
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129459715/0/3131302e37352e3132382e302f31392d3234203d3e203337393633.roa
File: 3131302e37352e3132382e302f31392d3234203d3e203337393633.roa (raw, json)
Hash identifier: Ebg5Gac1KLUQyYv7ZNQ+SoINksfu4W2yKgqZOmTbJrc=
Subject key identifier: EB:BC:0C:96:81:73:C5:A1:BA:23:86:25:AC:50:C7:EB:AA:B2:11:55
Certificate issuer: /CN=C82667C2BCBB537DEB7A3E415577B2690521D5DD
Certificate serial: 12D4301047558819E88691B234946DDFC01E81A2
Authority key identifier: C8:26:67:C2:BC:BB:53:7D:EB:7A:3E:41:55:77:B2:69:05:21:D5:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/3131302e37352e3132382e302f31392d3234203d3e203337393633.roa
Signing time: Fri 27 Mar 2026 16:21:28 +0000
ROA not before: Fri 27 Mar 2026 16:16:28 +0000
ROA not after: Fri 26 Mar 2027 16:21:28 +0000
asID: 37963
IP address blocks: 110.75.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 08:19:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:d4:30:10:47:55:88:19:e8:86:91:b2:34:94:6d:df:c0:1e:81:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C82667C2BCBB537DEB7A3E415577B2690521D5DD
Validity
Not Before: Mar 27 16:16:28 2026 GMT
Not After : Mar 26 16:21:28 2027 GMT
Subject: CN=EBBC0C968173C5A1BA238625AC50C7EBAAB21155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b7:40:21:58:da:42:4f:01:8d:bd:49:81:ec:
b1:85:d7:28:4f:b5:bd:55:eb:5f:ff:da:97:65:82:
ed:4a:bf:31:30:65:74:56:5c:28:b6:c9:53:de:6d:
dc:5e:60:ff:14:fb:24:ff:59:17:e6:0e:3e:2c:f6:
74:da:10:d1:a0:90:5c:e8:1e:f3:9b:2c:03:46:6e:
95:c8:b8:37:bf:e8:f6:44:54:48:8c:b5:fc:9b:ab:
57:62:c6:aa:2d:6c:06:ac:59:ad:0d:a3:d4:be:fd:
2a:44:aa:81:1a:dd:fc:b0:98:3b:d1:cf:5b:f7:57:
66:e3:07:6d:a3:fb:85:37:da:03:ed:57:f1:c8:70:
71:d6:f2:dd:47:3f:38:34:17:79:54:b5:58:61:27:
91:10:e7:b1:a3:f0:a3:96:62:fe:b7:58:e8:f1:82:
51:ca:cc:9c:81:79:52:3b:5c:8c:e0:a3:01:58:ec:
60:23:b6:f7:4c:c4:42:e8:bd:67:0b:54:13:cf:e0:
4f:48:c4:b2:0c:85:85:1a:57:e4:b6:38:a2:d8:15:
05:2f:6d:5a:fe:e4:d4:6a:15:4b:22:cc:19:b3:8a:
72:77:f7:52:6e:a7:70:33:bd:05:72:22:b6:4c:42:
e8:b5:b6:68:90:d7:51:57:a9:8d:57:7b:54:c7:19:
41:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BC:0C:96:81:73:C5:A1:BA:23:86:25:AC:50:C7:EB:AA:B2:11:55
X509v3 Authority Key Identifier:
keyid:C8:26:67:C2:BC:BB:53:7D:EB:7A:3E:41:55:77:B2:69:05:21:D5:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/3131302e37352e3132382e302f31392d3234203d3e203337393633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.75.128.0/19
Signature Algorithm: sha256WithRSAEncryption
06:74:98:30:fa:8c:03:01:25:5c:8a:27:91:5d:5a:fc:d5:a9:
a9:9f:e8:7b:14:16:ef:22:8a:cb:5e:ac:e1:97:b4:67:ce:a9:
b5:cd:12:a9:0c:31:3c:e6:9f:fd:0a:fe:cd:39:1c:ee:fb:a1:
2d:3e:2c:ec:32:ff:c5:26:e3:d7:ba:7e:f2:ff:a9:d2:07:72:
23:56:fa:a7:c3:fa:b2:d5:ee:12:62:18:f5:64:bb:39:44:79:
a3:b6:20:7c:32:71:65:f0:3f:b3:0d:d8:4f:fa:87:f6:98:ad:
11:97:de:b1:22:1b:ce:87:12:91:b5:d0:07:96:47:98:b8:90:
7a:5a:ea:a7:6a:63:b7:98:c1:80:9d:10:e6:5a:e3:81:f7:59:
09:cf:db:9d:f7:4d:75:08:4f:79:8a:bb:6b:f5:db:7d:c6:24:
9d:1b:30:e7:66:de:2c:6b:98:bb:52:64:e9:b2:f2:50:dd:8a:
b7:46:37:ee:bb:4a:6f:7d:6d:75:c5:e4:4e:93:39:9d:0c:08:
b7:d6:33:0f:a6:6d:b4:ce:ca:d3:b8:4c:a6:39:c7:47:d1:52:
79:e9:11:78:42:e1:f0:64:41:6d:6d:0a:44:5d:f0:00:92:f0:
44:f4:02:99:0d:2c:23:7b:99:62:93:dd:ad:5d:ff:c2:1c:72:
ab:be:8a:4c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:01:35 2026 by rpki-client