
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106106457318752269/0/3131302e34302e302e302f32302d3230203d3e2030.roa
File: 3131302e34302e302e302f32302d3230203d3e2030.roa (raw, json)
Hash identifier: uz8vvrxqhlxPhhSdcfvPutY8ZO3Uap7LyUirimI4VLk=
Subject key identifier: B5:6B:C4:E9:3E:04:1A:B8:2B:14:17:97:FC:1D:7F:A3:9F:0F:E3:45
Certificate issuer: /CN=6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52
Certificate serial: 7F4D33F195F83CD758F739F86058F119CB3D58B6
Authority key identifier: 6B:23:1F:5D:F7:53:5B:F8:6C:FF:EB:85:A0:B2:8E:0A:44:7C:BD:52
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/3131302e34302e302e302f32302d3230203d3e2030.roa
Signing time: Mon 11 May 2026 08:30:02 +0000
ROA not before: Mon 11 May 2026 08:25:02 +0000
ROA not after: Mon 10 May 2027 08:30:02 +0000
asID: 0
IP address blocks: 110.40.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.crl
rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 13:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:4d:33:f1:95:f8:3c:d7:58:f7:39:f8:60:58:f1:19:cb:3d:58:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52
Validity
Not Before: May 11 08:25:02 2026 GMT
Not After : May 10 08:30:02 2027 GMT
Subject: CN=B56BC4E93E041AB82B141797FC1D7FA39F0FE345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e8:d4:c3:62:7e:31:c0:8b:85:4d:f2:ea:ab:
cb:3b:1d:11:bd:72:d9:01:d4:9b:03:3c:e7:d9:d6:
17:2b:dd:c6:5b:f9:eb:ac:77:34:bf:8c:22:30:22:
1f:c4:bc:86:8a:37:25:98:da:b9:68:ff:28:c7:ad:
1a:29:6c:c6:0f:61:1d:ea:e1:53:5c:21:37:af:5c:
6e:13:21:27:cb:06:fb:18:73:31:bc:33:63:a6:8f:
0f:97:4d:25:10:d7:dc:00:df:18:6e:e1:51:8d:38:
42:c2:fc:e3:66:47:f3:57:4d:f2:c1:f7:8a:12:40:
3f:53:d7:3c:09:e8:de:46:0e:d1:8e:4d:fe:9b:a4:
48:75:bc:6d:5e:df:56:1a:5c:cc:ea:14:da:09:9d:
31:b0:18:4c:5e:59:cb:3b:c4:74:da:9b:bb:11:eb:
0f:ca:80:ff:5e:d6:f3:52:31:af:28:ca:ca:1c:1f:
d8:d5:84:41:4c:a6:0a:03:2e:01:3f:63:c7:1e:d1:
95:c7:29:0a:68:1f:24:07:3a:a1:88:7f:b0:a4:a2:
bb:7a:d2:8f:42:cb:ab:af:d3:45:ec:4a:36:4d:91:
b8:0b:80:47:64:07:a4:53:29:0a:4e:85:a4:41:e3:
65:32:68:50:98:91:6e:d3:b9:77:88:10:dc:28:09:
0d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6B:C4:E9:3E:04:1A:B8:2B:14:17:97:FC:1D:7F:A3:9F:0F:E3:45
X509v3 Authority Key Identifier:
keyid:6B:23:1F:5D:F7:53:5B:F8:6C:FF:EB:85:A0:B2:8E:0A:44:7C:BD:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/3131302e34302e302e302f32302d3230203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.40.0.0/20
Signature Algorithm: sha256WithRSAEncryption
6d:53:fb:fc:6f:a0:74:16:fa:74:8e:dc:55:80:36:83:4a:ae:
1c:bf:a7:d3:37:2f:31:7e:d0:9b:65:86:d4:0f:01:40:af:42:
bb:b3:df:90:5f:3b:f7:b3:a5:67:3e:28:41:fa:fa:40:87:2f:
de:77:d1:fe:3e:c7:98:93:fb:98:c0:64:5c:dc:db:c9:cb:09:
2c:59:9b:58:c7:4c:24:7f:fb:d5:de:2a:27:06:b5:25:8d:9e:
50:89:e4:6f:74:6e:47:52:dc:af:72:7f:d7:eb:48:91:e7:79:
ec:d4:35:16:76:85:14:49:5f:92:05:60:a3:d4:93:71:01:db:
2d:10:b3:aa:de:fc:a5:7c:9a:d9:d3:56:06:c8:b1:25:8b:5b:
e6:f2:52:73:cf:fa:e8:66:aa:e8:42:27:97:4b:cf:b5:5d:a4:
c5:e2:de:a0:0f:6b:df:76:5c:21:26:87:4f:a4:82:8b:af:27:
9c:43:02:8f:05:d8:88:d3:a7:d6:a5:35:8f:99:a7:94:26:6a:
6c:4b:b6:cd:f4:5d:2d:94:fb:2e:77:84:28:30:4a:fc:1d:2d:
99:59:61:88:70:22:04:6a:51:31:88:40:9a:d4:90:21:9f:4f:
11:c0:81:86:36:0d:c6:2d:7b:96:fa:e7:60:91:93:cb:4b:1c:
d3:dc:4d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:52 2026 by rpki-client