
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3139322e3134302e3138302e302f32322d3232203d3e20313436383137.roa
File: 3139322e3134302e3138302e302f32322d3232203d3e20313436383137.roa (raw, json)
Hash identifier: Sy+ckxZI6K4TLKp+vfCtIDN1zgeemHGV3AfNn3ZD4xc=
Subject key identifier: 64:FC:0E:53:B3:39:F9:75:32:6F:59:C5:D3:4C:11:FF:9C:48:B7:27
Certificate issuer: /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial: 50AAA1922AD4625140FF44189BCDAAA8ACD1500F
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3139322e3134302e3138302e302f32322d3232203d3e20313436383137.roa
Signing time: Fri 08 May 2026 09:47:16 +0000
ROA not before: Fri 08 May 2026 09:42:16 +0000
ROA not after: Fri 07 May 2027 09:47:16 +0000
asID: 146817
IP address blocks: 192.140.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:aa:a1:92:2a:d4:62:51:40:ff:44:18:9b:cd:aa:a8:ac:d1:50:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
Validity
Not Before: May 8 09:42:16 2026 GMT
Not After : May 7 09:47:16 2027 GMT
Subject: CN=64FC0E53B339F975326F59C5D34C11FF9C48B727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:65:6b:19:9f:33:b9:17:8f:37:f1:a9:b4:c9:
74:e6:be:38:c6:55:78:3f:77:d0:b0:77:20:56:f4:
9e:7b:70:1c:ad:63:cc:9b:59:ea:8d:51:bb:e4:32:
47:ca:26:fa:ff:46:75:6a:b4:95:23:96:2f:f9:9f:
05:23:36:63:77:bb:b8:80:d8:67:94:4f:28:a1:0c:
30:e3:9d:ec:ee:d8:99:b8:80:ef:f7:8c:b9:67:5d:
f5:5c:c4:70:f9:df:96:6e:3b:3d:b2:38:07:b2:7c:
f9:75:d2:94:63:51:70:65:b7:42:dc:eb:5a:bd:82:
83:09:7a:dd:99:da:98:36:49:9d:66:05:f5:99:41:
e8:b7:5a:ce:ce:02:ed:fb:1e:ea:f1:31:75:b6:34:
02:50:45:9c:2b:24:3c:b7:1c:2b:1a:5b:bf:a2:90:
eb:63:f9:ad:b0:84:b7:0a:8a:8c:d9:6e:ef:db:93:
f0:dd:64:f7:8c:60:18:af:b4:df:7c:c1:e8:56:0f:
84:39:14:d5:92:f5:ff:fb:ff:9e:38:08:db:bd:2b:
42:cd:21:88:00:44:6c:e2:35:9e:81:6d:85:a2:9f:
29:7c:06:81:68:82:c4:f8:73:cc:cf:84:89:d1:93:
56:a8:c1:49:6a:90:b9:e2:ae:73:39:ab:73:b0:fd:
f0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FC:0E:53:B3:39:F9:75:32:6F:59:C5:D3:4C:11:FF:9C:48:B7:27
X509v3 Authority Key Identifier:
keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3139322e3134302e3138302e302f32322d3232203d3e20313436383137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.140.180.0/22
Signature Algorithm: sha256WithRSAEncryption
ed:d5:dc:20:7b:6b:25:86:2d:a7:a2:0f:27:b5:49:67:17:e4:
7e:d0:04:1a:3c:d8:7a:07:93:e8:37:c2:17:53:55:33:fc:60:
