
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3131312e3232332e31322e302f32322d3232203d3e2034383337.roa
File: 3131312e3232332e31322e302f32322d3232203d3e2034383337.roa (raw, json)
Hash identifier: 7L65d3NUCsavOk08fi048GZkIGHybVqFzU8Y4+1K4Ss=
Subject key identifier: 72:48:8B:84:89:C3:79:74:5F:21:67:67:DD:77:7D:13:63:46:48:2B
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 674838869E248E8545CABD768EE06DD31CC467FB
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3131312e3232332e31322e302f32322d3232203d3e2034383337.roa
Signing time: Tue 14 Apr 2026 07:27:54 +0000
ROA not before: Tue 14 Apr 2026 07:22:54 +0000
ROA not after: Tue 13 Apr 2027 07:27:54 +0000
asID: 4837
IP address blocks: 111.223.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 15:57:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:48:38:86:9e:24:8e:85:45:ca:bd:76:8e:e0:6d:d3:1c:c4:67:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Apr 14 07:22:54 2026 GMT
Not After : Apr 13 07:27:54 2027 GMT
Subject: CN=72488B8489C379745F216767DD777D136346482B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d1:8d:b5:ba:03:05:2b:09:af:27:2a:68:6c:
9e:20:1e:a1:04:df:eb:3e:f8:f3:a6:5e:d9:fb:e9:
c9:8b:5a:d1:70:bb:08:da:5b:57:bd:97:8e:3b:c8:
11:4f:6b:ec:7a:97:4b:da:72:7a:df:2e:93:d5:92:
5b:4d:c4:73:ff:ba:1c:09:27:18:d1:a1:b1:bf:84:
07:7e:a0:2f:98:6b:70:91:24:f6:38:18:76:f6:76:
d5:31:2b:83:d2:04:0b:b4:e7:b0:fe:44:4c:07:90:
16:99:7d:9a:64:b6:c7:5a:ea:b0:07:c8:c7:8f:89:
06:3b:45:4c:e7:0c:ac:47:bf:3e:56:d9:dc:90:9e:
98:da:66:7b:4e:d9:be:fa:14:16:28:03:e3:25:0d:
dd:ea:93:b0:e2:3f:1d:2d:10:3b:31:41:c9:d9:18:
57:cb:15:8f:75:03:3e:c0:2f:d6:f9:92:31:8e:b0:
c4:af:21:04:f5:0a:8b:5b:ce:2c:8c:8f:1e:21:6f:
b1:a2:98:34:61:e1:ca:67:56:2d:d5:2a:5b:5f:d9:
e8:6f:7e:03:77:fe:3d:68:43:58:5d:38:b9:6e:c7:
97:68:76:04:b9:12:a8:af:f5:e8:c9:56:14:44:88:
49:c4:09:6b:17:b5:cf:65:61:47:6b:77:e1:e9:ad:
43:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:48:8B:84:89:C3:79:74:5F:21:67:67:DD:77:7D:13:63:46:48:2B
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3131312e3232332e31322e302f32322d3232203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.223.12.0/22
Signature Algorithm: sha256WithRSAEncryption
11:97:f9:7c:27:64:bb:8f:d9:58:0c:3e:8c:4a:90:07:fe:44:
06:b8:14:be:d7:0a:ce:f3:c3:bc:24:39:c5:0b:ec:5d:a7:b0:
3f:7a:37:40:23:af:01:e8:1c:b0:ce:63:22:6c:bb:83:03:43:
7c:6a:bd:f1:13:6c:6f:a7:7d:0b:bc:40:de:a6:60:5a:e6:22:
12:5f:0a:d3:c3:c3:f3:80:49:08:ff:14:a3:57:91:bb:6f:d1:
de:6c:45:d9:11:19:8d:85:d6:ab:e1:98:fc:cb:94:fa:69:72:
3c:31:65:76:74:ca:eb:df:e4:c9:8a:d1:ce:10:7f:06:5a:65:
97:18:51:10:ec:5a:22:50:4a:98:ff:6d:cb:e5:c6:9e:7d:44:
7d:c3:04:72:7d:22:92:46:85:ee:cc:b7:2b:03:47:0e:14:3a:
8d:50:94:49:fe:f3:88:d6:f3:3f:dc:6f:69:1f:34:79:14:f4:
41:0e:4e:3d:17:b8:59:35:ed:4a:ff:ee:de:89:60:39:a2:02:
dc:2a:09:91:3f:86:6a:cc:ee:3c:b2:ac:2c:28:dc:5e:9d:67:
1a:ab:54:c0:5e:f1:de:ec:38:ad:31:f2:1a:8a:24:d8:de:7c:
32:9e:67:af:2a:53:1e:cb:60:2c:a8:59:d2:c8:74:8c:5f:83:
92:02:6b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:49:20 2026 by rpki-client