
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3231312e3136312e3230332e302f32342d3234203d3e20313331353336.roa
File: 3231312e3136312e3230332e302f32342d3234203d3e20313331353336.roa (raw, json)
Hash identifier: EUY+yW80diYWVuOiJtIlBhTG+YWMpD67vHScGqyUTZg=
Subject key identifier: C7:7A:41:4D:59:23:EC:0B:06:19:7E:61:54:B9:F6:FE:48:90:BC:6D
Certificate issuer: /CN=A162689F28161D4D4C3DF339D95097D5EF647370
Certificate serial: 6D515310DBBB4996A7A4C52DC032062C866DFC31
Authority key identifier: A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3231312e3136312e3230332e302f32342d3234203d3e20313331353336.roa
Signing time: Thu 11 Jun 2026 04:33:31 +0000
ROA not before: Thu 11 Jun 2026 04:28:31 +0000
ROA not after: Thu 10 Jun 2027 04:33:31 +0000
asID: 131536
IP address blocks: 211.161.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:51:53:10:db:bb:49:96:a7:a4:c5:2d:c0:32:06:2c:86:6d:fc:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A162689F28161D4D4C3DF339D95097D5EF647370
Validity
Not Before: Jun 11 04:28:31 2026 GMT
Not After : Jun 10 04:33:31 2027 GMT
Subject: CN=C77A414D5923EC0B06197E6154B9F6FE4890BC6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fb:61:d7:3e:54:8c:bb:79:f7:12:20:0f:9e:
fe:51:7b:dc:21:5b:61:90:cb:73:22:d8:11:7e:ff:
36:84:80:96:ac:41:f0:0a:43:83:9e:86:ca:03:94:
af:46:0e:31:a0:33:c5:39:4a:5a:ff:6d:84:46:0c:
ec:98:f1:a1:2a:8f:c6:73:66:61:82:1e:80:cd:2b:
f5:37:35:4f:d1:ae:f7:90:14:6a:50:b8:fb:66:e5:
65:25:eb:b3:99:d0:f8:5d:67:26:58:b6:c2:9e:16:
4d:8b:5e:6c:e5:5f:8d:76:e4:87:fa:6a:79:9c:b4:
0d:aa:f1:5c:19:00:ba:22:ce:5e:59:38:fb:60:eb:
97:2f:2c:61:e5:28:3f:b5:9e:5c:7c:dd:31:50:23:
4e:36:47:a2:13:2a:4c:a4:85:0c:62:93:99:09:96:
ca:b1:e2:ad:e0:a8:51:91:11:79:9b:0b:06:9b:b7:
6f:bb:3d:97:c7:76:76:fd:e4:c5:4a:64:b9:da:f1:
f8:fa:d8:97:19:f5:f1:96:60:0f:b9:eb:73:54:61:
22:d4:0a:63:a8:d4:52:c1:07:30:16:bb:1c:76:de:
7f:6b:a2:75:7b:d2:6e:02:53:bd:e9:aa:5a:1c:93:
ed:02:e0:1e:ab:2d:1b:4d:70:b5:5a:15:1c:b4:ee:
11:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7A:41:4D:59:23:EC:0B:06:19:7E:61:54:B9:F6:FE:48:90:BC:6D
X509v3 Authority Key Identifier:
keyid:A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3231312e3136312e3230332e302f32342d3234203d3e20313331353336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.161.203.0/24
Signature Algorithm: sha256WithRSAEncryption
06:74:cb:42:7e:a1:b6:04:e5:64:a3:db:f2:b6:c6:10:92:1f:
70:27:57:4f:ef:54:bc:4f:93:38:22:ab:5d:43:64:04:7d:b9:
fa:12:80:71:e1:d2:f9:60:bf:d1:1e:7a:cd:e0:08:d5:46:68:
31:1d:2f:28:0c:d6:22:9c:ac:9b:2d:37:61:42:ff:7d:82:99:
1d:dd:e9:21:6e:29:58:0f:d7:a2:0b:bb:4b:0a:44:b9:90:a8:
03:b6:0c:9c:b4:d4:0b:f1:8c:7b:21:40:3a:33:03:86:4d:da:
59:24:65:b9:bc:1c:1e:60:f3:e2:f6:9c:3d:56:5e:3c:ad:fc:
6d:5f:f8:ea:0e:41:df:8e:e0:a5:38:8d:d3:e7:ac:ac:30:f3:
a1:2b:c6:a9:5c:3b:48:db:28:5a:73:ab:63:a4:82:cd:c6:34:
af:e7:a5:d2:a7:10:a5:16:e6:fe:6f:8c:2e:e2:cd:ee:40:e2:
16:c5:55:4b:0f:f9:d3:60:64:44:7a:0d:4a:4c:04:3d:6f:ec:
4a:55:4c:06:49:78:97:e5:bd:ca:9f:5d:91:a9:35:08:1a:c2:
eb:75:17:ab:4c:42:bf:a3:07:51:5a:c9:be:05:56:f2:13:21:
f0:c3:4f:3a:0b:f3:c0:a2:97:37:82:04:67:65:eb:5d:eb:28:
37:d4:d1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:51:58 2026 by rpki-client