
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346995713/0/3131382e3138342e3132382e302f32312d3231203d3e20313337373032.roa
File: 3131382e3138342e3132382e302f32312d3231203d3e20313337373032.roa (raw, json)
Hash identifier: DNLg5TiXgapWfZOaVGtGTe80zdMoFa/6XxRWNFo+LUM=
Subject key identifier: 43:6E:3D:A8:28:1F:17:1F:D4:04:11:57:93:9D:0E:8B:4D:C7:6A:5D
Certificate issuer: /CN=50A5171941F715FACDCF9DD46FA674046AC02D04
Certificate serial: 23CBAAAF0451B99402A2F1650F87DA767BF7213B
Authority key identifier: 50:A5:17:19:41:F7:15:FA:CD:CF:9D:D4:6F:A6:74:04:6A:C0:2D:04
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/3131382e3138342e3132382e302f32312d3231203d3e20313337373032.roa
Signing time: Wed 15 Apr 2026 15:07:39 +0000
ROA not before: Wed 15 Apr 2026 15:02:39 +0000
ROA not after: Wed 14 Apr 2027 15:07:39 +0000
asID: 137702
IP address blocks: 118.184.128.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 04:23:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:cb:aa:af:04:51:b9:94:02:a2:f1:65:0f:87:da:76:7b:f7:21:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50A5171941F715FACDCF9DD46FA674046AC02D04
Validity
Not Before: Apr 15 15:02:39 2026 GMT
Not After : Apr 14 15:07:39 2027 GMT
Subject: CN=436E3DA8281F171FD4041157939D0E8B4DC76A5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cf:ba:e0:8b:a9:0d:09:71:78:da:92:27:2d:
ca:2e:9f:d8:4e:82:fd:eb:ca:a8:bc:2a:94:05:a0:
4e:1f:39:f2:74:30:d0:23:7f:5c:80:77:19:3e:30:
c0:6c:5d:58:eb:40:14:53:95:31:5d:32:04:b3:a8:
0a:34:1d:7f:2e:be:8b:82:fd:41:28:fc:38:37:e6:
3e:76:de:8f:ae:f0:59:85:52:bb:c5:4f:fd:24:43:
ec:e6:06:71:e2:bf:0e:cf:a7:e7:81:48:a6:05:0a:
cc:e2:c1:c6:be:d2:25:55:6d:29:ac:20:91:3a:bc:
d9:4d:56:cf:ca:fc:c5:89:67:15:bb:36:28:5c:c0:
a7:5c:b9:78:0d:b1:18:27:8b:51:90:22:fa:51:4e:
5a:c3:6f:ee:0c:e0:1e:d3:0a:13:83:30:77:b7:62:
6a:81:ee:76:e4:f6:d9:c2:ed:94:80:71:73:17:38:
8c:f2:ff:68:73:9b:52:ec:89:5a:bb:55:ed:c7:71:
45:bd:22:d9:bf:a8:db:51:f1:a0:21:40:67:52:eb:
4b:58:0f:d7:8e:e0:61:2e:e1:3b:24:26:a2:04:24:
1b:06:e8:ba:2b:b1:f4:4c:18:3b:56:b5:83:02:69:
c9:ba:9d:f8:42:67:73:03:1d:f0:97:c8:97:8f:ae:
ce:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6E:3D:A8:28:1F:17:1F:D4:04:11:57:93:9D:0E:8B:4D:C7:6A:5D
X509v3 Authority Key Identifier:
keyid:50:A5:17:19:41:F7:15:FA:CD:CF:9D:D4:6F:A6:74:04:6A:C0:2D:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/3131382e3138342e3132382e302f32312d3231203d3e20313337373032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.184.128.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:f0:f5:65:79:a6:d7:f4:7d:cd:bf:1b:51:49:d0:d8:b5:d7:
3a:99:42:59:b5:b9:a2:ff:36:8a:5a:d7:44:06:7e:40:f9:fc:
9c:83:20:39:c7:34:5c:f6:8d:7c:71:65:c4:49:44:8f:1c:ad:
8f:b7:12:24:19:ee:f8:9b:89:e2:e0:95:dd:d9:ef:bd:92:c7:
04:ea:b2:46:b5:35:53:1d:9b:ae:10:7b:72:cc:70:4a:c4:42:
61:f5:4e:e6:51:a8:f2:80:d4:93:04:96:4d:79:1c:de:da:14:
ad:64:b5:d4:6d:0c:bb:d4:c9:3d:86:f0:ea:65:af:69:b6:83:
97:57:9e:4d:d1:ff:4a:e2:a7:0a:46:c0:a8:25:51:a1:38:4e:
6b:01:75:02:5b:af:a2:cb:5d:01:bf:c7:82:a4:0b:74:b1:a3:
a2:07:ce:7b:f7:11:ed:8a:09:de:0b:35:4b:66:0f:82:12:98:
04:ae:c3:ab:80:6d:80:a9:05:35:17:e7:eb:63:11:c6:d7:3c:
5c:c4:f8:55:c0:5f:80:b6:69:58:ed:fd:02:9b:d6:d3:d1:78:
c9:0a:4d:6f:17:c8:85:d0:ad:e2:e9:a3:de:d9:88:f5:ea:74:
67:dc:f4:bd:cf:e3:5c:74:e3:a5:e8:24:c3:a3:7f:9c:8e:98:
a1:10:db:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:16:31 2026 by rpki-client