
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3136302e3230322e3234382e302f32322d3232203d3e20313436383137.roa
File: 3136302e3230322e3234382e302f32322d3232203d3e20313436383137.roa (raw, json)
Hash identifier: dzmB1qmj5BdGzTWl9wetqNGMLAujwTq2qrjlNDgL+PQ=
Subject key identifier: A9:09:1D:36:B4:E4:D0:B6:52:2B:F1:79:26:A7:E7:24:22:1C:CC:9C
Certificate issuer: /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial: 6D92416415B34A608D12DFA8D82F44D75D8F00E4
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3136302e3230322e3234382e302f32322d3232203d3e20313436383137.roa
Signing time: Fri 08 May 2026 09:47:16 +0000
ROA not before: Fri 08 May 2026 09:42:16 +0000
ROA not after: Fri 07 May 2027 09:47:16 +0000
asID: 146817
IP address blocks: 160.202.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:92:41:64:15:b3:4a:60:8d:12:df:a8:d8:2f:44:d7:5d:8f:00:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
Validity
Not Before: May 8 09:42:16 2026 GMT
Not After : May 7 09:47:16 2027 GMT
Subject: CN=A9091D36B4E4D0B6522BF17926A7E724221CCC9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:04:78:6f:56:e4:41:8b:fc:73:43:a4:3f:99:
5e:b5:e8:25:12:54:11:f3:42:58:47:72:ce:3f:6b:
70:be:d6:b1:9e:e1:fe:f4:63:29:b5:b6:11:40:0f:
cd:79:5c:01:bf:b5:c9:52:a3:22:ce:63:0a:e0:59:
78:60:e0:a0:06:d7:28:ef:45:15:5e:1e:5d:15:2d:
ab:6e:65:37:41:e0:8f:49:9b:3a:f9:b9:6f:66:dc:
de:f9:63:3b:b9:d3:01:05:83:0a:c3:1e:bd:3a:3f:
16:be:cd:0d:3c:1f:fe:21:eb:42:40:f5:b3:0b:06:
ca:4f:90:60:ec:48:6d:7a:82:65:6c:85:73:b6:e0:
96:d5:46:24:44:2f:f0:2f:18:79:83:13:a0:20:98:
29:6f:30:71:d6:67:16:b1:68:a3:80:e3:c3:5c:01:
31:b8:05:ee:f9:e9:af:ed:40:96:30:0c:56:a3:55:
ae:39:b9:7a:1e:a1:c6:a5:69:93:8c:9a:40:71:8d:
ca:65:50:0f:6d:02:6b:4a:20:99:62:25:45:45:a5:
41:f0:1a:76:af:48:7e:67:66:68:21:f3:6d:a2:12:
31:e4:75:39:59:04:cd:05:33:95:bc:9b:0f:a9:5b:
91:3a:1d:76:47:18:3f:af:2e:21:8d:5c:b7:71:08:
e6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:09:1D:36:B4:E4:D0:B6:52:2B:F1:79:26:A7:E7:24:22:1C:CC:9C
X509v3 Authority Key Identifier:
keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3136302e3230322e3234382e302f32322d3232203d3e20313436383137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.202.248.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:80:15:65:5e:22:b1:1f:76:72:56:2e:37:17:5e:e8:62:98:
ab:6a:55:59:f9:52:9e:ed:db:a8:95:70:87:50:39:91:cb:1d:
a1:ac:da:a5:7c:67:c8:b1:1d:f1:05:37:20:f1:5b:30:95:35:
b8:53:0a:7e:37:5f:cb:ea:47:a7:08:7f:59:1a:0c:f1:cc:1d:
cd:fe:7f:7c:6c:e3:41:a3:78:ed:ff:48:14:55:ce:36:05:1f:
8f:c1:3f:3e:2d:d0:e1:f6:2f:b4:1a:86:44:4a:40:b0:41:7a:
4e:d2:c1:5e:ad:4f:2d:48:78:5a:dd:20:93:8d:06:9f:43:67:
ba:61:cd:e8:1c:a1:40:6c:ac:9b:6d:05:29:77:22:aa:0c:6b:
c3:c9:3a:2a:5b:81:5d:63:80:32:20:d3:7b:f6:20:75:eb:fa:
17:4a:dd:c4:3a:92:74:8b:13:e1:b3:32:7a:89:63:3c:b7:d9:
fe:ea:06:0a:17:d1:06:fa:11:31:20:94:e0:0b:26:ca:5b:6d:
9f:82:5a:11:75:38:a9:da:1a:e7:d2:9f:e8:1d:ce:56:d4:c6:
5e:20:9c:2d:7c:f6:7a:1b:67:fb:e1:15:98:8d:9b:39:1e:72:
ad:fe:18:1a:4f:be:38:b4:ed:bb:1a:d3:95:e4:d3:60:c6:3c:
a4:a6:29:17
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUbZJBZBWzSmCNEt+o2C9E112PAOQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1
RUJFMDM2MjAeFw0yNjA1MDgwOTQyMTZaFw0yNzA1MDcwOTQ3MTZaMDMxMTAvBgNV
BAMTKEE5MDkxRDM2QjRFNEQwQjY1MjJCRjE3OTI2QTdFNzI0MjIxQ0NDOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLBHhvVuRBi/xzQ6Q/mV616CUS
VBHzQlhHcs4/a3C+1rGe4f70Yym1thFAD815XAG/tclSoyLOYwrgWXhg4KAG1yjv
RRVeHl0VLatuZTdB4I9Jmzr5uW9m3N75Yzu50wEFgwrDHr06Pxa+zQ08H/4h60JA
9bMLBspPkGDsSG16gmVshXO24JbVRiREL/AvGHmDE6AgmClvMHHWZxaxaKOA48Nc
ATG4Be756a/tQJYwDFajVa45uXoeocalaZOMmkBxjcplUA9tAmtKIJliJUVFpUHw
GnavSH5nZmgh822iEjHkdTlZBM0FM5W8mw+pW5E6HXZHGD+vLiGNXLdxCOZPAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUqQkdNrTk0LZSK/F5JqfnJCIczJwwHwYDVR0j
BBgwFoAUgl5cc7dVI2Pg+SJhrcY3WF6+A2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NTA1ODA3Mjk0MzkxOTExNy8wLzgyNUU1QzczQjc1NTIzNjNFMEY5MjI2MUFEQzYz
NzU4NUVCRTAzNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1RUJFMDM2Mi5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMTA1MDU4MDcyOTQzOTE5MTE3LzAvMzEzNjMwMmUz
MjMwMzIyZTMyMzQzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzQzNjM4MzEz
Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqDK+DANBgkqhkiG9w0BAQsFAAOCAQEAq4AVZV4isR92clYu
Nxde6GKYq2pVWflSnu3bqJVwh1A5kcsdoazapXxnyLEd8QU3IPFbMJU1uFMKfjdf
y+pHpwh/WRoM8cwdzf5/fGzjQaN47f9IFFXONgUfj8E/Pi3Q4fYvtBqGREpAsEF6
TtLBXq1PLUh4Wt0gk40Gn0NnumHN6ByhQGysm20FKXciqgxrw8k6KluBXWOAMiDT
e/Ygdev6F0rdxDqSdIsT4bMyeoljPLfZ/uoGChfRBvoRMSCU4Asmylttn4JaEXU4
qdoa59Kf6B3OVtTGXiCcLXz2ehtn++EVmI2bOR5yrf4YGk++OLTtuxrTleTTYMY8
pKYpFw==
-----END CERTIFICATE-----
Generated at Wed May 13 20:55:38 2026 by rpki-client