
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129459715/0/3131302e37362e302e302f31392d3234203d3e203435313032.roa
File: 3131302e37362e302e302f31392d3234203d3e203435313032.roa (raw, json)
Hash identifier: KpbyfMQgiRPHc4JXVVcufeCDpffM9jStUuQqy7RhNDk=
Subject key identifier: D2:DB:37:7F:40:B8:24:D4:4B:DB:01:9A:04:22:BF:AE:B7:EF:A0:18
Certificate issuer: /CN=C82667C2BCBB537DEB7A3E415577B2690521D5DD
Certificate serial: 44E1157183F9481D3D644A03F2DAC07E72B467BC
Authority key identifier: C8:26:67:C2:BC:BB:53:7D:EB:7A:3E:41:55:77:B2:69:05:21:D5:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/3131302e37362e302e302f31392d3234203d3e203435313032.roa
Signing time: Fri 27 Mar 2026 16:29:16 +0000
ROA not before: Fri 27 Mar 2026 16:24:16 +0000
ROA not after: Fri 26 Mar 2027 16:29:16 +0000
asID: 45102
IP address blocks: 110.76.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:e1:15:71:83:f9:48:1d:3d:64:4a:03:f2:da:c0:7e:72:b4:67:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C82667C2BCBB537DEB7A3E415577B2690521D5DD
Validity
Not Before: Mar 27 16:24:16 2026 GMT
Not After : Mar 26 16:29:16 2027 GMT
Subject: CN=D2DB377F40B824D44BDB019A0422BFAEB7EFA018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:23:6c:38:d4:39:94:64:3b:6c:d2:09:b3:
c8:74:a0:fe:65:50:9a:ca:e2:45:80:45:e0:05:2c:
13:66:7e:ac:aa:9f:cb:bf:fb:e0:e3:d7:2d:98:70:
74:85:be:56:a7:e4:66:21:a3:dd:18:be:4a:a6:2f:
ff:0d:82:da:38:a0:39:66:c0:65:32:b4:43:27:45:
82:4b:87:26:76:73:73:6c:79:b4:6a:71:1a:91:a0:
84:3e:e9:aa:38:26:ad:f8:7b:13:28:57:a0:ff:de:
a6:57:90:4d:e3:4c:b1:ab:c2:63:c7:d7:55:e9:97:
01:e5:a9:5a:ab:58:47:06:74:8a:c9:42:f5:20:b3:
02:60:5c:59:7e:a1:d5:85:af:5a:e6:99:2b:22:34:
36:3a:ca:ff:18:d6:47:94:6b:2d:d8:93:c1:a5:dc:
d0:34:26:c1:a3:4c:5c:3d:cf:56:29:e6:9d:d1:dc:
59:db:df:e8:79:d2:1b:c3:ab:00:c5:6b:88:00:d8:
a4:14:9b:99:f0:b1:71:38:77:06:e3:ab:41:53:f7:
b5:ec:28:3c:35:c5:62:71:38:14:c5:68:59:c9:ac:
71:ea:80:50:34:3f:3f:af:e9:5f:57:12:ac:cd:c4:
91:9e:82:80:94:ad:dc:ac:4e:69:6e:72:ae:1b:35:
3e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DB:37:7F:40:B8:24:D4:4B:DB:01:9A:04:22:BF:AE:B7:EF:A0:18
X509v3 Authority Key Identifier:
keyid:C8:26:67:C2:BC:BB:53:7D:EB:7A:3E:41:55:77:B2:69:05:21:D5:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/3131302e37362e302e302f31392d3234203d3e203435313032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.76.0.0/19
Signature Algorithm: sha256WithRSAEncryption
21:e1:b6:1e:d0:c3:74:42:6f:94:99:a4:b9:66:ee:44:7f:66:
