
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3138342e302f32332d3233203d3e203535393932.roa
File: 3130312e3139382e3138342e302f32332d3233203d3e203535393932.roa (raw, json)
Hash identifier: scGhEFxgH/ByJtrtN2ud+ajw7/RRYqrFOrOwg0+UZ/Y=
Subject key identifier: 27:D1:27:4A:29:77:8A:4E:29:10:8F:87:68:B2:F9:48:54:0B:72:1D
Certificate issuer: /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Certificate serial: 22EBB66A0CBAF2301F009F932522CC2E7EB94680
Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3138342e302f32332d3233203d3e203535393932.roa
Signing time: Wed 13 May 2026 02:24:17 +0000
ROA not before: Wed 13 May 2026 02:19:17 +0000
ROA not after: Wed 12 May 2027 02:24:17 +0000
asID: 55992
IP address blocks: 101.198.184.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:26:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:eb:b6:6a:0c:ba:f2:30:1f:00:9f:93:25:22:cc:2e:7e:b9:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Validity
Not Before: May 13 02:19:17 2026 GMT
Not After : May 12 02:24:17 2027 GMT
Subject: CN=27D1274A29778A4E29108F8768B2F948540B721D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f9:b2:83:94:d0:40:4c:d4:d6:27:d5:1d:9d:
77:7d:eb:71:c8:03:a1:90:2e:16:bc:f4:e7:80:a6:
7d:97:0a:83:ef:1b:55:a1:29:bc:62:24:5e:63:17:
74:10:d2:38:1a:90:b4:da:ea:8d:86:b9:fb:d2:0a:
10:2c:6d:e5:6d:d8:5e:c5:d4:41:82:bb:2a:61:72:
10:22:46:75:0a:e2:e7:43:c3:c4:90:99:d8:8a:68:
29:69:72:d1:57:f3:9a:e8:e4:61:a1:92:fd:f6:24:
b6:e2:28:23:8d:30:2f:f3:c4:5f:53:3a:50:7e:cc:
57:2d:41:87:a3:2f:ec:cf:c0:85:8f:3d:9d:1e:c6:
9c:ec:01:75:72:59:66:f0:c3:41:f5:d1:48:e3:c8:
af:fc:e0:15:d4:be:26:fd:2a:bb:ca:ad:71:a5:28:
c2:b5:cc:2a:35:7f:88:0e:2b:fb:88:6b:81:4d:fc:
9d:d0:6c:fa:1e:16:23:f8:d4:65:06:94:07:bc:ec:
fb:38:c3:99:60:e2:49:8b:2b:9b:82:59:79:3d:48:
4f:72:77:70:66:42:e6:38:4e:c2:dc:60:0f:79:bd:
2b:74:69:c5:f0:21:0b:c0:c8:97:2d:5a:1f:a7:90:
6e:36:7c:9e:bf:17:ac:4f:cc:3b:ba:d5:e9:27:5e:
7d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D1:27:4A:29:77:8A:4E:29:10:8F:87:68:B2:F9:48:54:0B:72:1D
X509v3 Authority Key Identifier:
keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3138342e302f32332d3233203d3e203535393932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.198.184.0/23
Signature Algorithm: sha256WithRSAEncryption
74:fa:2d:aa:d0:53:de:e8:51:50:14:d5:7e:3b:1f:81:5b:75:
23:f6:1c:83:c7:5f:3b:8e:e6:b9:21:f9:a0:b3:1a:fe:f6:94:
92:9b:54:1d:9c:1d:28:f4:df:f1:f0:14:8c:ce:e4:5e:64:7f:
71:9a:aa:fa:92:13:56:3c:66:15:e4:27:2c:8e:ca:3c:8d:63:
61:75:18:bb:96:1b:2d:7f:84:a2:ec:dc:4f:5b:68:0b:7b:7f:
77:47:43:5e:92:14:bd:7f:3f:1c:56:ca:66:12:a9:05:0b:f4:
62:ca:e4:72:63:2b:c9:3b:28:78:1e:95:97:f4:b6:8e:d3:f3:
fa:df:bd:63:f5:e2:24:2c:92:df:08:cf:55:a6:21:72:8f:1f:
64:39:21:92:b0:a4:f5:c7:96:aa:30:b3:51:4f:7b:fa:12:0d:
ed:24:29:ab:f9:92:91:72:4f:7b:c3:3e:74:54:92:a9:ed:36:
3e:73:02:94:7d:09:df:91:51:82:9d:57:55:f3:a4:2e:84:80:
c4:c4:32:b0:b8:8b:fe:62:a6:b7:f3:2b:91:ee:b9:1e:32:db:
60:6e:70:33:99:f2:27:28:6f:4d:62:d1:49:8f:a9:eb:99:7b:
96:e6:fa:4e:df:38:2b:c1:27:67:bb:5a:10:12:95:80:c7:46:
ab:ab:d3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:25:18 2026 by rpki-client