
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3231312e3135342e31362e302f32302d3230203d3e20313436383137.roa
File: 3231312e3135342e31362e302f32302d3230203d3e20313436383137.roa (raw, json)
Hash identifier: 720mBrT1y/xr4FKFFkQ+yYOitJ5rEPPkDA4It7Q15N4=
Subject key identifier: F3:86:78:5B:A1:5C:05:31:2D:8B:48:33:42:C5:86:EA:61:37:C7:B8
Certificate issuer: /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial: 50AE5539C1249651413321178D0D09660A030291
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3231312e3135342e31362e302f32302d3230203d3e20313436383137.roa
Signing time: Fri 08 May 2026 09:41:55 +0000
ROA not before: Fri 08 May 2026 09:36:55 +0000
ROA not after: Fri 07 May 2027 09:41:55 +0000
asID: 146817
IP address blocks: 211.154.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:ae:55:39:c1:24:96:51:41:33:21:17:8d:0d:09:66:0a:03:02:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
Validity
Not Before: May 8 09:36:55 2026 GMT
Not After : May 7 09:41:55 2027 GMT
Subject: CN=F386785BA15C05312D8B483342C586EA6137C7B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:95:ab:5a:a0:02:c8:ac:82:e2:3c:67:2c:d3:
bc:05:51:4f:50:19:58:87:ee:ae:f0:8c:7c:75:62:
51:ba:32:c4:d6:74:3d:04:49:f0:4c:85:a6:c1:91:
d9:ea:0c:59:dd:17:0d:ce:42:ff:05:be:ad:db:ed:
66:eb:a2:46:20:db:2b:02:8b:81:09:15:a0:20:3a:
d5:84:4b:22:75:74:59:40:6e:1c:5a:95:8c:76:81:
57:f7:06:bf:3e:91:ca:3a:a5:e9:df:26:f3:30:61:
5c:98:e4:16:4f:ba:a6:3d:be:e3:a4:ad:19:dd:15:
74:87:9f:e8:5f:8a:b5:27:82:dd:e6:53:63:e3:d7:
ce:60:0e:e7:fd:c8:f8:be:17:c2:43:e9:56:98:b1:
95:02:6e:39:64:c6:c0:a5:dc:82:60:44:53:15:24:
11:e1:0d:bf:3e:9d:c4:0c:3d:c2:4f:dd:fd:24:62:
53:6b:98:6b:8a:b1:3f:ce:a1:18:99:20:19:2c:e5:
9b:18:d3:51:e8:4b:30:28:da:51:db:0b:60:b9:e5:
6e:46:65:d2:7e:d8:ab:08:d4:3e:95:3b:97:a6:d1:
4e:0a:b2:58:b9:50:de:92:f7:e0:52:19:bf:ca:c5:
cf:ff:86:29:77:52:d3:fb:a4:eb:ff:dd:ab:ed:6c:
5a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:86:78:5B:A1:5C:05:31:2D:8B:48:33:42:C5:86:EA:61:37:C7:B8
X509v3 Authority Key Identifier:
keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3231312e3135342e31362e302f32302d3230203d3e20313436383137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.154.16.0/20
Signature Algorithm: sha256WithRSAEncryption
b2:9b:51:8b:2b:f3:ed:88:ac:f5:af:a7:3f:13:21:63:31:ef:
73:2f:87:c3:c9:9e:a5:24:c1:f3:a7:b1:f6:d6:73:2b:2c:02:
39:4a:0e:27:f7:d4:03:e7:bc:d9:83:7c:f0:95:08:62:0a:f7:
82:83:dc:7e:74:54:1e:af:c5:27:3c:7f:0a:e7:bb:40:9e:db:
3f:dd:0d:8f:5f:d6:03:72:af:9d:97:a1:ad:15:8a:3f:f9:2d:
45:8b:a1:8d:24:10:76:64:1d:70:41:d4:12:7f:f3:cc:d8:18:
1e:7e:c9:23:34:40:92:d6:db:3e:c3:dc:ef:62:91:09:99:0b:
3c:c2:3a:22:66:41:31:52:13:6c:12:d6:55:2c:03:91:55:23:
b5:63:b6:b6:e0:8d:c1:18:f5:f0:2a:18:d4:87:9f:fe:ea:19:
f8:37:20:3e:5b:f2:33:9e:f8:82:c8:e1:82:bc:ca:9a:22:32:
18:37:d2:8a:52:ea:86:c3:69:cc:42:ef:8c:7f:38:bf:d2:f4:
2c:40:97:d6:a4:c4:51:2a:d6:88:2f:a8:8f:d5:73:70:92:4f:
3b:9b:71:a0:22:1e:05:93:d0:f8:c0:82:7c:fa:51:70:30:6e:
81:b2:62:9c:df:c8:80:18:3e:9e:32:ef:2a:76:c3:c7:9f:3d:
d9:cc:fc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:26 2026 by rpki-client