
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3131312e3232332e31322e302f32322d3232203d3e203536303436.roa
File: 3131312e3232332e31322e302f32322d3232203d3e203536303436.roa (raw, json)
Hash identifier: 1uXgwSQpOOXIpjCSuq7v7q6EV6y3epDpSiwPZ4KfmcQ=
Subject key identifier: 3A:5F:29:FB:9D:48:F8:81:DE:39:8E:70:BD:05:C9:3E:55:02:33:80
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 71617B57E7919EAC48CBF9EDCA9053281DA10EF0
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3131312e3232332e31322e302f32322d3232203d3e203536303436.roa
Signing time: Tue 14 Apr 2026 07:28:17 +0000
ROA not before: Tue 14 Apr 2026 07:23:17 +0000
ROA not after: Tue 13 Apr 2027 07:28:17 +0000
asID: 56046
IP address blocks: 111.223.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:61:7b:57:e7:91:9e:ac:48:cb:f9:ed:ca:90:53:28:1d:a1:0e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Apr 14 07:23:17 2026 GMT
Not After : Apr 13 07:28:17 2027 GMT
Subject: CN=3A5F29FB9D48F881DE398E70BD05C93E55023380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:90:ed:76:aa:5b:30:54:00:21:4c:e7:9f:95:
b7:96:27:92:d5:0f:93:32:2a:dd:91:20:85:c9:2f:
1f:2b:ab:15:31:ff:fb:f6:3c:bd:a8:c6:81:00:cd:
4f:3d:c2:c7:7b:9d:7d:a3:7f:cb:a1:b3:12:d7:93:
a8:35:ea:42:69:36:5c:0c:00:6f:b0:3b:89:0d:cf:
88:c4:90:d3:b7:ad:e3:f1:ee:b4:c0:54:a3:23:09:
6c:a5:09:e7:79:bc:2f:a5:b0:c6:f3:20:71:9e:70:
9b:66:fa:f0:11:87:16:9e:4b:00:df:9d:27:c7:0d:
c3:6a:21:ae:ed:d6:3c:f8:31:6a:21:11:6d:e4:69:
97:47:de:22:c8:4d:fd:be:c4:34:42:1b:80:01:12:
c0:e0:6d:f9:38:74:d5:54:45:6e:d2:3c:b3:6f:55:
95:b9:52:ef:43:68:55:96:eb:dc:95:d6:4e:eb:2c:
9a:b6:8e:f3:03:d9:cc:b3:43:ae:b6:bb:4d:59:7f:
17:0e:89:81:10:af:70:4a:27:2d:65:06:2d:a2:da:
5b:6c:45:22:54:9d:94:96:f6:0d:b7:74:64:76:9a:
a0:f2:07:6c:52:ee:a7:53:bc:69:72:99:ef:d5:ef:
c3:97:93:c9:fe:55:d6:e5:a2:a5:1b:57:e1:28:99:
6f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5F:29:FB:9D:48:F8:81:DE:39:8E:70:BD:05:C9:3E:55:02:33:80
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3131312e3232332e31322e302f32322d3232203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.223.12.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:0a:43:0d:a5:b8:f0:ab:5f:76:43:d6:0b:cb:3d:04:c9:92:
5f:81:fd:6b:ce:43:1b:c2:f9:d7:b5:ab:64:50:d5:9a:c7:fc:
fb:e8:34:45:4f:89:8a:91:d8:45:5b:1e:bd:1a:41:6d:0f:40:
8f:14:7d:d9:42:04:c4:32:de:21:7e:b5:c0:75:9a:5b:d0:b5:
cf:3d:bd:81:1a:5e:5b:e5:37:54:d1:3d:83:94:19:4a:19:ac:
64:b3:48:1f:b0:fe:1e:99:14:e7:58:85:65:bb:cf:8f:aa:90:
4d:b2:0a:a6:d8:f5:25:5f:97:fc:69:f5:2e:78:cb:2a:ca:5e:
b4:0d:35:08:03:96:e7:0a:a9:36:95:12:38:d0:ff:7d:52:95:
0c:33:ac:bc:a5:26:f1:1d:c7:7e:16:40:bb:7f:38:43:70:52:
ec:54:71:60:82:1b:4e:64:65:25:38:bb:57:6a:1f:fd:a0:72:
05:80:d6:4c:1e:40:c3:bb:6d:4b:8e:82:f9:73:0d:cc:ff:cb:
9b:71:dd:b9:53:e9:39:c1:fa:56:a2:40:16:83:c0:30:01:dc:
06:af:ed:39:ca:07:1d:36:8a:6b:f2:64:4a:71:bd:92:3a:e5:
72:19:fe:42:85:f6:ea:49:fc:37:5d:50:a4:ee:f3:71:ca:06:
1a:91:d9:88
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:21:04 2026 by rpki-client