
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3231302e31362e3138332e302f32342d3234203d3e20313436383137.roa
File: 3231302e31362e3138332e302f32342d3234203d3e20313436383137.roa (raw, json)
Hash identifier: Xu4yAKfYKy1rH5C0yfTU/e5W95Y9K52WRUbxhnxceOU=
Subject key identifier: 89:8A:67:6A:7F:C4:89:68:E4:46:FB:18:B3:D2:29:CA:93:6C:3E:1A
Certificate issuer: /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial: 5A69A2A7E64E179BE9627E99CF62C74FDD3BF40A
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3231302e31362e3138332e302f32342d3234203d3e20313436383137.roa
Signing time: Fri 08 May 2026 09:47:16 +0000
ROA not before: Fri 08 May 2026 09:42:16 +0000
ROA not after: Fri 07 May 2027 09:47:16 +0000
asID: 146817
IP address blocks: 210.16.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:69:a2:a7:e6:4e:17:9b:e9:62:7e:99:cf:62:c7:4f:dd:3b:f4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
Validity
Not Before: May 8 09:42:16 2026 GMT
Not After : May 7 09:47:16 2027 GMT
Subject: CN=898A676A7FC48968E446FB18B3D229CA936C3E1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:45:e8:e1:2f:7d:44:d2:ba:38:22:24:06:8f:
79:96:ec:66:4c:01:a5:d3:4a:a3:f7:f8:0b:69:26:
29:26:57:b9:13:08:47:fa:09:a5:30:a3:52:b9:9b:
45:b3:e7:55:5f:f2:0f:ea:44:f4:17:59:15:b3:db:
3f:bb:bb:4c:7c:da:b8:14:05:ac:c6:41:3f:c8:f0:
86:e0:04:4c:3a:ef:7f:73:c4:2a:73:1b:de:71:a5:
0c:be:66:7d:1b:03:b9:53:53:f9:1a:22:2a:c6:90:
6d:2e:93:7c:f0:27:91:dc:bd:65:07:77:83:0c:ad:
c4:84:4a:3f:e8:9f:e8:2d:ed:33:3f:80:4f:e9:12:
b8:3b:3e:3d:b7:89:0a:0f:ff:84:37:4e:4a:b6:4b:
9e:8a:f3:d9:11:57:f5:1a:2d:3e:62:a1:d7:22:33:
ad:ab:d5:07:17:78:7c:de:f0:70:37:9c:03:fa:d4:
2b:a6:4b:99:3a:1e:8f:d7:5e:19:f4:99:7a:81:c9:
38:1c:94:d7:4e:c8:ea:b3:21:6b:0c:fd:03:ae:7e:
7f:a7:22:28:7c:16:e9:bf:d3:13:91:78:15:ac:66:
4d:92:1d:91:3f:38:88:87:d1:a7:26:91:0c:0e:8a:
a2:ad:e2:a3:cd:61:c1:e0:09:63:64:7d:e6:b9:5e:
e4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8A:67:6A:7F:C4:89:68:E4:46:FB:18:B3:D2:29:CA:93:6C:3E:1A
X509v3 Authority Key Identifier:
keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3231302e31362e3138332e302f32342d3234203d3e20313436383137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.16.183.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:ee:5e:5a:cf:45:26:76:fe:e7:f3:8d:22:07:36:09:5a:53:
3a:06:50:ee:83:e2:c3:a8:9f:25:1c:07:89:69:11:7d:32:11:
2f:43:6d:28:21:61:ec:10:58:51:ce:1e:9c:0e:a6:b4:bc:30:
5e:a3:b5:02:a8:7f:f4:dd:59:ae:7b:fc:ef:b1:cd:ba:7d:ff:
fc:c6:26:26:27:ea:af:27:5e:58:24:5c:09:5e:dc:e5:4b:94:
3d:59:59:ff:57:d9:d7:0a:32:63:ca:c4:3b:da:3a:6b:d3:9c:
29:78:3d:98:c0:d6:a3:7f:6c:79:32:a4:03:94:ca:24:54:0a:
b0:1f:8b:a1:6d:24:28:68:31:26:79:49:63:8f:ad:1a:f6:8e:
38:97:4a:91:fd:96:d7:fb:f4:58:a9:32:d7:c2:46:53:36:94:
72:98:54:49:3e:87:df:d4:f5:9b:9a:7c:b8:ce:ea:fd:7d:40:
5b:db:52:78:45:28:57:d0:78:52:1b:a3:4c:39:ca:75:f5:75:
99:70:2a:6f:4d:53:b0:ed:61:ad:65:a8:40:a9:09:1e:bf:3f:
40:73:08:f7:c1:5d:eb:f5:ad:f2:f7:cd:a9:03:5e:3f:e0:b2:
24:82:9c:11:38:11:c7:6f:fb:00:44:21:0a:ee:49:1f:26:2f:
e3:5c:4b:0f
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUWmmip+ZOF5vpYn6Zz2LHT9079AowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1
RUJFMDM2MjAeFw0yNjA1MDgwOTQyMTZaFw0yNzA1MDcwOTQ3MTZaMDMxMTAvBgNV
BAMTKDg5OEE2NzZBN0ZDNDg5NjhFNDQ2RkIxOEIzRDIyOUNBOTM2QzNFMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCRejhL31E0ro4IiQGj3mW7GZM
AaXTSqP3+AtpJikmV7kTCEf6CaUwo1K5m0Wz51Vf8g/qRPQXWRWz2z+7u0x82rgU
BazGQT/I8IbgBEw6739zxCpzG95xpQy+Zn0bA7lTU/kaIirGkG0uk3zwJ5HcvWUH
d4MMrcSESj/on+gt7TM/gE/pErg7Pj23iQoP/4Q3Tkq2S56K89kRV/UaLT5iodci
M62r1QcXeHze8HA3nAP61CumS5k6Ho/XXhn0mXqByTgclNdOyOqzIWsM/QOufn+n
Iih8Fum/0xOReBWsZk2SHZE/OIiH0acmkQwOiqKt4qPNYcHgCWNkfea5XuQPAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUiYpnan/EiWjkRvsYs9IpypNsPhowHwYDVR0j
BBgwFoAUgl5cc7dVI2Pg+SJhrcY3WF6+A2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NTA1ODA3Mjk0MzkxOTExNy8wLzgyNUU1QzczQjc1NTIzNjNFMEY5MjI2MUFEQzYz
NzU4NUVCRTAzNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1RUJFMDM2Mi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMDUwNTgwNzI5NDM5MTkxMTcvMC8zMjMxMzAyZTMx
MzYyZTMxMzgzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM4MzEzNy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEANIQtzANBgkqhkiG9w0BAQsFAAOCAQEAuO5eWs9FJnb+5/ONIgc2
CVpTOgZQ7oPiw6ifJRwHiWkRfTIRL0NtKCFh7BBYUc4enA6mtLwwXqO1Aqh/9N1Z
rnv877HNun3//MYmJifqrydeWCRcCV7c5UuUPVlZ/1fZ1woyY8rEO9o6a9OcKXg9
mMDWo39seTKkA5TKJFQKsB+LoW0kKGgxJnlJY4+tGvaOOJdKkf2W1/v0WKky18JG
UzaUcphUST6H39T1m5p8uM7q/X1AW9tSeEUoV9B4UhujTDnKdfV1mXAqb01TsO1h
rWWoQKkJHr8/QHMI98Fd6/Wt8vfNqQNeP+CyJIKcETgRx2/7AEQhCu5JHyYv41xL
Dw==
-----END CERTIFICATE-----
Generated at Wed May 13 20:55:17 2026 by rpki-client