d9:df:ac:64:ae:d6:a2:6f:a1:50:eb:1e:9e:9e:3d:16:69:ae:
57:9c:68:68:23:d5:39:81:fc:43:71:71:58:b8:5f:c4:db:80:
44:e9:44:73:34:e9:0d:46:30:67:f3:fa:d6:04:d1:cd:d9:7c:
87:50:69:08:de:40:a9:18:2a:fd:65:8f:9f:ce:f2:3d:9f:5c:
33:59:62:5b:5a:66:ab:9e:51:59:45:7e:4a:7c:79:25:02:95:
0a:a5:c4:ef:db:c4:f9:e3:0e:94:95:f5:27:75:48:48:e3:26:
4f:ea:92:04:02:05:35:c4:a1:64:ad:0f:e0:1b:53:1c:42:97:
63:04:8e:f9:af:8c:52:58:98:05:1c:d4:24:de:5f:3f:a7:39:
9d:a3:78:8c:cc:e5:16:49:61:7e:fe:bd:54:2b:92:56:8b:74:
11:fe:73:b8:a4:eb:32:73:31:44:69:04:18:c5:12:cb:ae:2a:
5a:82:dc:03:89:37:82:dd:36:f9:e8:46:fc:aa:b5:92:0e:a4:
5a:e5:47:53:b8:96:67:0e:6d:96:e1:9c:7b:01:d8:54:0a:e0:
33:89:6e:ee:48:3a:cf:6c:a9:15:e8:d2:3d:a9:f8:06:96:6a:
81:e7:37:93
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUROEVcYP5SB09ZEoD8trAfnK0Z7wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzgyNjY3QzJCQ0JCNTM3REVCN0EzRTQxNTU3N0IyNjkw
NTIxRDVERDAeFw0yNjAzMjcxNjI0MTZaFw0yNzAzMjYxNjI5MTZaMDMxMTAvBgNV
BAMTKEQyREIzNzdGNDBCODI0RDQ0QkRCMDE5QTA0MjJCRkFFQjdFRkEwMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1lCNsONQ5lGQ7bNIJs8h0oP5l
UJrK4kWAReAFLBNmfqyqn8u/++Dj1y2YcHSFvlan5GYho90YvkqmL/8Ngto4oDlm
wGUytEMnRYJLhyZ2c3NsebRqcRqRoIQ+6ao4Jq34exMoV6D/3qZXkE3jTLGrwmPH
11XplwHlqVqrWEcGdIrJQvUgswJgXFl+odWFr1rmmSsiNDY6yv8Y1keUay3Yk8Gl
3NA0JsGjTFw9z1Yp5p3R3Fnb3+h50hvDqwDFa4gA2KQUm5nwsXE4dwbjq0FT97Xs
KDw1xWJxOBTFaFnJrHHqgFA0Pz+v6V9XEqzNxJGegoCUrdysTmlucq4bNT5lAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQU0ts3f0C4JNRL2wGaBCK/rrfvoBgwHwYDVR0j
BBgwFoAUyCZnwry7U33rej5BVXeyaQUh1d0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTQ1OTcxNS8wL0M4MjY2N0MyQkNCQjUzN0RFQjdBM0U0MTU1NzdC
MjY5MDUyMUQ1REQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzgyNjY3QzJCQ0JCNTM3REVCN0EzRTQxNTU3N0IyNjkwNTIxRDVERC5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5NDU5NzE1LzAvMzEzMTMwMmUzNzM2
MmUzMDJlMzAyZjMxMzkyZDMyMzQyMDNkM2UyMDM0MzUzMTMwMzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAVuTAAwDQYJKoZIhvcNAQELBQADggEBACHhth7Qw3RCb5SZpLlm7kR/ZtnfrGSu
1qJvoVDrHp6ePRZprlecaGgj1TmB/ENxcVi4X8TbgETpRHM06Q1GMGfz+tYE0c3Z
fIdQaQjeQKkYKv1lj5/O8j2fXDNZYltaZqueUVlFfkp8eSUClQqlxO/bxPnjDpSV
9Sd1SEjjJk/qkgQCBTXEoWStD+AbUxxCl2MEjvmvjFJYmAUc1CTeXz+nOZ2jeIzM
5RZJYX7+vVQrklaLdBH+c7ik6zJzMURpBBjFEsuuKlqC3AOJN4LdNvnoRvyqtZIO
pFrlR1O4lmcObZbhnHsB2FQK4DOJbu5IOs9sqRXo0j2p+AaWaoHnN5M=
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:24:14 2026 by rpki-client