
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757612035/1/3136302e33302e3233302e302f32332d3233203d3e20313334373635.roa
File: 3136302e33302e3233302e302f32332d3233203d3e20313334373635.roa (raw, json)
Hash identifier: M9h4mps+1IMEWDqZCndydBDbcZZixvF2i/x4Bvz67vM=
Subject key identifier: A7:01:5A:F3:64:FC:E4:09:00:5E:5D:EF:F0:F4:1C:B4:DA:43:E2:16
Certificate issuer: /CN=97B5B7009501E4718F06B9B36D215369C958203F
Certificate serial: 1ADA597DD7D14DD1F3147754933040756489EB06
Authority key identifier: 97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/3136302e33302e3233302e302f32332d3233203d3e20313334373635.roa
Signing time: Wed 08 Apr 2026 05:29:35 +0000
ROA not before: Wed 08 Apr 2026 05:24:35 +0000
ROA not after: Wed 07 Apr 2027 05:29:35 +0000
asID: 134765
IP address blocks: 160.30.230.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 15:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:da:59:7d:d7:d1:4d:d1:f3:14:77:54:93:30:40:75:64:89:eb:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97B5B7009501E4718F06B9B36D215369C958203F
Validity
Not Before: Apr 8 05:24:35 2026 GMT
Not After : Apr 7 05:29:35 2027 GMT
Subject: CN=A7015AF364FCE409005E5DEFF0F41CB4DA43E216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:24:b6:f6:c1:95:d8:4c:38:7c:0b:91:6a:c5:
c1:d3:05:cb:87:26:d2:ae:dd:05:06:22:6e:3c:2b:
d2:a5:97:3a:59:52:5f:86:1f:f2:98:1b:6e:20:1b:
16:a0:3c:94:fa:af:d0:9f:29:38:fa:ea:76:60:81:
9d:e6:6d:fe:4c:0d:2d:b8:61:71:fb:f2:70:ea:fc:
5d:f4:70:21:49:e8:f6:6c:99:ad:b7:82:83:f7:af:
2c:9a:82:c1:29:79:69:4d:e5:d6:30:43:b3:e8:e5:
69:a1:30:c6:8c:62:99:a2:99:13:8d:0b:de:52:e0:
ab:d7:2d:4b:c5:06:bc:c5:40:5b:88:af:61:67:4d:
9b:9e:52:c9:b0:44:ef:ce:f1:e7:ba:8e:43:18:ac:
6d:15:05:65:1f:e9:f3:57:c3:d0:a2:53:e0:ec:0a:
14:a5:53:55:ec:ac:82:26:37:40:4b:04:91:51:5a:
6d:60:5b:4c:32:8b:34:04:26:fb:8f:d8:43:2c:94:
1b:50:dc:c3:1f:70:46:ac:41:5d:d5:05:0c:bf:8d:
78:05:41:b1:62:5e:c3:8f:c0:d2:ab:e6:8d:a1:04:
68:1f:ff:1b:2d:a2:ed:0f:84:e4:20:97:7e:29:6e:
c9:da:82:cc:91:d3:0a:44:91:dd:df:84:41:5e:e8:
d6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:01:5A:F3:64:FC:E4:09:00:5E:5D:EF:F0:F4:1C:B4:DA:43:E2:16
X509v3 Authority Key Identifier:
keyid:97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/3136302e33302e3233302e302f32332d3233203d3e20313334373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.30.230.0/23
Signature Algorithm: sha256WithRSAEncryption
45:10:20:93:40:49:6f:40:3b:0c:34:8e:f9:7b:03:b4:5c:56:
10:be:4c:76:8b:fa:97:81:46:83:10:6e:65:3b:14:74:76:df:
42:f0:2e:a4:0b:1c:73:ca:fc:ce:f3:29:d1:23:81:4b:c7:80:
a9:44:a2:ef:2a:28:cd:fd:7a:36:c1:84:0f:39:1c:24:8a:08:
33:89:c3:39:38:fd:00:82:ab:0c:78:ed:77:7e:ec:e2:98:28:
58:65:98:85:00:88:b8:ae:d1:53:05:4f:72:c2:b5:9b:69:ae:
21:98:d1:fa:d9:e8:68:60:20:1e:e9:94:22:fd:73:f9:65:d6:
1d:df:74:66:36:a0:95:06:a1:4c:6a:34:e7:45:ea:4a:7b:62:
7a:e5:69:c3:7f:5d:a2:45:e8:0c:c9:49:2b:68:8b:86:5e:52:
c2:d9:a9:bd:04:39:ab:5e:5b:cf:90:aa:32:09:c1:e3:45:65:
4b:0d:e0:0a:c9:bb:f4:9d:75:32:f7:14:a5:b0:af:49:e3:62:
ff:63:20:e4:81:fd:42:c1:41:36:7d:d8:f9:4e:9d:32:cb:ab:
40:d9:b0:98:f1:92:3f:a1:85:21:cd:2c:bd:74:be:12:f1:76:
8e:d3:ed:e8:7a:14:39:74:12:4e:c2:da:38:f7:2d:52:ce:1f:
e3:5b:b1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:33:34 2026 by rpki-client