
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3131312e3232332e31322e302f32322d3232203d3e203133333738.roa
File: 3131312e3232332e31322e302f32322d3232203d3e203133333738.roa (raw, json)
Hash identifier: xhnefJ7Ig/fvbs80TQ3y8VpS+1CdAnbYdYtxJiYoYcI=
Subject key identifier: 93:80:5A:60:8A:D7:3B:22:76:73:1E:6E:61:43:09:01:1A:F8:3D:AA
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 30124A28AAD6645ED711920F1D777B1E302D3B57
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3131312e3232332e31322e302f32322d3232203d3e203133333738.roa
Signing time: Tue 14 Apr 2026 07:27:54 +0000
ROA not before: Tue 14 Apr 2026 07:22:54 +0000
ROA not after: Tue 13 Apr 2027 07:27:54 +0000
asID: 13378
IP address blocks: 111.223.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:12:4a:28:aa:d6:64:5e:d7:11:92:0f:1d:77:7b:1e:30:2d:3b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Apr 14 07:22:54 2026 GMT
Not After : Apr 13 07:27:54 2027 GMT
Subject: CN=93805A608AD73B2276731E6E614309011AF83DAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4d:78:78:4a:66:66:ab:e8:87:b8:f6:a9:4b:
a2:89:e7:74:82:77:2a:8c:e5:1f:6f:d4:65:b2:a9:
35:a9:45:10:5c:20:67:72:6e:20:13:da:3d:55:fc:
16:87:62:23:32:cd:bf:c8:15:7b:cb:f9:dd:45:54:
ac:a2:0c:bb:dd:d9:b5:31:78:2a:dd:9b:3d:2b:8a:
9c:96:33:2d:5e:d8:ac:fe:c4:40:a8:26:87:ff:6c:
8e:50:52:48:8d:42:ee:d6:1e:7b:68:b6:db:eb:9b:
6e:97:64:b4:55:c3:40:1b:bf:1d:32:f1:dc:d2:c3:
22:f8:7f:30:c9:43:63:13:45:25:ba:2d:ac:91:23:
3b:21:f6:af:1b:29:44:c8:0a:3c:27:32:54:a0:2a:
fb:e0:52:8a:61:57:d8:8a:7a:3e:c8:66:2f:c5:fd:
76:c4:76:fc:62:f3:f6:54:de:96:76:f6:1c:cb:75:
28:2a:2c:5a:a1:d0:ad:b8:83:02:4d:4f:ba:f8:18:
9d:45:a6:a9:da:7b:86:9b:22:95:b0:ea:e8:e5:2a:
62:fe:3b:a0:ba:4f:3c:68:2c:d8:51:71:7e:0f:34:
58:40:4e:5e:2a:de:bc:b8:7d:f4:77:82:f5:15:e6:
2f:b9:d8:28:0c:67:48:88:c9:f8:7f:13:c2:a6:dd:
cd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:80:5A:60:8A:D7:3B:22:76:73:1E:6E:61:43:09:01:1A:F8:3D:AA
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3131312e3232332e31322e302f32322d3232203d3e203133333738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.223.12.0/22
Signature Algorithm: sha256WithRSAEncryption
11:94:46:4c:d0:d3:62:26:48:83:ad:de:66:88:9b:78:43:2c:
55:89:69:6b:d5:38:9d:fa:26:ff:73:6c:b9:e9:b5:0f:a3:e0:
9e:4b:02:55:ff:6a:1a:60:a4:bc:ea:9f:b8:e1:00:76:7a:f0:
2c:3a:47:8e:79:e7:98:54:ff:b7:10:4f:d4:49:16:fe:cc:c7:
75:7a:70:f0:b4:a7:d1:5a:b8:03:45:1e:5e:cd:60:70:0c:30:
f6:a1:1a:27:e4:60:d8:9f:3e:7f:36:af:f5:6e:65:a7:f1:51:
7b:60:46:a2:f6:f1:08:b2:37:bc:32:f5:d2:da:00:e4:62:50:
16:b0:fa:d9:94:e3:91:23:44:9d:d3:2f:48:95:99:5f:c0:2f:
de:7a:88:17:7d:43:7e:18:ae:c8:47:17:84:94:1f:ec:c5:a5:
09:d6:85:00:06:7c:0b:18:4a:a9:a3:0a:e4:32:f3:46:9d:76:
ce:34:de:f3:8b:12:2b:3b:e7:17:e5:10:70:3e:1b:e3:60:f4:
68:3e:c0:3a:bb:c3:a2:78:ed:da:6e:58:86:3e:9c:f6:75:cd:
52:c0:87:90:09:18:47:c8:33:ef:e7:73:f6:e3:7e:6b:d0:76:
83:26:68:67:2a:e9:39:af:83:df:a8:4e:ba:1a:8c:28:38:c7:
99:9f:7c:4e
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUMBJKKKrWZF7XEZIPHXd7HjAtO1cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD
MjlBMjU0RTAeFw0yNjA0MTQwNzIyNTRaFw0yNzA0MTMwNzI3NTRaMDMxMTAvBgNV
BAMTKDkzODA1QTYwOEFENzNCMjI3NjczMUU2RTYxNDMwOTAxMUFGODNEQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDTXh4SmZmq+iHuPapS6KJ53SC
dyqM5R9v1GWyqTWpRRBcIGdybiAT2j1V/BaHYiMyzb/IFXvL+d1FVKyiDLvd2bUx
eCrdmz0ripyWMy1e2Kz+xECoJof/bI5QUkiNQu7WHntottvrm26XZLRVw0Abvx0y
8dzSwyL4fzDJQ2MTRSW6LayRIzsh9q8bKUTICjwnMlSgKvvgUophV9iKej7IZi/F
/XbEdvxi8/ZU3pZ29hzLdSgqLFqh0K24gwJNT7r4GJ1Fpqnae4abIpWw6ujlKmL+
O6C6TzxoLNhRcX4PNFhATl4q3ry4ffR3gvUV5i+52CgMZ0iIyfh/E8Km3c09AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUk4BaYIrXOyJ2cx5uYUMJARr4PaowHwYDVR0j
BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw
QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDc4NTc5NS8wLzMxMzEzMTJlMzIz
MjMzMmUzMTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzEzMzMzMzczOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAm/fDDANBgkqhkiG9w0BAQsFAAOCAQEAEZRGTNDTYiZIg63eZoibeEMs
VYlpa9U4nfom/3Nsuem1D6PgnksCVf9qGmCkvOqfuOEAdnrwLDpHjnnnmFT/txBP
1EkW/szHdXpw8LSn0Vq4A0UeXs1gcAww9qEaJ+Rg2J8+fzav9W5lp/FRe2BGovbx
CLI3vDL10toA5GJQFrD62ZTjkSNEndMvSJWZX8Av3nqIF31DfhiuyEcXhJQf7MWl
CdaFAAZ8CxhKqaMK5DLzRp12zjTe84sSKzvnF+UQcD4b42D0aD7AOrvDonjt2m5Y
hj6c9nXNUsCHkAkYR8gz7+dz9uN+a9B2gyZoZyrpOa+D36hOuhqMKDjHmZ98Tg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:27:17 2026 by rpki-client