
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/1/3135382e3134302e3235352e302f32342d3234203d3e2034383136.roa
File: 3135382e3134302e3235352e302f32342d3234203d3e2034383136.roa (raw, json)
Hash identifier: g4wybQGjv2udmgy4odp8Jc4FIMGJ7fH2vY6ud3fMWTE=
Subject key identifier: F8:E7:B0:36:35:33:11:0F:EC:AC:33:07:D0:A2:DC:E7:23:1B:2B:EC
Certificate issuer: /CN=855381EC93CF009732540F616E4905D544D838C8
Certificate serial: 139E1360A34394D8B77D21CFD956D28CD6F8FDE3
Authority key identifier: 85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/3135382e3134302e3235352e302f32342d3234203d3e2034383136.roa
Signing time: Fri 17 Apr 2026 02:01:39 +0000
ROA not before: Fri 17 Apr 2026 01:56:39 +0000
ROA not after: Fri 16 Apr 2027 02:01:39 +0000
asID: 4816
IP address blocks: 158.140.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 04:54:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:9e:13:60:a3:43:94:d8:b7:7d:21:cf:d9:56:d2:8c:d6:f8:fd:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855381EC93CF009732540F616E4905D544D838C8
Validity
Not Before: Apr 17 01:56:39 2026 GMT
Not After : Apr 16 02:01:39 2027 GMT
Subject: CN=F8E7B0363533110FECAC3307D0A2DCE7231B2BEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3b:b8:5a:ed:63:06:18:9b:55:46:c7:fa:34:
6f:a2:fa:13:36:15:31:f8:37:60:59:ed:6f:cd:47:
1a:04:c3:8d:1c:41:18:19:73:af:d1:be:c8:3b:69:
88:85:ce:00:ee:3e:93:52:19:99:a9:a5:03:41:20:
e7:92:8b:24:f2:f3:f8:00:ea:2b:51:41:4a:5a:7d:
16:d4:61:25:12:7e:a4:15:21:3b:52:7e:a8:03:00:
4e:71:9b:8d:d3:7a:08:f5:91:d1:83:96:2b:1b:42:
91:92:9a:65:02:d6:04:75:7c:99:16:cf:2f:ff:e1:
a6:46:17:e5:13:50:11:62:19:c8:72:c5:24:ea:e0:
01:2b:70:90:07:f2:f7:f6:9f:e4:cc:b8:18:5a:25:
b7:af:3b:9b:84:e7:31:d7:a9:f9:ba:ca:fc:7b:95:
71:57:62:f3:23:6f:9f:16:87:75:48:7a:f1:7f:6b:
d4:d9:07:49:bd:c8:d8:36:15:e9:6e:64:68:3c:b8:
0f:5d:0b:f7:46:31:14:6d:18:59:6d:64:45:bc:04:
b3:3f:87:0b:a4:fa:4b:24:e1:b3:3a:6b:38:77:bc:
be:84:9a:97:23:f1:31:6e:e0:12:4d:91:f6:50:b5:
e3:0e:6f:77:2d:79:60:13:fe:8f:16:fb:f9:1a:a6:
9d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E7:B0:36:35:33:11:0F:EC:AC:33:07:D0:A2:DC:E7:23:1B:2B:EC
X509v3 Authority Key Identifier:
keyid:85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/3135382e3134302e3235352e302f32342d3234203d3e2034383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.140.255.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:8f:8f:62:48:8f:74:e9:3a:d4:1b:01:c2:eb:4f:45:2a:f4:
07:2e:f4:93:7d:85:b1:2e:44:52:23:f7:f7:c2:e8:e5:fb:df:
53:07:35:77:cb:4d:8a:54:a8:84:db:bc:15:79:87:85:1f:73:
5b:20:c5:04:fa:08:a3:12:bf:97:50:44:ba:51:33:6d:a1:f7:
09:8e:98:ba:5f:d2:12:f1:52:55:d7:07:12:d9:f8:fb:e9:03:
fe:7a:39:d1:27:17:91:4d:f9:d4:00:2e:e0:38:56:11:05:20:
d1:b8:9f:9d:c7:e5:cd:2c:4f:2c:77:87:f9:a2:ca:d0:ca:a7:
e8:4f:f9:aa:62:f9:bd:ae:2b:52:a1:2d:2b:08:41:4e:08:e6:
f1:c5:94:37:09:77:9a:58:95:40:64:20:56:89:b8:eb:23:84:
6f:b0:48:65:38:58:15:cf:c5:19:1c:61:ea:64:11:37:c8:26:
05:12:85:b7:af:7c:a7:d4:99:23:55:19:9e:11:d7:7d:63:f1:
f4:01:d5:6c:04:35:26:54:ca:8b:f2:6f:df:d3:80:26:1f:b1:
2b:b1:1a:b0:6a:e1:10:e5:60:b7:d2:d0:7d:c6:b9:2c:93:25:
1f:6f:df:42:09:36:30:6d:ef:1e:a3:70:4b:11:7d:09:c1:e8:
b4:a9:94:58
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:42:03 2026 by rpki-client