
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347388929/0/3230322e3136352e3231362e302f32312d3231203d3e203231383539.roa
File: 3230322e3136352e3231362e302f32312d3231203d3e203231383539.roa (raw, json)
Hash identifier: E5iVhVPLWbT/XT4sHNLiVBGtFgA8psi4gNVecPAc8O4=
Subject key identifier: C1:74:39:92:0D:50:CB:AE:BC:0F:27:A6:5D:C8:02:F4:BC:15:4A:E3
Certificate issuer: /CN=E23C4800CA452B1A8E6214923C01540E30830232
Certificate serial: 08545AB5BF120154496CC5CFCA6C7B3D4B50702F
Authority key identifier: E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/3230322e3136352e3231362e302f32312d3231203d3e203231383539.roa
Signing time: Tue 14 Apr 2026 06:47:42 +0000
ROA not before: Tue 14 Apr 2026 06:42:42 +0000
ROA not after: Tue 13 Apr 2027 06:47:42 +0000
asID: 21859
IP address blocks: 202.165.216.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:54:5a:b5:bf:12:01:54:49:6c:c5:cf:ca:6c:7b:3d:4b:50:70:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E23C4800CA452B1A8E6214923C01540E30830232
Validity
Not Before: Apr 14 06:42:42 2026 GMT
Not After : Apr 13 06:47:42 2027 GMT
Subject: CN=C17439920D50CBAEBC0F27A65DC802F4BC154AE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c5:cb:cd:13:a3:b7:0d:6f:39:3c:f7:ba:0d:
d7:f0:41:5e:61:cb:70:22:32:8f:f7:0e:a3:45:50:
9b:83:8b:df:81:3c:0b:a9:a4:8d:e5:b7:c8:e0:8d:
b9:71:8b:39:8f:a4:06:2a:e6:39:f0:f8:d3:ee:a5:
d9:70:f5:02:68:a6:46:a2:fc:42:7b:52:58:af:04:
01:d4:d6:fb:ea:f5:46:e6:f5:fc:77:38:d8:7e:0d:
2c:27:28:5b:49:0a:f4:5e:7f:4e:e1:03:98:75:6a:
65:72:89:39:8a:cf:b6:41:87:3f:c9:08:67:6a:cf:
76:e5:37:e8:c9:3b:c9:06:0d:a0:94:29:36:a1:f0:
53:89:4f:9b:f0:b0:48:fa:56:01:15:c4:b9:b4:aa:
a6:1c:5c:09:6b:72:d8:93:cd:40:5a:f0:1e:17:84:
79:1d:f0:01:0d:5e:37:a3:19:94:70:ed:83:99:a8:
ce:80:0e:08:c4:17:0b:b4:be:27:a2:e3:f4:b2:5f:
ba:51:90:b6:e0:e0:24:fb:8d:cb:ea:b3:78:27:06:
12:4e:7e:9c:b0:c4:48:59:57:eb:e1:9c:5d:c8:d2:
e4:9c:e1:09:60:72:bc:cb:8f:53:78:37:50:a6:da:
d3:31:52:af:31:05:5b:a4:ce:72:88:fc:a8:ce:96:
4f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:74:39:92:0D:50:CB:AE:BC:0F:27:A6:5D:C8:02:F4:BC:15:4A:E3
X509v3 Authority Key Identifier:
keyid:E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/3230322e3136352e3231362e302f32312d3231203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.165.216.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:38:af:b3:34:ab:92:e4:06:27:d6:30:aa:f2:5b:61:b0:d5:
27:53:d2:4b:b2:50:47:b2:a2:0f:b8:a7:f2:80:fe:cb:74:2c:
20:97:11:7a:c4:3d:7c:c1:bb:48:ef:6d:0c:4f:53:1f:3f:03:
84:d7:5b:29:d6:80:61:05:dd:04:36:8d:9d:53:30:64:5b:0d:
21:e5:ff:ec:94:02:b5:bb:79:ed:7c:ec:aa:a9:c5:92:9a:8d:
27:a7:55:5f:46:28:b1:58:7c:0a:73:5d:5d:b7:9f:24:1b:3b:
9a:10:69:eb:c1:39:a5:cd:e0:3d:dd:1d:d6:6b:21:99:eb:fd:
d5:8f:3d:49:d1:88:c3:a9:f2:fd:35:9c:c1:be:4e:ed:9b:87:
7c:00:51:fb:b4:27:b6:d9:cb:b0:7d:c5:9d:c3:29:63:e6:f3:
1c:38:4b:7d:e9:ac:fc:19:a0:a6:e0:ea:1c:9c:8c:8d:9f:6d:
dc:ac:e2:a3:68:55:66:57:5d:a3:0c:fb:38:96:be:89:4e:4a:
4a:6c:7b:2c:d8:61:34:cf:72:d7:2c:ac:fd:48:18:a0:fa:da:
7e:7a:79:81:8b:13:d1:17:72:11:24:cc:d2:73:ab:27:79:66:
8a:5f:ef:1d:82:c8:f1:3b:52:a7:dd:51:54:cd:16:21:b6:c3:
ae:ff:02:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:15:18 2026 by rpki-client