
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3138302e302f32322d3232203d3e203535393932.roa
File: 3130312e3139382e3138302e302f32322d3232203d3e203535393932.roa (raw, json)
Hash identifier: rkrYae0XoBZeFBWjHIkdRXy907nfouGrDmL2Z7ZxpOc=
Subject key identifier: 0A:2A:14:19:35:68:CD:AF:32:B0:45:6D:7F:1C:41:5B:89:5E:76:72
Certificate issuer: /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Certificate serial: 156215FC63BA58E4431B9403A3B11E55B2B56AD7
Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3138302e302f32322d3232203d3e203535393932.roa
Signing time: Wed 13 May 2026 02:26:47 +0000
ROA not before: Wed 13 May 2026 02:21:47 +0000
ROA not after: Wed 12 May 2027 02:26:47 +0000
asID: 55992
IP address blocks: 101.198.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:26:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:62:15:fc:63:ba:58:e4:43:1b:94:03:a3:b1:1e:55:b2:b5:6a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Validity
Not Before: May 13 02:21:47 2026 GMT
Not After : May 12 02:26:47 2027 GMT
Subject: CN=0A2A14193568CDAF32B0456D7F1C415B895E7672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:df:de:36:14:cc:b6:22:40:b4:02:9b:26:09:
a7:0b:ff:41:06:c4:96:e6:81:16:5a:7b:b1:cd:9d:
2d:e1:16:c2:98:14:1b:b0:8c:31:30:08:95:bf:b3:
28:8e:2e:a2:0f:f1:bb:5a:01:b9:d6:ce:2e:aa:81:
ee:88:7c:d9:7c:49:89:a2:71:d4:46:76:80:1e:f3:
6e:27:a7:37:d9:ea:0f:64:c6:af:ce:ec:8f:bb:c0:
e9:28:6e:fe:3c:9d:06:10:a1:7f:77:2e:1f:77:26:
65:aa:c7:ca:14:99:3d:b9:17:2d:d2:68:2a:8d:e2:
8d:4c:a4:89:0b:0e:85:ab:16:2a:f7:0c:bd:20:d7:
17:07:50:0a:b0:a9:e3:c2:8a:ae:5d:f8:ca:29:47:
ac:cb:73:61:90:3d:2e:91:97:3e:18:dc:d5:ad:7e:
b5:b0:9c:67:9e:a1:7c:59:91:06:e3:b4:fc:1a:d1:
06:de:ec:aa:34:d2:d8:28:d3:bc:93:62:5d:f9:33:
42:04:0d:9f:49:f4:c6:de:71:fd:71:ed:e1:39:da:
5d:5a:16:05:c2:75:09:d4:32:b0:38:8d:1e:8c:80:
fe:b2:ff:bf:34:10:1d:46:04:33:cf:d1:1a:9a:d5:
9b:84:9d:c6:11:6c:64:9c:c4:4e:b3:b6:dc:b1:04:
f5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2A:14:19:35:68:CD:AF:32:B0:45:6D:7F:1C:41:5B:89:5E:76:72
X509v3 Authority Key Identifier:
keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3138302e302f32322d3232203d3e203535393932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.198.180.0/22
Signature Algorithm: sha256WithRSAEncryption
11:be:7d:7b:08:18:dd:dd:7b:a7:3f:86:6a:ad:ec:07:e3:c8:
6e:1a:b5:65:d2:c5:d8:90:53:be:92:3d:ee:a8:aa:65:8a:8c:
9c:6c:95:46:2f:d2:13:01:90:e6:7c:69:ac:51:7d:ae:04:ae:
29:be:88:9d:a7:54:8c:e9:3d:46:04:a7:6d:a3:01:45:dc:61:
f0:8f:5a:7d:55:7a:c1:f7:c5:58:43:bd:f5:be:68:40:53:0a:
ef:40:61:7c:1b:f7:bb:98:58:09:1e:cd:ae:d3:e3:24:91:f1:
4e:d3:42:cc:91:c1:1c:23:d4:cc:47:6b:79:c3:28:64:cc:7b:
96:13:e1:52:e5:50:33:90:5b:88:3d:f4:da:5a:a8:ac:fb:55:
c4:7c:c9:39:c0:cc:db:d2:c7:d7:7b:c6:3b:ac:66:a1:da:ca:
53:46:c4:e5:a5:a0:97:0e:fd:47:b3:c7:7c:85:ec:52:df:a2:
e7:9f:0f:54:f5:18:ff:60:37:9e:dc:97:5b:e8:36:1c:50:46:
86:d6:fc:ab:cc:5c:07:14:20:5b:0a:0a:2f:d5:98:08:3c:61:
0f:1d:3a:99:7f:ca:95:71:00:38:41:a1:68:b9:d3:19:52:dd:
ca:a3:40:13:1d:55:9d:16:37:17:bd:2a:4e:54:9f:03:31:6d:
53:b0:03:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:41:56 2026 by rpki-client