
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3138342e302f32342d3234203d3e203535393932.roa
File: 3130312e3139382e3138342e302f32342d3234203d3e203535393932.roa (raw, json)
Hash identifier: xkLXXhh6dA+NUe5FBoeFBFT0Qfe21ZfH2kricSUswOM=
Subject key identifier: 40:FF:90:39:A7:92:3A:B1:C9:90:ED:6F:EE:50:75:7E:B1:5A:F4:86
Certificate issuer: /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Certificate serial: 0F104436E8314DEC560AE64BAB05FA3FA5D93255
Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3138342e302f32342d3234203d3e203535393932.roa
Signing time: Wed 13 May 2026 02:25:26 +0000
ROA not before: Wed 13 May 2026 02:20:26 +0000
ROA not after: Wed 12 May 2027 02:25:26 +0000
asID: 55992
IP address blocks: 101.198.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:26:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:10:44:36:e8:31:4d:ec:56:0a:e6:4b:ab:05:fa:3f:a5:d9:32:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Validity
Not Before: May 13 02:20:26 2026 GMT
Not After : May 12 02:25:26 2027 GMT
Subject: CN=40FF9039A7923AB1C990ED6FEE50757EB15AF486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4d:f5:c4:55:58:11:f2:66:7b:0e:4f:46:08:
a9:50:b0:87:19:15:3c:5d:57:8c:77:ee:06:68:52:
08:ee:7e:a8:32:97:c8:21:3b:8c:06:51:64:83:2e:
f6:e3:f8:b2:17:43:ac:b3:6a:fd:27:8f:34:22:b0:
01:ab:6b:6a:f9:c6:f5:4d:64:fc:80:62:e3:1a:9b:
08:d6:54:8a:37:a2:00:22:8c:fb:c8:74:28:b0:ac:
64:40:5e:29:69:0b:13:75:29:3a:d9:10:30:14:6a:
7f:dd:6d:fb:f0:02:33:2a:b0:c9:ad:ed:49:71:b7:
a5:4e:3d:01:69:95:a9:46:de:94:cb:4a:aa:ff:95:
0a:69:30:3a:cb:db:b8:4b:33:e1:38:25:18:a5:6e:
ac:34:b4:ee:a5:38:17:0f:8e:26:24:93:f0:cf:3a:
01:d6:98:be:67:26:0b:83:61:a9:69:9a:c5:05:bd:
99:36:08:2c:5f:6c:a2:a7:7d:9f:20:ae:37:ce:39:
97:5c:5b:f1:0a:b0:84:7e:0c:ca:e2:a5:e2:04:f5:
f8:93:02:de:2a:1b:6c:4c:0f:2e:3d:a4:c3:1b:c4:
e9:ac:61:bb:f4:7e:cb:11:62:bb:41:2a:ed:d0:c4:
26:01:49:46:8a:41:7b:7a:f6:b7:dc:17:bc:0f:7e:
11:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FF:90:39:A7:92:3A:B1:C9:90:ED:6F:EE:50:75:7E:B1:5A:F4:86
X509v3 Authority Key Identifier:
keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3138342e302f32342d3234203d3e203535393932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.198.184.0/24
Signature Algorithm: sha256WithRSAEncryption
63:2a:d3:66:04:bc:19:c4:7b:76:67:6a:02:52:36:88:1d:11:
52:91:7b:b1:bb:37:de:7b:0e:07:8d:4c:c3:1d:5f:20:8a:33:
55:40:eb:26:0c:dd:1d:91:e1:52:cd:17:e2:26:1e:9a:57:50:
37:c1:40:70:b2:58:65:6b:d3:27:0f:06:74:ef:5e:8f:57:24:
c6:fd:4f:07:12:0a:8d:8a:f1:0d:19:2e:c7:4e:f6:80:af:1e:
8e:47:00:3c:8f:af:46:9d:dd:3e:df:6c:7b:4f:1e:35:6d:e5:
3a:1e:e4:35:25:f5:70:4c:3c:b7:ce:9c:3e:ba:00:4f:20:ce:
23:63:16:54:1d:db:0f:65:71:3b:f6:9b:2e:be:37:52:cf:d2:
1d:33:8f:c9:95:e0:3c:0a:10:a9:44:4a:3c:f5:7e:bb:0f:e8:
ff:12:90:cc:24:18:2c:77:cc:aa:a3:42:39:b1:44:c6:7a:1c:
59:ee:2c:99:29:56:fc:2e:47:99:8d:c4:c2:bf:b4:76:f9:5d:
bb:a4:9d:52:1c:90:a3:1b:76:56:ed:f2:3d:a1:5f:2f:fc:16:
3f:a1:40:0d:ae:f0:94:4f:81:4f:9b:df:a3:95:fa:83:b3:22:
e0:1e:6e:10:8e:dd:4d:6a:02:c3:a4:1f:01:c6:20:c9:59:9c:
9d:4b:74:6c
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUDxBENugxTexWCuZLqwX6P6XZMlUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUyN0VFRjIyRUQ0QjkwMzQ5NDlDOTFFM0QzOUIyNEE2
OUZERjk4NDAeFw0yNjA1MTMwMjIwMjZaFw0yNzA1MTIwMjI1MjZaMDMxMTAvBgNV
BAMTKDQwRkY5MDM5QTc5MjNBQjFDOTkwRUQ2RkVFNTA3NTdFQjE1QUY0ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmTfXEVVgR8mZ7Dk9GCKlQsIcZ
FTxdV4x37gZoUgjufqgyl8ghO4wGUWSDLvbj+LIXQ6yzav0njzQisAGra2r5xvVN
ZPyAYuMamwjWVIo3ogAijPvIdCiwrGRAXilpCxN1KTrZEDAUan/dbfvwAjMqsMmt
7Ulxt6VOPQFplalG3pTLSqr/lQppMDrL27hLM+E4JRilbqw0tO6lOBcPjiYkk/DP
OgHWmL5nJguDYalpmsUFvZk2CCxfbKKnfZ8grjfOOZdcW/EKsIR+DMripeIE9fiT
At4qG2xMDy49pMMbxOmsYbv0fssRYrtBKu3QxCYBSUaKQXt69rfcF7wPfhHXAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUQP+QOaeSOrHJkO1v7lB1frFa9IYwHwYDVR0j
BBgwFoAUxSfu8i7UuQNJSckePTmySmn9+YQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
Njc2NzA4NDkyNDE3NDM1NS8wL0M1MjdFRUYyMkVENEI5MDM0OTQ5QzkxRTNEMzlC
MjRBNjlGREY5ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzUyN0VFRjIyRUQ0QjkwMzQ5NDlDOTFFM0QzOUIyNEE2OUZERjk4NC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMDY3NjcwODQ5MjQxNzQzNTUvMC8zMTMwMzEyZTMx
MzkzODJlMzEzODM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNTM5MzkzMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGXGuDANBgkqhkiG9w0BAQsFAAOCAQEAYyrTZgS8GcR7dmdqAlI2
iB0RUpF7sbs33nsOB41Mwx1fIIozVUDrJgzdHZHhUs0X4iYemldQN8FAcLJYZWvT
Jw8GdO9ej1ckxv1PBxIKjYrxDRkux072gK8ejkcAPI+vRp3dPt9se08eNW3lOh7k
NSX1cEw8t86cProATyDOI2MWVB3bD2VxO/abLr43Us/SHTOPyZXgPAoQqURKPPV+
uw/o/xKQzCQYLHfMqqNCObFExnocWe4smSlW/C5HmY3Ewr+0dvldu6SdUhyQoxt2
Vu3yPaFfL/wWP6FADa7wlE+BT5vfo5X6g7Mi4B5uEI7dTWoCw6QfAcYgyVmcnUt0
bA==
-----END CERTIFICATE-----
Generated at Wed May 13 14:57:54 2026 by rpki-client