
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3131382e3139342e34302e302f32312d3231203d3e203233373234.roa
File: 3131382e3139342e34302e302f32312d3231203d3e203233373234.roa (raw, json)
Hash identifier: wj7o0kMSNOyiUst8OjYtPK1TlZz/PgITlU4P+dX7JtE=
Subject key identifier: 32:D0:EE:6D:37:0C:49:8B:D1:87:E8:F7:ED:C1:2B:9E:77:CC:12:E2
Certificate issuer: /CN=098D421CB46F292F13CE71DF3D685D5E82893289
Certificate serial: 37672AB6AA10C1C45F2D2CCF4A582FFCA3A08D02
Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3131382e3139342e34302e302f32312d3231203d3e203233373234.roa
Signing time: Tue 02 Jun 2026 07:46:58 +0000
ROA not before: Tue 02 Jun 2026 07:41:58 +0000
ROA not after: Tue 01 Jun 2027 07:46:58 +0000
asID: 23724
IP address blocks: 118.194.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 14:23:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:67:2a:b6:aa:10:c1:c4:5f:2d:2c:cf:4a:58:2f:fc:a3:a0:8d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289
Validity
Not Before: Jun 2 07:41:58 2026 GMT
Not After : Jun 1 07:46:58 2027 GMT
Subject: CN=32D0EE6D370C498BD187E8F7EDC12B9E77CC12E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:94:42:1a:9a:64:a6:8e:cb:82:fd:8b:aa:5e:
b2:6c:51:5b:48:80:d3:f3:69:62:37:18:01:9f:eb:
62:e8:aa:53:6d:25:2e:c2:c1:26:f3:77:ec:22:1d:
1f:a6:ec:7c:5b:c4:d5:83:6a:39:fd:e4:ec:1f:1b:
8a:53:36:ce:a6:41:c3:23:99:56:72:2a:d7:65:52:
23:ca:9b:da:f1:ab:60:74:8f:17:fe:60:58:4b:a3:
6f:67:44:02:45:90:22:d5:32:cf:f2:63:a2:27:d9:
d9:e5:0a:f1:4a:22:1b:33:18:1d:82:17:3d:23:f7:
a1:60:36:22:04:2c:e0:5a:91:00:39:36:43:07:9f:
49:de:39:dd:87:7d:82:05:71:8f:da:8b:6f:6c:f4:
8d:4e:96:80:5a:f2:31:14:64:ce:eb:ce:7f:a7:c0:
c8:8b:6b:d7:9a:56:d9:51:6c:e1:9d:8e:eb:8d:6d:
92:bc:0c:41:f8:e6:80:b5:c7:d8:0b:3f:9a:9d:78:
a5:1d:7d:3c:d9:fe:d8:fb:91:2b:6b:59:12:bd:54:
25:6b:7e:9e:1c:2a:dd:2c:2b:ed:76:23:a0:a7:d9:
87:e0:f3:30:5d:a4:f2:45:37:62:e9:c2:5f:84:48:
5e:39:47:17:40:ad:52:6f:8d:b1:45:b6:00:33:71:
82:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D0:EE:6D:37:0C:49:8B:D1:87:E8:F7:ED:C1:2B:9E:77:CC:12:E2
X509v3 Authority Key Identifier:
keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3131382e3139342e34302e302f32312d3231203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.194.40.0/21
Signature Algorithm: sha256WithRSAEncryption
51:4e:08:ae:28:43:1c:dc:20:32:ee:90:fa:82:f4:7f:01:4f:
04:a4:90:21:d6:e1:32:bd:1b:af:86:8d:9f:38:4d:31:e1:35:
cf:7a:2c:2b:79:d1:55:87:ba:a3:6d:c0:5f:34:e6:44:01:0e:
91:10:a6:e8:9f:eb:eb:48:91:fe:22:db:4a:e0:29:59:f8:ea:
7c:5a:c1:5f:6a:e7:07:96:cb:e7:7b:92:96:32:21:71:28:2b:
36:e9:17:4c:22:d0:0c:e1:07:d8:ea:2e:f8:c7:41:58:b0:af:
30:4c:78:3f:2b:63:6d:90:17:9f:f3:8e:9a:bd:fd:af:fb:69:
8f:83:ee:f7:58:09:4d:48:52:60:5e:11:c1:93:c6:6e:b6:22:
01:c9:28:65:f7:f5:2c:e7:34:6a:14:68:d6:c9:62:1e:f3:8e:
b8:ca:44:c2:f8:2a:b0:b2:d6:2d:fe:6b:ad:1b:32:19:da:d7:
cc:e2:6a:e2:a6:37:e4:64:a1:a9:fc:5f:e4:87:71:ea:81:6c:
ab:6f:e4:c2:91:e3:ed:06:7c:e4:05:46:07:f8:04:a9:b6:05:
02:3d:dc:c0:87:04:75:8b:ca:2e:14:c2:4e:1a:eb:0b:78:ec:
78:09:40:9c:f2:5b:cb:a1:8a:41:5f:cb:41:ba:30:8c:1a:f7:
c8:90:2c:e3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:26:45 2026 by rpki-client