
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3131362e3139362e3134342e302f32342d3234203d3e2034383131.roa
File: 3131362e3139362e3134342e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier: 9lNsOYHlBt3jOOWXIqM/tEhd4rY9Jo/RkS+XO3kphW4=
Subject key identifier: 0D:50:DB:BE:8F:D8:48:20:8E:D4:37:CA:F7:03:4A:15:ED:CA:BB:4E
Certificate issuer: /CN=25C6596195B162409A5AFAA92570F258BAD3C42D
Certificate serial: 22AF0716AAC5339FC1E18D4824430DD1608A6876
Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3131362e3139362e3134342e302f32342d3234203d3e2034383131.roa
Signing time: Thu 04 Jun 2026 08:13:23 +0000
ROA not before: Thu 04 Jun 2026 08:08:23 +0000
ROA not after: Thu 03 Jun 2027 08:13:23 +0000
asID: 4811
IP address blocks: 116.196.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 14:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:af:07:16:aa:c5:33:9f:c1:e1:8d:48:24:43:0d:d1:60:8a:68:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D
Validity
Not Before: Jun 4 08:08:23 2026 GMT
Not After : Jun 3 08:13:23 2027 GMT
Subject: CN=0D50DBBE8FD848208ED437CAF7034A15EDCABB4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:64:f4:a0:e2:e1:aa:bb:71:f6:2d:74:71:80:
75:61:e6:e4:fa:85:c8:5d:87:2a:11:e9:4b:63:a2:
40:d1:a0:03:41:ce:42:98:6d:5b:62:15:cc:79:a7:
22:44:c8:9a:76:85:af:d2:4b:17:a7:ac:2a:76:c3:
1d:db:09:6b:11:c5:31:d9:61:42:68:5c:90:61:ed:
20:d1:95:2d:52:48:ec:0e:c2:50:f7:d0:a2:f6:5f:
ef:bb:95:2a:a5:05:c3:36:cd:c0:58:72:dd:e2:c2:
46:5a:f0:03:c2:2f:95:a7:91:0c:09:12:19:ea:8d:
ad:84:67:6c:d2:04:7f:c9:af:ab:4a:42:0d:29:c2:
95:74:8a:e0:c2:fc:44:85:f8:d2:f4:03:83:41:f2:
c0:fc:c0:1d:8f:5d:5a:a2:ed:33:38:e9:5e:47:b7:
13:7d:67:7c:f3:78:1d:b4:be:fe:82:17:50:17:79:
02:eb:20:61:24:4c:86:76:5c:97:f8:72:78:f2:6a:
f1:97:54:b4:7d:72:5a:83:c8:dd:7d:17:03:75:a2:
34:97:fc:b1:22:e8:bc:53:30:73:9d:48:15:67:92:
d4:04:63:a0:86:1d:c3:67:f7:85:b7:9b:b4:c5:e8:
00:d7:6f:70:f1:12:9f:ee:4f:9d:e9:5a:a2:da:84:
1f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:50:DB:BE:8F:D8:48:20:8E:D4:37:CA:F7:03:4A:15:ED:CA:BB:4E
X509v3 Authority Key Identifier:
keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3131362e3139362e3134342e302f32342d3234203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.196.144.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:b7:d1:44:2e:f7:78:5b:c6:d1:0c:4b:94:84:2c:3b:ae:9c:
38:a2:cc:2d:92:4d:5a:2e:fb:af:56:b8:0d:f8:02:2f:fd:4f:
83:25:d5:ee:1f:30:3d:05:7a:53:ef:ea:6f:8a:0d:43:ab:13:
20:f4:4d:9e:6b:8b:c1:07:34:11:02:37:35:10:e5:c4:1d:b7:
d8:ba:64:bd:37:87:68:40:0a:97:2e:08:d7:2a:c9:0b:56:31:
bb:27:82:e9:f8:06:5f:c3:f1:37:38:bf:c7:55:49:c6:d9:08:
98:c9:f7:17:b0:57:d5:83:3f:5e:a2:37:21:5e:3f:4e:75:dd:
7d:f5:34:a7:45:31:c7:b7:1d:e8:35:3e:3d:53:17:78:15:91:
13:16:6a:7c:83:41:19:e8:6f:6f:2d:db:63:fd:82:ac:87:e3:
88:04:ff:8a:e1:df:36:67:95:77:f6:b4:7b:ac:34:3a:0d:5b:
09:06:c2:52:4d:6a:88:f6:9c:7f:c9:91:55:cd:b2:ad:84:67:
79:0d:e9:4f:9f:93:9d:7a:25:df:ab:a4:23:5c:2e:00:a8:62:
27:32:ab:8a:ca:36:30:b4:4a:f5:fb:dc:5e:9c:43:e9:cf:fd:
1f:8d:72:38:87:75:20:ac:37:82:47:67:28:71:8c:13:c4:8d:
00:aa:04:ca
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:10:42 2026 by rpki-client