
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129459715/0/3131302e37362e302e302f31392d3234203d3e203337393633.roa
File: 3131302e37362e302e302f31392d3234203d3e203337393633.roa (raw, json)
Hash identifier: /Kq+hRQAsqDgn4v6EoPlalrT6bwlRVWqpcd1Axu+pfY=
Subject key identifier: 6E:6E:3C:80:C5:4D:E3:CC:49:A5:24:20:65:23:C1:D6:80:8C:0A:05
Certificate issuer: /CN=C82667C2BCBB537DEB7A3E415577B2690521D5DD
Certificate serial: 0D080218AA79924FC7D959221C79AEBADC673B5D
Authority key identifier: C8:26:67:C2:BC:BB:53:7D:EB:7A:3E:41:55:77:B2:69:05:21:D5:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/3131302e37362e302e302f31392d3234203d3e203337393633.roa
Signing time: Fri 27 Mar 2026 16:29:16 +0000
ROA not before: Fri 27 Mar 2026 16:24:16 +0000
ROA not after: Fri 26 Mar 2027 16:29:16 +0000
asID: 37963
IP address blocks: 110.76.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 08:19:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:08:02:18:aa:79:92:4f:c7:d9:59:22:1c:79:ae:ba:dc:67:3b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C82667C2BCBB537DEB7A3E415577B2690521D5DD
Validity
Not Before: Mar 27 16:24:16 2026 GMT
Not After : Mar 26 16:29:16 2027 GMT
Subject: CN=6E6E3C80C54DE3CC49A524206523C1D6808C0A05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fc:d5:ea:94:37:65:dd:96:95:e3:c6:bb:b1:
b1:a9:ea:49:4b:3c:5f:75:38:ab:92:e7:0f:fd:35:
29:47:da:ab:d6:84:49:50:d3:d1:d0:65:1b:ab:b7:
8a:d6:e6:c3:72:93:b3:d0:a6:fe:9c:c8:79:21:40:
7d:7c:83:31:97:7f:58:24:4a:94:cf:52:31:69:90:
43:40:62:72:46:06:e5:9c:6e:75:92:84:cb:ee:ad:
c0:66:e0:58:b8:84:df:45:f8:6f:1d:e3:3f:97:0d:
45:32:2f:fa:a2:33:52:7d:0b:ce:18:eb:9f:13:52:
07:2e:d4:f5:0c:36:bb:37:3b:f0:17:34:ad:02:34:
c4:57:e7:5a:e5:c6:9c:e6:9e:5f:f6:90:77:86:38:
b7:b9:06:cd:4c:55:36:50:3c:6a:7c:fa:df:63:cc:
0e:3c:20:1a:98:86:9c:07:38:fd:86:c3:16:c0:fd:
6f:c3:75:a9:f9:c3:b3:df:3a:3c:7c:9a:ff:9b:1c:
68:0d:37:4e:e8:c9:31:bf:48:23:65:57:9a:2b:ee:
8f:35:4a:60:7c:35:c0:27:e1:3e:cf:f8:c7:5a:6a:
51:bf:fd:d8:c0:ed:6f:15:43:20:07:60:bb:1c:a5:
24:25:1b:77:bd:57:07:dd:71:90:fd:f4:ed:18:70:
6e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:6E:3C:80:C5:4D:E3:CC:49:A5:24:20:65:23:C1:D6:80:8C:0A:05
X509v3 Authority Key Identifier:
keyid:C8:26:67:C2:BC:BB:53:7D:EB:7A:3E:41:55:77:B2:69:05:21:D5:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/3131302e37362e302e302f31392d3234203d3e203337393633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.76.0.0/19
Signature Algorithm: sha256WithRSAEncryption
9d:c1:ae:0f:b9:a3:f9:7c:01:d7:33:4a:6a:fb:aa:23:1f:bd:
40:fa:85:c8:09:2c:bb:48:a6:14:54:03:28:b2:06:0a:ad:84:
03:01:ce:16:d1:2b:35:a1:c4:2d:75:61:ae:78:01:28:da:4f:
26:c8:4b:cc:1b:d7:ec:dd:ff:2c:8d:9c:11:ae:cd:4a:00:bc:
94:16:67:4c:d4:12:dd:71:9f:ef:cb:08:a3:8c:ce:06:74:4e:
03:00:ae:76:ab:16:94:e0:ea:cb:f8:29:59:a4:85:f0:8d:04:
87:e2:cb:c2:89:25:5b:c7:77:fb:31:ba:73:64:83:f4:e3:c4:
1c:05:3e:11:a3:a9:89:a8:32:13:af:c8:45:2a:e7:aa:0f:c9:
d4:04:51:b4:af:a6:31:f6:f7:29:cf:14:82:89:9c:48:2b:4d:
7d:c5:df:63:d7:0f:75:10:fc:23:93:6a:5e:75:34:08:7c:f4:
98:cf:2a:3d:93:77:76:94:4a:46:2d:70:06:c7:8e:12:e1:f5:
c4:fa:22:b3:0a:aa:f3:5b:bb:f2:92:a7:13:b6:a9:9d:82:9d:
7e:da:69:24:77:e0:4e:6a:48:6f:da:37:7c:11:f4:6d:4d:6d:
31:b9:1d:75:de:55:b4:2e:d2:d6:61:cb:b4:fc:89:c5:b3:25:
e8:4c:c7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:01:46 2026 by rpki-client