
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3231302e31362e3138322e302f32342d3234203d3e20313436383137.roa
File: 3231302e31362e3138322e302f32342d3234203d3e20313436383137.roa (raw, json)
Hash identifier: lES7YRBzAI64/el0kli5agp2bouKSt4o0WpSofi9bsE=
Subject key identifier: 6F:46:E7:D4:8E:9D:C4:FF:AF:5D:E4:1F:8B:C3:66:58:BD:06:FE:ED
Certificate issuer: /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial: 3F7446FD193B6D6F5341E21C54EC08D39D0B9021
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3231302e31362e3138322e302f32342d3234203d3e20313436383137.roa
Signing time: Fri 08 May 2026 09:41:54 +0000
ROA not before: Fri 08 May 2026 09:36:54 +0000
ROA not after: Fri 07 May 2027 09:41:54 +0000
asID: 146817
IP address blocks: 210.16.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:74:46:fd:19:3b:6d:6f:53:41:e2:1c:54:ec:08:d3:9d:0b:90:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
Validity
Not Before: May 8 09:36:54 2026 GMT
Not After : May 7 09:41:54 2027 GMT
Subject: CN=6F46E7D48E9DC4FFAF5DE41F8BC36658BD06FEED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:41:45:35:10:b4:db:03:7c:99:bd:0f:5c:5c:
c4:a3:7c:7f:ff:4d:71:42:51:f7:4e:85:35:ba:75:
af:a8:a9:ee:f6:4f:cc:24:6f:c9:f4:4c:77:65:d7:
c1:58:fe:28:62:06:b8:14:ca:bc:60:de:99:11:68:
62:20:96:ae:f7:a1:7c:5c:d1:ea:c3:21:c9:04:92:
f8:f6:78:68:d2:c8:f9:79:61:7d:0e:52:10:8f:fa:
9e:e2:fb:ec:6e:b6:5c:dc:48:19:6d:fb:21:b9:f5:
96:cb:6e:21:53:57:65:5f:dd:08:04:af:01:5c:14:
b2:d6:e8:e1:2b:f4:23:fc:66:77:c5:46:28:2a:0c:
c4:44:01:2d:a8:4a:a9:ac:97:9e:22:80:65:ca:07:
bf:89:ef:b9:7d:bc:e4:2c:c6:42:c8:3f:de:83:b6:
f0:e7:a8:68:84:8f:6b:80:de:85:30:ce:c3:72:3f:
f3:c1:52:70:76:db:8d:00:b0:57:da:29:50:ab:79:
b3:13:df:1a:2d:39:8b:72:1c:a9:5b:04:b4:a9:c6:
eb:ee:d7:aa:ab:ae:7b:24:09:d5:66:8c:20:8b:f3:
f5:b2:4a:c0:5d:25:e1:7d:bf:35:3a:23:79:b9:91:
17:37:37:7e:9a:bb:91:aa:d9:cf:55:7a:57:93:98:
f4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:46:E7:D4:8E:9D:C4:FF:AF:5D:E4:1F:8B:C3:66:58:BD:06:FE:ED
X509v3 Authority Key Identifier:
keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3231302e31362e3138322e302f32342d3234203d3e20313436383137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.16.182.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:50:e3:c3:46:27:1a:ab:ea:3e:bc:9a:54:cd:7e:b4:b2:53:
22:70:58:b0:0c:e0:fb:94:dd:9a:b5:79:df:44:53:3c:f9:10:
c3:9f:67:14:39:54:01:f5:2a:38:1f:dc:9c:f4:6f:9b:8d:6d:
db:6a:40:22:b0:15:d8:b9:29:89:09:77:5f:68:da:70:84:6c:
1b:c8:42:cd:e9:6a:18:65:ee:01:35:c1:f2:83:bc:3f:b5:72:
18:fd:3b:5a:38:b8:dd:37:7b:89:bb:21:be:21:d2:44:17:e5:
68:22:cf:fd:4a:fa:e5:66:da:dd:42:a8:5b:c4:e9:08:c2:dc:
f4:9b:68:b3:22:ed:45:25:27:f1:5e:2c:2b:64:e1:9e:b2:91:
09:53:c5:09:bf:39:bd:76:15:3f:e1:b0:93:e2:a1:4f:40:03:
df:92:3b:eb:48:78:ea:6a:bb:44:47:20:4c:01:e3:11:ed:10:
8b:3b:1f:40:12:82:59:cf:e0:6c:e2:80:5d:6d:2e:2f:bf:fe:
b4:25:11:48:ac:99:b5:f9:42:0b:16:34:4e:eb:d9:61:25:c4:
bc:96:0b:9c:c4:8c:aa:ff:8e:fb:36:ee:f4:fe:a7:a3:9a:4b:
5f:d6:e3:09:af:28:13:98:9f:b4:fd:65:4c:38:58:7d:3a:ce:
5b:b8:36:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:18 2026 by rpki-client