
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3231312e3136312e3232312e302f32342d3234203d3e20313331353336.roa
File: 3231312e3136312e3232312e302f32342d3234203d3e20313331353336.roa (raw, json)
Hash identifier: HJttaNOAYXD3fpbBJQqAMDoPxtoi8sq6TnfqmNGwbbI=
Subject key identifier: CA:10:38:74:21:8A:19:53:83:A8:47:3D:26:B7:16:04:57:89:6D:0F
Certificate issuer: /CN=A162689F28161D4D4C3DF339D95097D5EF647370
Certificate serial: 4126A4F93DEB629FEC867E8ED6A066252B7FB9CB
Authority key identifier: A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3231312e3136312e3232312e302f32342d3234203d3e20313331353336.roa
Signing time: Thu 11 Jun 2026 04:33:31 +0000
ROA not before: Thu 11 Jun 2026 04:28:31 +0000
ROA not after: Thu 10 Jun 2027 04:33:31 +0000
asID: 131536
IP address blocks: 211.161.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:26:a4:f9:3d:eb:62:9f:ec:86:7e:8e:d6:a0:66:25:2b:7f:b9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A162689F28161D4D4C3DF339D95097D5EF647370
Validity
Not Before: Jun 11 04:28:31 2026 GMT
Not After : Jun 10 04:33:31 2027 GMT
Subject: CN=CA103874218A195383A8473D26B7160457896D0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cf:31:b3:5b:b8:19:d1:3c:73:fe:0d:14:ec:
87:45:f7:08:51:a8:88:62:30:d3:cb:0b:34:e2:d0:
e9:4d:98:ef:ec:81:4d:7a:fa:2d:a2:f4:ee:9a:14:
7c:51:4c:cf:cf:27:5b:00:22:6f:89:ed:e9:7f:73:
70:41:63:dc:fd:73:59:a4:f2:3c:cf:49:98:8e:b0:
e6:9a:54:8e:16:25:d2:fc:37:cc:a2:65:54:76:59:
49:c6:e9:9e:56:e5:a6:da:4e:db:7c:38:45:16:90:
90:f2:f3:a3:13:bc:3e:a0:68:42:c6:23:e0:eb:f3:
5a:40:cf:3d:10:56:c8:6a:b8:2d:d3:2b:48:6d:a1:
3e:3e:91:2a:da:8a:a5:3d:3e:75:7c:1c:c3:c4:4a:
f2:c8:ee:bd:77:a0:39:c4:e0:27:f0:4b:6d:92:c4:
e2:d5:c5:73:3f:8d:14:be:56:b7:21:6b:e0:cc:75:
80:fb:c8:14:f5:e0:ed:56:35:a6:c3:8f:04:32:7f:
c2:4b:8a:cb:fc:8d:c6:9a:9a:f5:89:ee:58:3e:74:
28:18:4c:57:2d:df:a3:db:79:e2:30:85:4b:68:58:
26:48:c6:5e:ad:48:f1:d7:92:e1:79:0e:c1:7a:f6:
9f:f4:f1:95:87:08:de:dd:8c:5a:31:63:87:a7:2c:
5e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:10:38:74:21:8A:19:53:83:A8:47:3D:26:B7:16:04:57:89:6D:0F
X509v3 Authority Key Identifier:
keyid:A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3231312e3136312e3232312e302f32342d3234203d3e20313331353336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.161.221.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:de:0e:a7:57:94:3c:a3:cf:e7:4e:2c:8b:bd:03:78:1d:ed:
c3:f1:9e:a9:29:96:64:5e:6f:86:1a:61:f3:32:1b:72:a0:4c:
d9:13:57:35:a6:5d:b5:77:97:9f:83:fb:af:46:dd:d9:95:da:
de:6e:5c:9e:cc:3e:50:14:e9:e1:ec:af:28:ff:cc:42:b2:4f:
3c:21:4e:d4:06:90:a7:03:92:49:e5:4b:9c:e4:39:4d:33:5b:
4b:1d:9d:4e:bc:68:66:80:dd:85:d8:44:d5:86:32:0c:ff:32:
d5:7a:4f:52:2f:22:f7:76:4f:fc:39:fa:e5:49:94:4f:e0:79:
22:c2:24:01:40:0b:33:c3:a3:78:a1:82:b8:00:ef:ed:78:c5:
99:33:1e:09:b0:05:bc:0a:d9:94:bc:d8:18:84:b8:9f:1e:d6:
54:09:33:d3:51:78:60:ae:23:cc:51:15:f0:c8:16:ac:6c:df:
4b:ac:45:2e:a4:e1:2c:f3:b9:6c:ae:72:bc:01:cb:2a:84:9c:
0a:60:10:0a:9e:f9:0a:92:1b:64:77:52:bb:cc:59:84:44:4e:
41:6d:c3:cd:d2:49:83:0c:b7:26:ea:e1:73:d9:ce:3b:a2:80:
70:3f:f5:f6:5a:55:33:2c:40:a1:73:9c:4d:35:30:12:69:63:
07:9b:50:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:51:52 2026 by rpki-client