ac:d4:6d:9c:76:7a:50:9e:12:3c:1a:22:6a:40:cd:c9:c1:87:
46:6d:a9:67:0e:1b:f3:a3:e7:ce:2b:85:e8:70:bc:33:80:01:
c6:9b:00:30:5d:21:1c:19:92:a1:4e:87:a2:26:e8:2b:38:74:
3c:39:ff:7c:c3:79:ac:64:9f:92:17:14:90:1e:2e:8a:87:88:
a2:9d:33:66:57:59:77:99:ef:8e:e7:52:4c:4f:1e:11:c0:d2:
21:f3:c1:95:1b:be:54:1e:02:21:4d:57:28:31:fc:dd:13:f8:
a5:a1:e1:5e:d2:a7:f6:bb:a7:69:dc:4e:4a:98:6f:91:e6:9d:
47:f2:71:a4:2c:2d:3c:05:61:58:4d:0d:dd:64:33:f5:ac:c7:
a8:63:27:d4:93:de:53:c2:5e:89:a2:b2:ba:bf:95:21:6f:e6:
fb:27:d6:1b:f1:9d:2a:2a:10:32:37:ca:1d:f5:22:80:62:58:
48:e4:83:8b:fc:8e:80:38:e9:8c:60:fe:4e:0b:63:35:8d:49:
0e:21:77:a3:6c:dc:5f:6c:b9:8b:d9:3e:52:72:f1:08:88:af:
18:88:ec:c8
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUUKqhkirUYlFA/0QYm82qqKzRUA8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1
RUJFMDM2MjAeFw0yNjA1MDgwOTQyMTZaFw0yNzA1MDcwOTQ3MTZaMDMxMTAvBgNV
BAMTKDY0RkMwRTUzQjMzOUY5NzUzMjZGNTlDNUQzNEMxMUZGOUM0OEI3MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPZWsZnzO5F4838am0yXTmvjjG
VXg/d9CwdyBW9J57cBytY8ybWeqNUbvkMkfKJvr/RnVqtJUjli/5nwUjNmN3u7iA
2GeUTyihDDDjnezu2Jm4gO/3jLlnXfVcxHD535ZuOz2yOAeyfPl10pRjUXBlt0Lc
61q9goMJet2Z2pg2SZ1mBfWZQei3Ws7OAu37HurxMXW2NAJQRZwrJDy3HCsaW7+i
kOtj+a2whLcKiozZbu/bk/DdZPeMYBivtN98wehWD4Q5FNWS9f/7/544CNu9K0LN
IYgARGziNZ6BbYWinyl8BoFogsT4c8zPhInRk1aowUlqkLnirnM5q3Ow/fDBAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUZPwOU7M5+XUyb1nF00wR/5xItycwHwYDVR0j
BBgwFoAUgl5cc7dVI2Pg+SJhrcY3WF6+A2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NTA1ODA3Mjk0MzkxOTExNy8wLzgyNUU1QzczQjc1NTIzNjNFMEY5MjI2MUFEQzYz
NzU4NUVCRTAzNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1RUJFMDM2Mi5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMTA1MDU4MDcyOTQzOTE5MTE3LzAvMzEzOTMyMmUz
MTM0MzAyZTMxMzgzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzQzNjM4MzEz
Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAsCMtDANBgkqhkiG9w0BAQsFAAOCAQEA7dXcIHtrJYYtp6IP
J7VJZxfkftAEGjzYegeT6DfCF1NVM/xgrNRtnHZ6UJ4SPBoiakDNycGHRm2pZw4b
86PnziuF6HC8M4ABxpsAMF0hHBmSoU6HoiboKzh0PDn/fMN5rGSfkhcUkB4uioeI
op0zZldZd5nvjudSTE8eEcDSIfPBlRu+VB4CIU1XKDH83RP4paHhXtKn9runadxO
SphvkeadR/JxpCwtPAVhWE0N3WQz9azHqGMn1JPeU8JeiaKyur+VIW/m+yfWG/Gd
KioQMjfKHfUigGJYSOSDi/yOgDjpjGD+TgtjNY1JDiF3o2zcX2y5i9k+UnLxCIiv
GIjsyA==
-----END CERTIFICATE-----
Generated at Wed May 13 20:55:13 2026 by rpki-client