
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3138302e3231302e3231332e302f32342d3234203d3e20313531323936.roa
File: 3138302e3231302e3231332e302f32342d3234203d3e20313531323936.roa (raw, json)
Hash identifier: C0d3z/h2xZArU3nIXTv17UgDFlRUkyUCv/MWm5pTpOs=
Subject key identifier: 39:4F:63:30:C1:25:95:97:E8:19:8F:B1:77:7C:AA:19:AF:EB:65:21
Certificate issuer: /CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Certificate serial: 63E6E5875378B36536F07A41FA2952441FB79CEF
Authority key identifier: 79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3138302e3231302e3231332e302f32342d3234203d3e20313531323936.roa
Signing time: Fri 17 Apr 2026 07:55:48 +0000
ROA not before: Fri 17 Apr 2026 07:50:48 +0000
ROA not after: Fri 16 Apr 2027 07:55:48 +0000
asID: 151296
IP address blocks: 180.210.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:e6:e5:87:53:78:b3:65:36:f0:7a:41:fa:29:52:44:1f:b7:9c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Validity
Not Before: Apr 17 07:50:48 2026 GMT
Not After : Apr 16 07:55:48 2027 GMT
Subject: CN=394F6330C1259597E8198FB1777CAA19AFEB6521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a5:ce:6c:5a:93:d7:1b:43:06:cd:47:93:5d:
6f:c7:10:d6:10:3b:b2:30:d5:4a:71:89:17:53:ec:
76:3a:26:aa:a3:62:43:25:f9:3a:35:0b:2d:d5:ec:
27:28:71:d5:02:46:77:10:67:9f:8b:7b:db:3b:a3:
fc:51:74:11:3e:40:48:74:30:5c:6a:c3:09:11:60:
67:cc:8f:04:ea:dc:44:9e:cf:39:84:c4:2f:97:32:
1f:1e:48:54:4c:d4:03:87:6d:f7:1e:1d:0f:2d:96:
fe:bc:89:85:f4:fd:01:c4:67:f1:43:5e:7b:67:28:
2d:14:ff:f8:92:46:c8:67:dc:b6:ba:e5:19:a6:03:
ca:29:0a:90:0a:82:62:33:10:64:43:ec:ca:04:97:
07:72:cd:31:ca:8e:a3:6a:ea:b1:cd:2c:99:4f:26:
a8:f3:7c:4a:63:67:e2:5b:d3:b8:8b:9d:9d:71:b6:
bc:c9:9b:10:2f:9e:2e:03:eb:67:9f:a4:ac:b0:9e:
64:e1:48:ab:10:4b:90:3a:46:25:91:51:31:25:05:
06:39:37:f2:b4:c2:82:ea:7e:5f:30:9b:6c:38:c6:
c2:ca:c8:66:82:4c:81:24:99:ac:46:46:42:80:4b:
f7:2a:3e:18:5d:89:00:ba:fa:44:f0:ea:3a:22:f8:
c8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4F:63:30:C1:25:95:97:E8:19:8F:B1:77:7C:AA:19:AF:EB:65:21
X509v3 Authority Key Identifier:
keyid:79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3138302e3231302e3231332e302f32342d3234203d3e20313531323936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.210.213.0/24
Signature Algorithm: sha256WithRSAEncryption
41:6d:96:51:db:db:09:2e:e1:28:b7:16:d4:ad:96:7d:d0:3f:
1c:20:c1:86:9c:fb:3f:1e:4c:89:10:0e:92:03:fd:ab:a0:bc:
