
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347388929/0/3131362e3139392e3135322e302f32322d3232203d3e203231383539.roa
File: 3131362e3139392e3135322e302f32322d3232203d3e203231383539.roa (raw, json)
Hash identifier: Toe4XK9/hHjGe7TiXrq9wIpaDbrD72THIrtz/qMMlBE=
Subject key identifier: 8D:BA:D9:1A:B1:9F:7D:4D:D0:B9:22:C6:50:B9:9E:B7:4C:4B:7D:93
Certificate issuer: /CN=E23C4800CA452B1A8E6214923C01540E30830232
Certificate serial: 31E7C1F97D781D55757E338280DAD00F4E165A43
Authority key identifier: E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/3131362e3139392e3135322e302f32322d3232203d3e203231383539.roa
Signing time: Thu 16 Apr 2026 06:00:57 +0000
ROA not before: Thu 16 Apr 2026 05:55:57 +0000
ROA not after: Thu 15 Apr 2027 06:00:57 +0000
asID: 21859
IP address blocks: 116.199.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:e7:c1:f9:7d:78:1d:55:75:7e:33:82:80:da:d0:0f:4e:16:5a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E23C4800CA452B1A8E6214923C01540E30830232
Validity
Not Before: Apr 16 05:55:57 2026 GMT
Not After : Apr 15 06:00:57 2027 GMT
Subject: CN=8DBAD91AB19F7D4DD0B922C650B99EB74C4B7D93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:76:e9:00:9b:f0:56:bc:5b:3b:bf:d1:0e:34:
af:f9:ad:61:ad:c6:26:bd:87:15:44:d3:e9:36:6c:
1d:2f:43:a6:fb:42:cc:1d:2c:24:d3:2b:17:74:69:
8a:41:84:09:9b:03:3a:01:0a:bb:45:6c:6a:48:08:
65:6a:4e:61:cc:b9:e7:3c:f2:32:b7:29:81:66:87:
3a:6a:be:32:d6:e0:9a:59:7c:7b:92:9a:27:a0:2b:
14:35:f3:5a:92:68:2e:c9:f6:3c:d7:20:9c:98:ee:
55:ef:9f:e6:8f:b6:94:2a:56:45:9e:62:d6:38:e6:
2b:65:4a:0a:fc:24:64:1b:ca:1c:48:89:47:67:2a:
35:ad:44:b6:69:9b:7c:93:be:1d:47:ac:6f:26:73:
42:80:ed:a3:49:26:40:51:6f:c2:66:5c:ce:8b:28:
55:34:49:06:5d:0b:97:80:53:5a:63:da:5c:3f:fd:
2c:17:75:98:c5:68:26:01:1a:97:f6:b4:72:80:2e:
9e:39:2d:81:77:9e:3e:cf:ac:d4:ee:09:7a:a5:8e:
f0:28:2e:27:2c:03:38:2a:29:b0:7d:32:9b:68:f9:
05:cb:6e:9c:75:61:b5:b5:2f:ad:42:08:25:a1:7c:
4e:bc:36:a4:95:e0:28:c8:76:1b:5c:b9:9b:38:c4:
89:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BA:D9:1A:B1:9F:7D:4D:D0:B9:22:C6:50:B9:9E:B7:4C:4B:7D:93
X509v3 Authority Key Identifier:
keyid:E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/3131362e3139392e3135322e302f32322d3232203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.199.152.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:04:cb:fd:08:e9:a2:e6:dc:2f:ef:5f:58:c9:4e:35:ef:d4:
e1:06:ad:48:d2:cd:b0:32:5a:96:ff:4f:5e:07:47:83:c6:20:
