
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3231302e31362e3138342e302f32342d3234203d3e20313436383137.roa
File: 3231302e31362e3138342e302f32342d3234203d3e20313436383137.roa (raw, json)
Hash identifier: qd4XUQI+fUla8VSpqmRqykOKiVgq67wnmF+IHUXe58s=
Subject key identifier: A1:0B:EF:06:53:75:E4:10:BE:DB:C6:E9:D5:DF:67:0C:1E:2B:E9:09
Certificate issuer: /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial: 5F076FDDA415CE48EAD69EB6C84B008F370C626A
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3231302e31362e3138342e302f32342d3234203d3e20313436383137.roa
Signing time: Fri 08 May 2026 09:47:17 +0000
ROA not before: Fri 08 May 2026 09:42:17 +0000
ROA not after: Fri 07 May 2027 09:47:17 +0000
asID: 146817
IP address blocks: 210.16.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:07:6f:dd:a4:15:ce:48:ea:d6:9e:b6:c8:4b:00:8f:37:0c:62:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
Validity
Not Before: May 8 09:42:17 2026 GMT
Not After : May 7 09:47:17 2027 GMT
Subject: CN=A10BEF065375E410BEDBC6E9D5DF670C1E2BE909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e4:84:f7:28:30:bd:d3:24:23:ce:3b:f6:22:
10:8c:1d:d6:9b:28:91:4f:a8:61:81:90:85:96:7a:
c2:dc:54:77:06:1e:c7:c3:a2:1e:0d:98:da:33:6e:
e2:cd:c2:db:a4:95:b1:c2:84:39:6a:3c:09:9d:1b:
93:fc:6d:4a:ba:6c:29:94:69:fb:8b:5d:9e:6d:67:
56:ec:13:c4:77:45:78:72:ab:d4:c3:33:44:b8:bd:
bd:aa:96:3d:64:a7:2b:1a:42:75:24:85:77:22:35:
aa:90:5d:a7:3c:74:75:48:7c:2e:8f:c4:09:27:7d:
ed:12:7a:38:18:59:be:f9:d8:4f:7b:6c:18:c4:52:
f1:e4:24:86:c9:2e:a9:3d:44:77:21:3e:4c:43:e8:
55:f7:0e:22:0f:3a:34:59:5e:0a:11:d5:e4:9b:95:
1f:89:72:77:27:e7:2f:7f:a9:0e:9f:ed:f4:23:7c:
c7:fe:36:7a:e6:7c:90:50:cc:a7:2f:60:e4:09:26:
e0:22:24:0d:69:b4:b9:89:a1:19:c8:79:43:f8:5c:
b5:c6:27:aa:f3:60:19:21:e3:f0:9c:4c:75:41:aa:
f0:d9:74:6b:2f:f4:ac:f0:97:1c:d4:38:c0:3f:57:
d1:27:b1:d6:17:b7:3b:35:39:a1:de:f9:2c:8e:86:
98:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0B:EF:06:53:75:E4:10:BE:DB:C6:E9:D5:DF:67:0C:1E:2B:E9:09
X509v3 Authority Key Identifier:
keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3231302e31362e3138342e302f32342d3234203d3e20313436383137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.16.184.0/24
Signature Algorithm: sha256WithRSAEncryption
11:50:3d:a3:ab:1f:ee:51:33:9e:da:24:91:26:1a:ba:c0:98:
48:16:65:a9:97:09:46:a0:ea:da:ca:f4:02:a6:7d:6f:65:d2:
bb:d6:81:da:d7:ee:f4:d1:12:a0:04:eb:5d:a9:d9:e4:40:5e:
30:4a:e3:32:85:92:84:2d:14:e0:cd:58:d7:ca:16:84:d2:94:
db:6d:d2:75:66:ed:22:fd:7e:fe:a4:d6:6a:5b:31:1a:15:1a:
f9:b3:b6:45:cf:d4:f6:bc:95:5d:29:0d:09:c2:e2:c8:31:69:
bc:29:9c:8e:4e:90:c1:24:51:f2:46:17:3e:0b:21:08:4c:90:
95:50:23:f2:68:36:4f:d6:0d:29:78:98:bb:15:81:47:aa:81:
68:42:e3:6d:7c:42:b9:d1:82:53:e6:03:db:0d:53:ec:f9:88:
d9:d0:23:a5:61:53:b2:cc:88:20:8f:be:e0:b0:b3:32:0f:fb:
dd:3c:7a:08:45:f0:1d:fc:02:ca:db:9a:97:dd:ed:a7:a5:d2:
d9:80:79:a9:b9:06:9c:2a:60:e8:29:7a:bc:d2:cb:41:67:04:
1e:63:91:a7:a7:f3:f0:5c:aa:3e:51:50:c4:24:5f:48:9c:21:
f4:b3:ef:a3:e7:80:5a:76:a1:99:9f:4c:8e:01:1a:21:a6:bf:
c0:3f:46:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:17 2026 by rpki-client