
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3135352e302f32342d3234203d3e203633363331.roa
File: 3131392e3136312e3135352e302f32342d3234203d3e203633363331.roa (raw, json)
Hash identifier: x+ksNF78CQTw/L4V1wT8nZZBF8Nz+W+s1SYOjKA6wdo=
Subject key identifier: 68:CA:46:3A:1E:73:F4:EB:85:DA:31:9F:19:08:32:C5:95:8F:7F:BA
Certificate issuer: /CN=D9EB5C6DC17682949F5243587DA38740C3EEA953
Certificate serial: 5C26E4E3B6688C3AC3A62E52F8123CED25075ED7
Authority key identifier: D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3135352e302f32342d3234203d3e203633363331.roa
Signing time: Thu 16 Apr 2026 07:16:02 +0000
ROA not before: Thu 16 Apr 2026 07:11:02 +0000
ROA not after: Thu 15 Apr 2027 07:16:02 +0000
asID: 63631
IP address blocks: 119.161.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 08:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:26:e4:e3:b6:68:8c:3a:c3:a6:2e:52:f8:12:3c:ed:25:07:5e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9EB5C6DC17682949F5243587DA38740C3EEA953
Validity
Not Before: Apr 16 07:11:02 2026 GMT
Not After : Apr 15 07:16:02 2027 GMT
Subject: CN=68CA463A1E73F4EB85DA319F190832C5958F7FBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:10:62:05:3f:42:d8:12:11:47:04:4c:63:50:
12:79:24:3e:01:f7:a0:7b:bb:ee:53:a1:f8:d5:fa:
ae:7f:65:e5:88:8d:78:80:ee:f6:2a:ef:21:8a:fc:
ce:4b:a5:40:e0:68:13:e2:0c:cc:9d:dd:29:a5:93:
8f:22:f4:a4:20:71:d1:34:2b:d6:26:16:90:1c:5f:
bd:b8:ee:b2:62:41:17:d1:5d:c3:a5:32:6a:31:e6:
9c:4e:c0:d4:f5:04:1e:5e:39:e8:52:fc:e4:b1:4f:
47:15:0a:aa:ee:14:89:5f:af:63:50:08:cf:68:70:
7c:8c:b0:4b:06:6c:10:f1:b1:d6:8e:33:15:f8:7e:
ba:fe:26:58:07:1e:63:1b:2d:16:b9:4f:16:15:8e:
d5:56:6c:bb:95:eb:06:3a:6f:f8:4a:ff:bd:8b:2d:
39:91:eb:f0:2b:91:4a:19:d5:57:86:55:bf:3f:86:
a5:b7:d3:c6:d3:20:c2:d8:62:c4:ec:8b:2b:38:4d:
cd:6b:ba:1a:49:e6:e7:ea:21:a2:59:1c:16:d5:c7:
c5:54:cd:3c:00:ed:6b:28:be:33:d3:c6:63:07:30:
d3:62:2f:f4:72:47:4e:91:10:f0:cb:82:15:f3:60:
63:ee:b0:9d:52:6b:c9:5c:65:2d:d5:76:1d:ca:d0:
3d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CA:46:3A:1E:73:F4:EB:85:DA:31:9F:19:08:32:C5:95:8F:7F:BA
X509v3 Authority Key Identifier:
keyid:D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3135352e302f32342d3234203d3e203633363331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.161.155.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:6a:be:08:67:08:2e:e7:c2:c9:6a:1e:ae:d8:63:6d:ef:bb:
7c:ad:c1:66:eb:b6:be:69:d4:60:6d:3e:8b:1e:6a:74:1d:a3:
9f:24:d6:e7:15:19:78:af:0b:00:13:81:f6:6e:4f:8b:9a:99:
2c:e9:6b:b4:5b:b2:75:f9:83:83:57:62:a3:3b:d0:74:f8:fb:
55:38:85:a1:c2:83:54:55:41:b8:06:96:d2:a7:63:5d:31:2d:
2f:81:39:bd:2f:c1:2a:6c:0f:4e:ad:25:6a:a2:e9:3a:f2:d3:
f3:a9:7d:e1:4e:b3:7e:f9:ea:83:93:3a:a4:5d:1a:f4:8f:42:
6c:49:5b:38:84:d3:9f:98:f0:27:6b:94:32:0c:c0:cd:d6:e1:
12:40:94:a4:3c:a3:b9:57:00:cc:ac:ea:2a:a3:be:de:02:b9:
3d:e0:b5:75:2a:aa:93:25:25:c5:9b:6b:f3:46:ff:8b:04:1b:
c2:a9:fe:3b:85:c1:13:ef:16:56:c1:1c:44:2d:01:e9:8e:11:
27:5c:c7:d3:68:2b:cc:02:f9:8d:24:ad:5d:d2:a6:7a:db:c0:
79:b3:2e:0a:62:88:1f:0a:bf:88:a0:63:6f:4d:06:ba:b2:33:
f7:7a:9d:84:b5:2b:b9:e3:4c:67:ce:53:de:e1:05:7c:df:7c:
7b:da:09:9a
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUXCbk47ZojDrDpi5S+BI87SUHXtcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDlFQjVDNkRDMTc2ODI5NDlGNTI0MzU4N0RBMzg3NDBD
M0VFQTk1MzAeFw0yNjA0MTYwNzExMDJaFw0yNzA0MTUwNzE2MDJaMDMxMTAvBgNV
BAMTKDY4Q0E0NjNBMUU3M0Y0RUI4NURBMzE5RjE5MDgzMkM1OTU4RjdGQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAEGIFP0LYEhFHBExjUBJ5JD4B
96B7u+5TofjV+q5/ZeWIjXiA7vYq7yGK/M5LpUDgaBPiDMyd3Smlk48i9KQgcdE0
K9YmFpAcX7247rJiQRfRXcOlMmox5pxOwNT1BB5eOehS/OSxT0cVCqruFIlfr2NQ
CM9ocHyMsEsGbBDxsdaOMxX4frr+JlgHHmMbLRa5TxYVjtVWbLuV6wY6b/hK/72L
LTmR6/ArkUoZ1VeGVb8/hqW308bTIMLYYsTsiys4Tc1ruhpJ5ufqIaJZHBbVx8VU
zTwA7WsovjPTxmMHMNNiL/RyR06REPDLghXzYGPusJ1Sa8lcZS3Vdh3K0D2/AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUaMpGOh5z9OuF2jGfGQgyxZWPf7owHwYDVR0j
BBgwFoAU2etcbcF2gpSfUkNYfaOHQMPuqVMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MjMzMDM0Njg2NDY0MS8wL0Q5RUI1QzZEQzE3NjgyOTQ5RjUyNDM1ODdEQTM4
NzQwQzNFRUE5NTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRDlFQjVDNkRDMTc2ODI5NDlGNTI0MzU4N0RBMzg3NDBDM0VFQTk1My5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDY4NjQ2NDEvMC8zMTMxMzkyZTMx
MzYzMTJlMzEzNTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzMzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAHehmzANBgkqhkiG9w0BAQsFAAOCAQEAoGq+CGcILufCyWoerthj
be+7fK3BZuu2vmnUYG0+ix5qdB2jnyTW5xUZeK8LABOB9m5Pi5qZLOlrtFuydfmD
g1diozvQdPj7VTiFocKDVFVBuAaW0qdjXTEtL4E5vS/BKmwPTq0laqLpOvLT86l9
4U6zfvnqg5M6pF0a9I9CbElbOITTn5jwJ2uUMgzAzdbhEkCUpDyjuVcAzKzqKqO+
3gK5PeC1dSqqkyUlxZtr80b/iwQbwqn+O4XBE+8WVsEcRC0B6Y4RJ1zH02grzAL5
jSStXdKmetvAebMuCmKIHwq/iKBjb00GurIz93qdhLUrueNMZ85T3uEFfN98e9oJ
mg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:24:24 2026 by rpki-client