
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e34302e302f32312d3231203d3e203233373234.roa
File: 3132322e31312e34302e302f32312d3231203d3e203233373234.roa (raw, json)
Hash identifier: ai772q1EoRxuBDbBexQPnZXL/jCbU0YH2VB2woJTRp8=
Subject key identifier: E4:27:F0:24:BC:C5:01:20:87:F0:82:8D:FA:91:44:C3:26:CF:A8:A5
Certificate issuer: /CN=098D421CB46F292F13CE71DF3D685D5E82893289
Certificate serial: 5C4776990E9E12FA889C951F27DBB07B8633867C
Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e34302e302f32312d3231203d3e203233373234.roa
Signing time: Tue 02 Jun 2026 07:46:58 +0000
ROA not before: Tue 02 Jun 2026 07:41:58 +0000
ROA not after: Tue 01 Jun 2027 07:46:58 +0000
asID: 23724
IP address blocks: 122.11.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 14:23:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:47:76:99:0e:9e:12:fa:88:9c:95:1f:27:db:b0:7b:86:33:86:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289
Validity
Not Before: Jun 2 07:41:58 2026 GMT
Not After : Jun 1 07:46:58 2027 GMT
Subject: CN=E427F024BCC5012087F0828DFA9144C326CFA8A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:16:ec:92:68:f3:7b:49:52:ca:82:2d:e5:4f:
f2:04:96:f8:32:3d:1c:9d:80:30:bd:c1:3c:85:a2:
c7:ac:35:aa:47:99:48:d2:65:53:e6:27:7b:d6:c0:
41:b5:01:af:42:8d:9d:21:30:4f:62:65:4a:c6:c5:
f8:c0:b9:32:4c:3f:86:54:f0:ad:6b:23:2f:a3:66:
29:63:35:7f:ad:31:0e:9a:b7:e8:5a:1a:bf:a3:e9:
99:d1:68:73:ca:f7:c6:81:4e:28:4f:97:00:f3:a7:
a1:e4:9a:09:30:20:1c:8e:2e:08:82:f2:3b:64:46:
e2:70:1d:c9:69:57:20:44:dd:ba:9b:15:c1:bb:02:
c7:58:fb:6a:cb:1d:47:d3:85:1b:fd:64:b2:c5:bb:
ef:0e:27:8c:72:14:9b:d3:25:a7:c1:45:47:f2:f9:
7e:4e:53:b3:a2:3d:3f:4e:e6:c3:58:14:36:4d:a9:
07:af:ac:5f:f4:ad:16:9d:1b:d1:ae:2d:9a:01:1f:
cc:80:01:36:f6:c2:e4:37:3e:d0:38:6d:6c:60:46:
0a:ff:f5:41:6e:19:54:f2:05:f7:f1:a0:e1:f5:49:
c1:17:d0:76:64:22:31:15:e6:64:1f:6e:42:4c:49:
19:ee:48:04:1b:d7:87:11:a5:aa:bd:5f:be:49:c4:
95:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:27:F0:24:BC:C5:01:20:87:F0:82:8D:FA:91:44:C3:26:CF:A8:A5
X509v3 Authority Key Identifier:
keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e34302e302f32312d3231203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.11.40.0/21
Signature Algorithm: sha256WithRSAEncryption
19:e5:bb:a0:1f:27:f5:2e:b7:32:24:84:13:fc:2d:b5:b4:5e:
76:9a:b3:cc:9a:74:d7:25:98:75:7d:f2:55:cc:e3:df:85:6e:
bf:b3:25:a2:fa:36:0e:ac:cc:36:85:60:73:56:dd:8e:ae:d3:
25:e8:5e:6d:d4:be:e3:89:59:b6:75:73:db:3a:29:a2:4e:fe:
03:2b:7c:14:0c:e3:df:19:6e:69:be:5a:47:50:03:3f:2d:70:
61:d3:e5:ba:03:05:75:80:ea:ce:44:fc:60:05:d6:70:56:5d:
31:34:bf:6f:fa:0a:8e:67:5f:85:50:38:bd:46:15:a0:33:72:
9d:49:f1:b5:03:89:ea:54:0a:a4:5f:b0:18:d1:fc:af:00:2b:
db:b2:a8:c0:c3:7b:7f:90:68:e8:0d:e3:93:25:63:91:33:aa:
6d:02:07:ec:42:d2:76:88:ce:22:f8:36:fc:f0:05:0a:ea:7b:
ed:43:c1:f5:61:3d:13:b4:13:72:9d:a6:89:bb:09:84:09:46:
6b:ea:8f:b7:9f:cf:26:d0:cc:1c:c0:d6:ba:e7:a8:71:b1:79:
dd:4d:88:32:1f:eb:fa:71:00:eb:55:8d:5b:80:50:be:cf:00:
7b:2e:4a:e8:e4:ed:dc:bd:ae:69:57:2c:91:c1:68:97:da:a9:
f5:66:33:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:52:07 2026 by rpki-client