5e:a8:ad:4e:a9:1a:40:9e:26:f4:df:f8:af:cb:61:44:18:7a:
b3:9e:bb:17:91:59:38:fb:78:b1:4f:d4:89:96:3f:1b:f1:41:
0a:ed:c7:ff:38:59:f1:86:23:25:a3:72:ca:24:51:0e:67:87:
37:3f:95:cd:7e:c8:d3:14:f4:8f:23:b4:f0:7b:e7:96:87:5c:
68:45:e3:87:da:5e:1f:8c:d6:7d:8c:20:cd:37:66:58:f7:c9:
c3:be:b6:93:7f:1a:21:89:09:25:f5:a1:44:68:57:40:f0:02:
15:36:5f:67:eb:28:4d:3d:b1:52:a6:dc:69:72:24:26:76:1d:
b6:d0:6b:71:5a:ee:fa:bf:0e:d5:10:2f:b3:68:f1:db:d0:25:
50:62:22:60:ae:63:33:30:64:cb:f1:cf:e7:43:35:12:e6:ac:
ae:7b:7f:b2:1b:0b:44:2a:e5:97:90:f0:73:3d:8c:32:d9:9b:
1a:5c:1a:0d:4c:20:02:ac:58:71:f2:47:3c:d2:44:fd:01:ba:
9e:a2:b3:21:18:28:c7:01:1c:86:ba:b4:0e:ad:65:d2:b3:90:
4a:18:26:e5
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUMefB+X14HVV1fjOCgNrQD04WWkMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTIzQzQ4MDBDQTQ1MkIxQThFNjIxNDkyM0MwMTU0MEUz
MDgzMDIzMjAeFw0yNjA0MTYwNTU1NTdaFw0yNzA0MTUwNjAwNTdaMDMxMTAvBgNV
BAMTKDhEQkFEOTFBQjE5RjdENEREMEI5MjJDNjUwQjk5RUI3NEM0QjdEOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqdukAm/BWvFs7v9EONK/5rWGt
xia9hxVE0+k2bB0vQ6b7QswdLCTTKxd0aYpBhAmbAzoBCrtFbGpICGVqTmHMuec8
8jK3KYFmhzpqvjLW4JpZfHuSmiegKxQ181qSaC7J9jzXIJyY7lXvn+aPtpQqVkWe
YtY45itlSgr8JGQbyhxIiUdnKjWtRLZpm3yTvh1HrG8mc0KA7aNJJkBRb8JmXM6L
KFU0SQZdC5eAU1pj2lw//SwXdZjFaCYBGpf2tHKALp45LYF3nj7PrNTuCXqljvAo
LicsAzgqKbB9Mpto+QXLbpx1YbW1L61CCCWhfE68NqSV4CjIdhtcuZs4xInpAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUjbrZGrGffU3QuSLGULmet0xLfZMwHwYDVR0j
BBgwFoAU4jxIAMpFKxqOYhSSPAFUDjCDAjIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MjMzMDM0NzM4ODkyOS8wL0UyM0M0ODAwQ0E0NTJCMUE4RTYyMTQ5MjNDMDE1
NDBFMzA4MzAyMzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTIzQzQ4MDBDQTQ1MkIxQThFNjIxNDkyM0MwMTU0MEUzMDgzMDIzMi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDczODg5MjkvMC8zMTMxMzYyZTMx
MzkzOTJlMzEzNTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzMTM4MzUzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAnTHmDANBgkqhkiG9w0BAQsFAAOCAQEAuwTL/QjpoubcL+9fWMlO
Ne/U4QatSNLNsDJalv9PXgdHg8YgXqitTqkaQJ4m9N/4r8thRBh6s567F5FZOPt4
sU/UiZY/G/FBCu3H/zhZ8YYjJaNyyiRRDmeHNz+VzX7I0xT0jyO08HvnlodcaEXj
h9peH4zWfYwgzTdmWPfJw762k38aIYkJJfWhRGhXQPACFTZfZ+soTT2xUqbcaXIk
JnYdttBrcVru+r8O1RAvs2jx29AlUGIiYK5jMzBky/HP50M1Euasrnt/shsLRCrl
l5Dwcz2MMtmbGlwaDUwgAqxYcfJHPNJE/QG6nqKzIRgoxwEchrq0Dq1l0rOQShgm
5Q==
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:15:18 2026 by rpki-client