
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e35362e302f32312d3231203d3e203233373234.roa
File: 3132322e31312e35362e302f32312d3231203d3e203233373234.roa (raw, json)
Hash identifier: n4C7l2A4rvlhW4atbSQqHzhdugqhLlv/LQhObAnFTSY=
Subject key identifier: 0B:35:E0:65:7F:24:95:33:34:9A:45:88:AE:FB:3F:D6:85:A7:64:C0
Certificate issuer: /CN=098D421CB46F292F13CE71DF3D685D5E82893289
Certificate serial: 2BF07E3281C046E71F151F3A6E8BA783148DDFFC
Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e35362e302f32312d3231203d3e203233373234.roa
Signing time: Tue 02 Jun 2026 07:46:59 +0000
ROA not before: Tue 02 Jun 2026 07:41:59 +0000
ROA not after: Tue 01 Jun 2027 07:46:59 +0000
asID: 23724
IP address blocks: 122.11.56.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 14:23:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:f0:7e:32:81:c0:46:e7:1f:15:1f:3a:6e:8b:a7:83:14:8d:df:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289
Validity
Not Before: Jun 2 07:41:59 2026 GMT
Not After : Jun 1 07:46:59 2027 GMT
Subject: CN=0B35E0657F249533349A4588AEFB3FD685A764C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:41:7b:15:2f:a6:06:78:bc:ed:e7:bc:0b:14:
ac:dd:00:34:6a:be:91:e1:74:db:c1:54:cb:c2:60:
c0:e6:a2:53:45:1f:fb:85:cb:2b:b4:a0:60:3e:17:
f3:e8:be:bf:f5:5c:6a:fe:ef:44:8b:40:f1:b8:42:
26:38:c7:c8:43:30:a2:02:bc:a0:04:2a:89:d8:5f:
3c:d8:9a:fb:12:49:80:90:23:a6:40:db:a2:3d:10:
20:3d:8b:a7:b9:e6:9d:a1:97:1f:b8:3c:d8:8f:28:
9b:cc:a1:41:7a:ed:fe:ad:92:12:03:8f:b4:2d:cb:
5e:50:99:a4:5a:3c:23:0c:05:a5:1d:a0:0b:47:09:
96:6d:0d:c1:70:c1:59:40:ba:72:60:c9:7c:7d:61:
5e:1f:44:0a:37:b9:a9:a2:ac:5f:d1:0c:c7:92:5d:
a9:3d:fc:48:26:5b:a5:60:2f:fe:3b:e7:44:dc:91:
8c:be:72:8f:de:bd:45:b2:45:c3:35:4a:62:74:26:
fe:99:a0:d6:85:8b:9d:70:2e:7b:c9:d5:bd:0d:4c:
81:8f:e8:3e:41:fa:94:4b:2d:44:4c:ab:28:d9:6c:
d4:4e:33:32:1c:70:a4:32:84:a1:32:8d:7b:05:af:
88:cd:dd:82:fa:ed:7d:ed:d5:1a:de:e2:78:48:44:
94:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:35:E0:65:7F:24:95:33:34:9A:45:88:AE:FB:3F:D6:85:A7:64:C0
X509v3 Authority Key Identifier:
keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e35362e302f32312d3231203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.11.56.0/21
Signature Algorithm: sha256WithRSAEncryption
6c:f4:e9:7b:9e:20:f9:2d:4d:27:9e:ef:29:35:8d:bc:cd:71:
82:b5:f4:46:3c:29:dd:b2:21:f8:2c:80:c6:03:a1:03:b5:94:
1b:1b:65:df:35:d2:63:83:08:d7:cc:39:35:50:7f:8e:e0:c8:
b4:ec:71:ac:9b:81:a8:a1:70:fc:94:d8:eb:3d:fc:e6:c1:a0:
2a:78:fd:0b:d2:14:c3:de:48:28:87:3e:84:b3:11:ad:02:87:
d6:ca:de:a5:ca:74:20:42:c8:b3:cd:bc:6c:33:8c:ba:9d:1c:
f4:66:b6:af:99:0e:01:a8:33:b6:25:0d:c3:cf:89:65:bf:a6:
63:92:10:f3:b5:4d:06:ef:47:47:0c:cc:79:e0:fb:96:71:98:
ad:66:96:c3:80:c4:60:ed:b1:82:ad:62:37:55:12:5c:49:e8:
b1:99:f6:d2:11:25:39:12:fb:88:f8:85:f6:e1:9e:4f:68:91:
78:3b:f6:d3:4a:46:44:db:a7:c8:0b:4d:60:5e:4d:5c:dc:6c:
89:4e:b2:bf:92:18:f5:4d:98:05:4d:1c:cd:3f:83:dc:6d:8e:
34:e4:6b:c6:44:e7:b6:cc:52:bf:76:87:78:ce:ea:3f:95:35:
8b:cb:44:13:3c:23:ea:5d:be:74:d4:74:4a:5e:1c:43:f3:45:
60:88:9c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:04:37 2026 by rpki-client