
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3137382e302f32332d3233203d3e203535393932.roa
File: 3130312e3139382e3137382e302f32332d3233203d3e203535393932.roa (raw, json)
Hash identifier: mggjl9jx41i7oUGab9P2gxy4nza4AgEYuhpfR2Sg9c0=
Subject key identifier: DC:63:3D:34:7A:8C:CF:44:00:9D:A2:1C:73:81:10:B1:79:A9:DD:28
Certificate issuer: /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Certificate serial: 7C36E3283D1D8F347E487C0D605DE53A782D7A7F
Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3137382e302f32332d3233203d3e203535393932.roa
Signing time: Wed 13 May 2026 02:24:17 +0000
ROA not before: Wed 13 May 2026 02:19:17 +0000
ROA not after: Wed 12 May 2027 02:24:17 +0000
asID: 55992
IP address blocks: 101.198.178.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:26:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:36:e3:28:3d:1d:8f:34:7e:48:7c:0d:60:5d:e5:3a:78:2d:7a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Validity
Not Before: May 13 02:19:17 2026 GMT
Not After : May 12 02:24:17 2027 GMT
Subject: CN=DC633D347A8CCF44009DA21C738110B179A9DD28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:07:c8:22:30:4f:9a:a4:87:27:a7:c6:39:f0:
89:0e:6d:cf:5d:6e:b9:48:68:2a:ae:19:2a:74:97:
f0:bb:a8:b9:14:7d:0c:da:eb:a3:4d:4e:a8:c6:a9:
94:38:cd:d2:33:36:5f:69:8f:81:4a:d1:c6:03:9d:
e5:47:07:13:5f:1c:8e:86:9e:ca:69:f8:30:b3:a3:
48:a4:4a:36:d3:88:23:bc:c1:06:6f:8b:8d:e7:54:
1f:b6:c3:20:e3:89:ec:05:01:bf:d3:91:1a:27:d0:
23:89:86:db:16:4d:7c:94:b5:8f:66:82:55:54:0e:
68:cd:04:82:fc:35:77:6a:1d:ec:b1:93:76:c6:3b:
20:b2:87:a0:9b:ed:4d:95:2a:14:28:28:71:52:d5:
60:b0:f0:56:c5:3c:c6:c8:8e:54:96:a8:93:8c:2e:
90:76:1a:8b:4e:04:c5:f3:f6:22:32:5b:3c:c3:64:
18:55:42:67:7c:11:cb:da:a5:3a:e1:19:95:f5:07:
b3:7b:9a:16:73:39:4c:9e:3f:cb:43:c3:a2:15:41:
27:65:ad:5c:db:cc:8f:6a:49:4f:7f:bf:7a:21:85:
cc:ac:1e:31:85:d5:1a:44:3b:e5:a4:27:37:24:42:
d8:f2:58:dd:e0:7a:92:1c:52:b7:d7:00:10:f9:54:
41:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:63:3D:34:7A:8C:CF:44:00:9D:A2:1C:73:81:10:B1:79:A9:DD:28
X509v3 Authority Key Identifier:
keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3137382e302f32332d3233203d3e203535393932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.198.178.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:05:c9:3d:d4:1b:f9:1b:16:c9:46:bb:27:3a:64:43:cf:98:
59:23:49:b5:5f:23:8e:8f:b1:b4:f7:59:3b:65:95:8c:04:3e:
ec:50:98:56:80:56:4c:ce:bd:a9:a3:3e:37:49:b2:d7:48:db:
16:6b:01:ab:e9:21:a8:2c:0d:e8:7d:09:b8:0b:8e:2c:28:30:
a5:cd:2f:b2:20:53:d4:db:d8:41:63:a9:ad:17:78:58:2e:80:
69:21:2a:4b:46:9f:a6:a4:17:ef:46:21:34:93:fd:cb:38:1c:
25:f6:d3:54:f1:2a:27:91:1a:1f:f8:7c:e4:cf:37:24:c0:b7:
d1:5e:e4:0f:fc:75:ed:a7:1a:77:ec:c3:19:27:81:22:a7:a2:
12:46:52:26:36:38:3a:67:74:ec:40:03:f5:6a:5e:08:f5:3e:
86:74:0e:57:e0:45:16:0b:5c:ed:d5:95:9f:a8:31:aa:62:d0:
4c:82:45:2d:50:cc:dc:bc:e5:14:33:c0:01:a3:5a:8d:4a:39:
71:4a:9b:cc:8c:5c:8f:9f:0c:11:b2:b9:81:5d:66:26:43:6c:
a7:e6:27:71:0d:c7:0b:b0:7d:b5:e7:47:dd:8e:2e:70:96:44:
89:d8:3a:22:57:77:7a:7c:5e:f6:6a:12:c7:e3:1a:e1:4c:04:
13:a8:2c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:48:25 2026 by rpki-client