7f:31:25:9b:d6:46:f8:1a:46:a2:de:d7:1c:5d:5e:dd:29:a0:
c3:27:29:96:bb:1e:a1:f9:41:57:d4:f4:92:ba:21:19:55:fd:
e4:8e:92:fa:78:28:1e:56:67:0a:17:ff:d0:e8:d1:e3:08:78:
95:03:bf:b9:65:7b:ba:30:34:28:a4:d0:0c:23:d1:6b:4a:d4:
fd:46:17:ef:0c:77:da:42:2c:e0:4a:da:fc:4c:a4:b7:93:78:
71:f3:a1:cc:e3:e7:6c:ba:14:9b:6a:c0:26:76:36:76:89:82:
16:39:2e:8b:66:e5:b0:b0:90:92:4d:6c:1d:ac:26:27:33:c9:
e8:ad:2d:d5:2a:5f:77:b5:83:20:a3:f2:0f:7e:12:70:02:f2:
8a:7a:52:3c:63:4d:9d:c0:d5:e1:f3:95:ac:d6:25:b5:80:80:
b5:f2:73:09:30:82:2e:05:69:d9:cf:87:72:0c:8c:80:3b:0c:
01:3b:5e:f9:7e:b9:ef:b6:4f:5b:d4:36:2b:51:27:32:88:64:
3d:25:ca:5a:ab:89:e3:0a:d9:74:fc:40:70:33:08:ef:3a:b7:
22:cb:e5:c2
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUY+blh1N4s2U28HpB+ilSRB+3nO8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlBQ0NBRDQ0OTE1MjlFREEzODE3MEYzNEE1ODg0RDJB
MEY0MzJCRjAeFw0yNjA0MTcwNzUwNDhaFw0yNzA0MTYwNzU1NDhaMDMxMTAvBgNV
BAMTKDM5NEY2MzMwQzEyNTk1OTdFODE5OEZCMTc3N0NBQTE5QUZFQjY1MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYpc5sWpPXG0MGzUeTXW/HENYQ
O7Iw1UpxiRdT7HY6JqqjYkMl+To1Cy3V7CcocdUCRncQZ5+Le9s7o/xRdBE+QEh0
MFxqwwkRYGfMjwTq3ESezzmExC+XMh8eSFRM1AOHbfceHQ8tlv68iYX0/QHEZ/FD
XntnKC0U//iSRshn3La65RmmA8opCpAKgmIzEGRD7MoElwdyzTHKjqNq6rHNLJlP
JqjzfEpjZ+Jb07iLnZ1xtrzJmxAvni4D62efpKywnmThSKsQS5A6RiWRUTElBQY5
N/K0woLqfl8wm2w4xsLKyGaCTIEkmaxGRkKAS/cqPhhdiQC6+kTw6joi+MjpAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUOU9jMMEllZfoGY+xd3yqGa/rZSEwHwYDVR0j
BBgwFoAUeazK1EkVKe2jgXDzSliE0qD0Mr8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDg4MTAyNS8wLzc5QUNDQUQ0NDkxNTI5RURBMzgxNzBGMzRBNTg4
NEQyQTBGNDMyQkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzlBQ0NBRDQ0OTE1MjlFREEzODE3MEYzNEE1ODg0RDJBMEY0MzJCRi5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0ODgxMDI1LzAvMzEzODMwMmUz
MjMxMzAyZTMyMzEzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzkz
Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALTS1TANBgkqhkiG9w0BAQsFAAOCAQEAQW2WUdvbCS7hKLcW
1K2WfdA/HCDBhpz7Px5MiRAOkgP9q6C8fzElm9ZG+BpGot7XHF1e3Smgwycplrse
oflBV9T0krohGVX95I6S+ngoHlZnChf/0OjR4wh4lQO/uWV7ujA0KKTQDCPRa0rU
/UYX7wx32kIs4Era/Eykt5N4cfOhzOPnbLoUm2rAJnY2domCFjkui2blsLCQkk1s
HawmJzPJ6K0t1Spfd7WDIKPyD34ScALyinpSPGNNncDV4fOVrNYltYCAtfJzCTCC
LgVp2c+HcgyMgDsMATte+X6577ZPW9Q2K1EnMohkPSXKWquJ4wrZdPxAcDMI7zq3
Isvlwg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:32:21 2026 by rpki-client