
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3136302e3230322e3233322e302f32322d3232203d3e20313436383137.roa
File: 3136302e3230322e3233322e302f32322d3232203d3e20313436383137.roa (raw, json)
Hash identifier: Ev1AtazUd17GbcSSVxbDwjjW8LG1JlOSCb0kjyNkgGk=
Subject key identifier: BE:65:F6:3A:FE:73:80:54:A3:74:92:6C:F5:25:2A:10:25:0B:98:3E
Certificate issuer: /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial: 0F042C06B00D34CD7BF93C7F5E5C6A9B394BC33C
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3136302e3230322e3233322e302f32322d3232203d3e20313436383137.roa
Signing time: Fri 08 May 2026 09:34:29 +0000
ROA not before: Fri 08 May 2026 09:29:29 +0000
ROA not after: Fri 07 May 2027 09:34:29 +0000
asID: 146817
IP address blocks: 160.202.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:04:2c:06:b0:0d:34:cd:7b:f9:3c:7f:5e:5c:6a:9b:39:4b:c3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
Validity
Not Before: May 8 09:29:29 2026 GMT
Not After : May 7 09:34:29 2027 GMT
Subject: CN=BE65F63AFE738054A374926CF5252A10250B983E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:77:d5:aa:db:d8:ba:98:99:11:cc:a8:36:f1:
67:76:eb:2e:5f:19:64:af:aa:37:7c:79:fb:d8:df:
cf:0c:40:b9:57:62:85:e4:60:42:0d:1b:6d:fb:6e:
ee:e1:29:1f:c1:f9:9c:8e:1d:ab:14:55:f7:6f:53:
a2:ec:2b:5b:43:bb:2d:a5:8b:38:a9:45:14:fa:17:
a8:eb:09:76:cb:ba:6c:72:d7:2b:6f:84:78:0f:7a:
90:9a:d1:25:31:74:2a:ad:b4:4e:86:5d:51:80:65:
f1:c1:85:77:36:4c:da:5d:63:a7:53:f0:b8:69:40:
c9:20:bb:e8:46:11:7c:e6:7d:65:46:37:75:3d:51:
22:8e:4e:9e:d9:ca:86:8c:a1:02:2b:6f:23:f6:c5:
21:c1:1e:68:e6:c7:bf:4b:6c:71:f6:73:b5:23:79:
ca:da:b5:ea:a4:85:73:ce:14:b7:74:29:45:21:a8:
60:db:68:de:21:a3:84:c8:12:93:64:9b:f3:d8:ac:
91:32:c9:9f:1d:34:81:71:02:a9:ff:65:f1:e0:cb:
c5:d4:43:30:d6:08:dc:ff:64:fa:5f:09:98:5d:c1:
91:8c:6e:87:10:70:b5:94:a0:a4:e5:af:b6:42:bb:
60:43:5e:1e:22:56:f0:90:41:e2:b2:f6:6e:3b:ea:
68:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:65:F6:3A:FE:73:80:54:A3:74:92:6C:F5:25:2A:10:25:0B:98:3E
X509v3 Authority Key Identifier:
keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3136302e3230322e3233322e302f32322d3232203d3e20313436383137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.202.232.0/22
Signature Algorithm: sha256WithRSAEncryption
49:53:3a:84:9e:e5:0c:66:9e:12:b4:34:e4:67:98:41:7c:97:
c6:7a:56:3f:3e:48:43:e9:dc:ba:2e:19:7b:aa:d3:30:26:ac:
e0:f9:29:f8:21:e3:ed:33:7d:ae:5f:e1:5f:42:bd:58:59:4a:
0e:5f:76:69:d3:1c:a9:52:8b:f6:f0:41:86:ba:e0:c8:50:d0:
79:7a:eb:cc:99:6f:81:9a:52:68:2d:13:5e:c3:53:03:0e:65:
84:02:a0:a9:23:c0:0c:18:b9:96:22:a3:fe:47:00:b8:0f:93:
ed:ce:18:e8:6b:26:ca:8e:26:72:9a:a8:95:77:aa:51:e4:1c:
16:39:0a:47:7d:e7:ae:4e:68:0d:9c:6f:e8:e6:92:60:b1:59:
4e:0c:a2:4c:c8:66:01:91:56:62:1c:1b:b5:60:ab:bb:73:94:
e5:61:91:7f:18:f6:12:13:1b:7a:63:6b:33:47:f8:3d:f1:95:
3d:e0:b4:08:eb:75:03:31:2f:ea:6e:10:51:4b:51:0f:0c:40:
e9:c7:28:7a:cf:70:f0:d6:55:6d:14:b8:ac:27:e6:65:2e:f8:
26:06:9f:b8:73:a1:0d:f2:82:23:02:ca:33:73:56:28:77:77:
a0:73:ac:5b:cc:49:54:66:46:e6:af:9c:f0:37:b2:b5:42:47:
65:07:e0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:15 2026 by rpki-client