:dd:56:86:51:d8:eb:5d:45:16:
fc:90:2b:95:c0:aa:9a:96:95:7d:c5:e2:cd:3a:f5:
4d:f2:9c:7c:6b:2b:b5:05:de:7d:6f:f8:a6:a1:65:
7e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E9:06:A6:99:8A:14:3A:42:72:E7:5D:DA:C9:31:78:A8:96:40:49
X509v3 Authority Key Identifier:
keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3136302e3230322e3232382e302f32322d3232203d3e20313436383137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.202.228.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:45:70:49:73:a4:1c:e0:a4:f4:9f:7a:81:22:56:3b:90:cd:
da:d1:32:32:27:a1:a7:58:65:74:c3:a3:4c:cc:6f:b2:6a:a9:
6d:bf:34:ca:47:a2:cd:1a:3b:74:48:27:74:41:e3:5c:4b:a1:
4f:b8:c8:e0:e7:b4:ed:ce:37:47:d0:19:a4:fb:3c:a2:7f:e5:
19:41:01:5b:67:e6:cc:d5:b5:cb:b9:d1:44:81:42:df:75:f8:
cd:02:37:3c:79:c6:4d:58:1f:53:8d:80:69:b9:c2:7f:27:b5:
03:d5:f5:de:b8:b4:d0:7d:8d:a4:eb:da:a6:69:8d:52:44:55:
83:8f:f7:11:16:1c:a4:e1:56:a6:0d:12:f8:90:f7:c9:f6:d3:
40:5e:60:c0:d6:23:b9:12:4d:80:e6:34:0a:33:7d:cd:a6:46:
87:a3:7c:25:74:1a:75:64:fe:1e:00:99:ea:21:7a:f5:4a:10:
df:9f:72:e6:17:af:e6:f4:0d:e8:63:fd:e2:4d:2c:e9:e6:cc:
c7:a2:6f:82:75:e3:6d:08:4a:74:0f:50:28:7f:69:3d:4c:79:
1e:9d:42:6b:9d:da:15:a5:a9:f0:46:58:bf:9c:47:79:e4:d8:
c3:8c:01:4a:53:3b:6b:52:75:6d:04:b4:d8:78:95:3e:f7:3a:
24:68:c5:3c
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUQvy1ctGGtpizhxpXHSQpA8sUly4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1
RUJFMDM2MjAeFw0yNjA1MDgwOTI5MzBaFw0yNzA1MDcwOTM0MzBaMDMxMTAvBgNV
BAMTKEYyRTkwNkE2OTk4QTE0M0E0MjcyRTc1RERBQzkzMTc4QTg5NjQwNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS+mPf5MBs7X5Pja+MsyAJVRp3
S3N2tzj147nA0ATrZf6GsOiSz4UOob0Q7hS1vBG1RBE5cEq6BfMmSo1HwHocHYjV
8dCeeQNKFwXgOMSozboNRdvSfQwF8jXH16WaelsXcEOx728y92INz9W27d8CTXpK
X0fZ7kN9q4hvn0Wi4UaS6Iq4WFAEDNIzeMYyyjxaitZxK3TbxYiH7iqMpoUtsJkC
TRK7QFoF4C+M9/4VFIYp/wXgMURUegzIw+hY5w/dpdWpqFtjKb+Vtt10bd1RcSsv
+h1dGN1WhlHY611FFvyQK5XAqpqWlX3F4s069U3ynHxrK7UF3n1v+KahZX4TAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQU8ukGppmKFDpCcudd2skxeKiWQEkwHwYDVR0j
BBgwFoAUgl5cc7dVI2Pg+SJhrcY3WF6+A2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NTA1ODA3Mjk0MzkxOTExNy8wLzgyNUU1QzczQjc1NTIzNjNFMEY5MjI2MUFEQzYz
NzU4NUVCRTAzNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1RUJFMDM2Mi5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMTA1MDU4MDcyOTQzOTE5MTE3LzAvMzEzNjMwMmUz
MjMwMzIyZTMyMzIzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzQzNjM4MzEz
Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqDK5DANBgkqhkiG9w0BAQsFAAOCAQEAj0VwSXOkHOCk9J96
gSJWO5DN2tEyMiehp1hldMOjTMxvsmqpbb80ykeizRo7dEgndEHjXEuhT7jI4Oe0
7c43R9AZpPs8on/lGUEBW2fmzNW1y7nRRIFC33X4zQI3PHnGTVgfU42AabnCfye1
A9X13ri00H2NpOvapmmNUkRVg4/3ERYcpOFWpg0S+JD3yfbTQF5gwNYjuRJNgOY0
CjN9zaZGh6N8JXQadWT+HgCZ6iF69UoQ359y5hev5vQN6GP94k0s6ebMx6JvgnXj
bQhKdA9QKH9pPUx5Hp1Ca53aFaWp8EZYv5xHeeTYw4wBSlM7a1J1bQS02HiVPvc6
JGjFPA==
-----END CERTIFICATE-----
Generated at Wed May 13 20:55:14 2026 by rpki-client