
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e34382e302f32312d3231203d3e203233373234.roa
File: 3132322e31312e34382e302f32312d3231203d3e203233373234.roa (raw, json)
Hash identifier: keY2EFny2N50oH6sPmEcnlgutDB4fpw2kzVuddOqR00=
Subject key identifier: C1:FF:4A:B0:5B:5F:0F:A1:D9:B2:10:37:0F:1A:DB:7A:C3:CD:CD:9E
Certificate issuer: /CN=098D421CB46F292F13CE71DF3D685D5E82893289
Certificate serial: 6912442FFDE6B65A36EE0E246C711184E49F452B
Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e34382e302f32312d3231203d3e203233373234.roa
Signing time: Tue 02 Jun 2026 07:46:58 +0000
ROA not before: Tue 02 Jun 2026 07:41:58 +0000
ROA not after: Tue 01 Jun 2027 07:46:58 +0000
asID: 23724
IP address blocks: 122.11.48.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 14:23:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:12:44:2f:fd:e6:b6:5a:36:ee:0e:24:6c:71:11:84:e4:9f:45:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289
Validity
Not Before: Jun 2 07:41:58 2026 GMT
Not After : Jun 1 07:46:58 2027 GMT
Subject: CN=C1FF4AB05B5F0FA1D9B210370F1ADB7AC3CDCD9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7d:0e:b3:22:51:fc:7e:82:f6:18:45:ed:98:
e2:3a:fa:3b:05:c5:c7:26:5f:1c:d9:c0:4d:c5:f3:
96:e8:a7:9d:a3:b1:28:81:64:7c:5a:4d:24:33:27:
56:e7:b5:76:3d:21:51:d8:04:ba:fd:9a:36:34:a1:
7f:7c:6e:b9:27:4f:42:98:ff:c8:f8:95:ef:cd:ff:
d8:36:1d:ca:95:5b:ee:83:94:a3:7b:24:4a:35:81:
1b:3c:25:ea:2c:91:45:39:7c:3a:28:7c:fd:57:ea:
79:c6:e6:8d:e1:4c:54:7e:a4:4c:79:de:90:bc:55:
85:88:c2:28:25:45:ac:66:db:19:d3:58:7c:6c:5e:
c2:4f:59:fc:61:7f:9d:21:b7:26:9b:ff:ee:ad:8a:
76:ce:0e:51:55:46:7d:1b:10:b9:80:92:7d:a8:50:
fe:6e:e9:f1:e5:f5:58:2d:ab:bf:53:f4:f6:e5:0c:
09:12:ab:0f:91:54:d2:98:43:bf:e6:78:d5:4e:3c:
ee:ff:70:b8:52:9c:26:67:a5:75:05:71:ed:aa:7a:
b6:dc:34:24:e8:15:cf:18:23:dc:e0:42:d8:e0:64:
b2:8f:af:2e:9c:4e:ce:fd:9b:34:93:3f:01:68:34:
75:30:40:65:42:b4:d6:be:0a:74:4a:37:2c:5c:ee:
8a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FF:4A:B0:5B:5F:0F:A1:D9:B2:10:37:0F:1A:DB:7A:C3:CD:CD:9E
X509v3 Authority Key Identifier:
keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e34382e302f32312d3231203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.11.48.0/21
Signature Algorithm: sha256WithRSAEncryption
12:9d:a8:44:29:2d:52:bf:d5:ae:81:1a:02:20:c3:54:63:c3:
26:3c:62:ae:2f:c7:db:db:42:1e:c1:0b:a4:08:ac:31:75:25:
de:25:0f:73:50:9d:d1:64:57:c3:97:f6:20:bf:75:5a:65:8a:
5b:51:6d:08:5f:2e:2e:a6:97:06:25:a2:ff:53:91:50:06:93:
53:08:5c:e0:a9:07:20:3b:7f:1f:4d:22:f7:e5:f0:38:91:43:
58:01:6f:bc:eb:8d:70:2a:9c:51:ea:08:a6:1c:1e:ed:e3:bc:
b0:04:15:ae:29:5f:f2:85:70:e2:98:54:ff:d9:2e:bc:a4:b0:
ae:1f:9e:d9:17:8a:44:66:69:c0:7e:73:8e:21:21:8e:d7:66:
c8:c8:f2:a5:35:ab:ac:20:e7:97:84:89:1c:29:3c:13:1f:f1:
5f:e2:d0:cc:99:bd:de:f1:62:08:fe:96:f2:b2:ae:1c:e9:a6:
2e:83:6f:be:69:e6:fc:c6:a7:1d:b0:f0:b6:30:7b:c2:42:74:
c0:8c:40:cd:dd:8b:0e:b1:bc:9b:90:b0:7d:22:58:7e:aa:8d:
9b:4f:82:90:27:13:67:9f:11:a2:09:2c:05:fe:ae:b7:61:77:
05:e8:2e:24:80:6e:3b:43:47:e1:89:a8:01:0d:5e:7a:38:c0:
58:b7:fa:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:00:22 2026 by rpki-client