
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3231302e31362e3136302e302f32302d3230203d3e20313436383137.roa
File: 3231302e31362e3136302e302f32302d3230203d3e20313436383137.roa (raw, json)
Hash identifier: 8+3dAiRgnHBBJ1Kegfz7Zue4l+3bo83MAmFrEtOa5Xg=
Subject key identifier: D8:75:EE:CC:81:A6:B5:4F:17:22:6C:20:FA:14:01:1C:8B:1C:84:B7
Certificate issuer: /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial: 0B515E20D7CA0534A2B56C16EFBE7C29066A1B6C
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3231302e31362e3136302e302f32302d3230203d3e20313436383137.roa
Signing time: Fri 08 May 2026 09:47:16 +0000
ROA not before: Fri 08 May 2026 09:42:16 +0000
ROA not after: Fri 07 May 2027 09:47:16 +0000
asID: 146817
IP address blocks: 210.16.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:51:5e:20:d7:ca:05:34:a2:b5:6c:16:ef:be:7c:29:06:6a:1b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
Validity
Not Before: May 8 09:42:16 2026 GMT
Not After : May 7 09:47:16 2027 GMT
Subject: CN=D875EECC81A6B54F17226C20FA14011C8B1C84B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4f:ed:70:bf:f7:bd:0b:79:ea:67:a8:b3:08:
47:c7:81:f4:39:4b:43:81:0d:fe:74:b6:8a:f7:38:
ad:1a:75:4f:69:18:df:f0:5b:d9:96:0a:e2:6d:5a:
ed:92:9c:98:16:bc:15:52:f6:26:38:3c:10:c4:da:
b7:2f:d8:da:eb:48:a1:e2:0a:bd:d9:ae:81:46:bc:
e4:21:ae:58:14:a5:de:38:1d:bd:b8:87:e8:c6:54:
02:09:10:8d:30:31:f1:74:d4:0d:64:45:1e:6b:c7:
7b:1a:e9:6e:5e:fa:89:65:ee:b6:43:10:00:18:9d:
57:31:80:b8:57:5d:3a:74:f7:eb:13:08:06:c4:64:
24:ca:0d:7e:fb:77:f3:fa:65:0b:b1:4c:92:31:d0:
0d:77:85:13:28:0c:c5:93:0c:39:34:fa:59:c5:69:
5a:16:5d:3d:08:89:31:e4:f0:c7:09:c2:a0:20:e0:
9f:29:da:86:48:a0:be:a5:c9:e5:5d:c7:da:8e:c8:
50:31:6b:50:e4:97:3a:ae:4a:3a:56:6a:72:23:b5:
12:c1:56:8c:b6:65:6a:29:ca:5e:1a:6f:9f:f6:d9:
bf:27:55:82:52:8b:36:53:81:e4:55:7c:bc:d5:00:
e8:22:88:ee:db:f8:56:15:1e:aa:45:d1:59:f6:41:
00:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:75:EE:CC:81:A6:B5:4F:17:22:6C:20:FA:14:01:1C:8B:1C:84:B7
X509v3 Authority Key Identifier:
keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3231302e31362e3136302e302f32302d3230203d3e20313436383137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.16.160.0/20
Signature Algorithm: sha256WithRSAEncryption
5b:db:0c:ca:ed:8b:0a:37:62:df:b7:fc:6a:c5:4c:87:25:69:
71:76:f4:0f:c7:96:10:ae:17:30:31:11:b9:6c:49:16:c5:1a:
0f:02:62:66:16:53:e2:ad:be:89:14:b3:0f:fb:14:c3:f0:5d:
2e:00:60:90:ed:ca:d7:00:b8:c8:f7:36:8d:be:45:ae:bf:a2:
b7:69:27:2d:74:c3:dc:d5:03:22:a2:55:43:84:79:f3:e2:2f:
0e:4e:14:0d:e4:aa:64:a3:af:7b:36:7f:b1:c2:96:3a:4b:19:
be:f2:6a:3c:df:76:41:5e:20:f1:42:57:d4:8b:ea:3a:05:b3:
93:da:8c:66:cc:7b:bc:df:1b:e0:1a:2c:28:2e:58:90:c3:3e:
ff:c3:39:c4:e7:e3:c2:ec:f7:ef:49:37:95:fd:2d:4f:d2:5d:
69:a8:f9:43:d8:ff:0e:44:8b:70:33:c9:73:dd:0e:1d:5f:30:
2c:04:65:b0:03:63:40:1d:42:c1:71:2d:fc:bd:0c:c5:80:65:
96:6d:57:e5:df:ff:41:64:5c:6f:c5:96:af:9d:2d:59:23:43:
2a:e8:ab:54:80:f8:cf:a6:90:b4:95:60:6f:92:3a:42:f3:6f:
2f:c0:05:f1:45:11:30:49:27:96:e6:ff:5a:44:14:08:1a:ed:
60:49:12:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:28 2026 by rpki-client