
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347388929/0/3131362e3139392e3135322e302f32322d3232203d3e20313436383334.roa
File: 3131362e3139392e3135322e302f32322d3232203d3e20313436383334.roa (raw, json)
Hash identifier: IdMIH3y+HHsm4+d7ESvMntfPnsJBJ8L31r1CJc4f2Bo=
Subject key identifier: 4B:E9:03:83:21:0D:C2:7F:97:F8:E1:EB:DE:3F:EA:73:68:B9:72:5C
Certificate issuer: /CN=E23C4800CA452B1A8E6214923C01540E30830232
Certificate serial: 3303D54DFDB62156A4E6AC2B81F86C55AF33B51E
Authority key identifier: E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/3131362e3139392e3135322e302f32322d3232203d3e20313436383334.roa
Signing time: Thu 16 Apr 2026 06:00:57 +0000
ROA not before: Thu 16 Apr 2026 05:55:57 +0000
ROA not after: Thu 15 Apr 2027 06:00:57 +0000
asID: 146834
IP address blocks: 116.199.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:03:d5:4d:fd:b6:21:56:a4:e6:ac:2b:81:f8:6c:55:af:33:b5:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E23C4800CA452B1A8E6214923C01540E30830232
Validity
Not Before: Apr 16 05:55:57 2026 GMT
Not After : Apr 15 06:00:57 2027 GMT
Subject: CN=4BE90383210DC27F97F8E1EBDE3FEA7368B9725C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:59:c0:5c:60:c7:9e:63:a9:a6:22:45:4f:74:
4c:22:78:e0:12:d9:55:d1:95:45:15:b3:4d:02:85:
a5:a8:11:e5:09:21:ac:f5:a3:3f:08:34:1a:de:23:
5e:53:48:d5:2c:38:39:51:a2:ed:87:45:f3:1c:97:
07:7d:34:7c:25:be:37:de:35:eb:9c:51:ee:00:fc:
b2:9f:63:b3:98:39:32:d7:c1:c4:a4:fe:5d:64:4c:
8f:d6:57:60:7e:d3:4c:4c:6a:7e:f3:3b:6a:c2:2d:
c3:22:55:82:d2:3b:79:82:2b:52:c0:99:3d:da:a6:
24:6d:3b:02:73:63:16:d4:6c:1c:84:e0:c6:00:73:
7f:03:52:55:71:f6:10:18:49:7c:d7:82:9d:64:be:
70:e4:62:eb:35:3c:0d:0a:be:d6:8d:6a:2a:e9:eb:
49:81:ff:d3:09:06:70:76:4d:2a:b6:82:22:9b:b1:
a4:3f:e9:81:2c:b6:bc:08:6e:1d:f3:b6:22:3a:15:
39:87:c3:a2:9c:56:d1:a6:3f:49:b4:cc:25:2c:36:
6c:45:ec:08:94:c6:02:3b:c6:a2:8c:cf:ca:5c:86:
29:3d:be:a9:2f:9f:ef:6f:da:20:79:1e:6d:34:aa:
b7:b7:a3:ec:77:97:af:d8:2f:e1:73:96:31:ad:60:
68:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E9:03:83:21:0D:C2:7F:97:F8:E1:EB:DE:3F:EA:73:68:B9:72:5C
X509v3 Authority Key Identifier:
keyid:E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/3131362e3139392e3135322e302f32322d3232203d3e20313436383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.199.152.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:7d:9b:db:25:10:62:55:9a:15:44:b0:e2:0e:33:b0:10:b8:
88:59:5f:4d:8f:a0:43:85:c5:ab:40:11:23:b1:30:a3:b8:bc:
21:af:eb:43:67:45:3d:3a:cf:17:5f:7d:b3:5c:e1:ed:c1:8f:
1b:a9:55:46:7a:71:71:df:ed:a2:0d:10:0c:f0:c0:94:61:9b:
6b:34:53:aa:e8:7a:49:04:17:93:97:17:4a:76:dd:bc:ce:a1:
72:b8:e4:ff:c7:8c:b2:6d:a8:44:4b:80:68:4a:8e:39:64:40:
21:52:76:ef:f6:a7:63:7e:c3:27:05:28:50:fa:32:72:11:c8:
4a:db:10:b6:9f:45:28:ff:6a:68:0b:f5:ba:82:03:b7:6a:da:
14:e1:c3:1a:d9:9a:6e:a4:ff:69:f3:53:55:c9:4f:84:64:d1:
c1:ef:80:4f:03:11:07:fd:b0:58:86:81:fc:ce:13:3a:5b:3e:
ba:e9:48:85:18:f4:65:f1:18:df:b4:45:8b:34:cd:32:eb:07:
f5:e3:e3:f5:92:70:a2:e0:a3:16:c8:85:46:94:cf:1d:61:42:
a7:5b:73:99:d9:e8:9d:6c:20:85:40:7d:fc:b8:3c:68:de:11:
5b:ce:ad:ae:92:04:d9:1f:c2:f3:dc:d8:30:6f:da:53:fd:c0:
77:89:bf:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:15:18 2026 by rpki-client