
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3136302e3230322e3231322e302f32342d3234203d3e203536303436.roa
File: 3136302e3230322e3231322e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier: ZKx+CoanZ8n1Fsj964Esh4+prB2XqkEfW7pPx+tWFZQ=
Subject key identifier: 02:90:B5:70:58:3D:DE:5F:D5:F2:FD:BA:C7:C4:AA:54:F4:8D:E9:16
Certificate issuer: /CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE
Certificate serial: 3FAF980DC30EFABB269B0533EDD4004465FA63C2
Authority key identifier: EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3136302e3230322e3231322e302f32342d3234203d3e203536303436.roa
Signing time: Fri 12 Jun 2026 06:31:21 +0000
ROA not before: Fri 12 Jun 2026 06:26:21 +0000
ROA not after: Fri 11 Jun 2027 06:31:21 +0000
asID: 56046
IP address blocks: 160.202.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl
rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:af:98:0d:c3:0e:fa:bb:26:9b:05:33:ed:d4:00:44:65:fa:63:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE
Validity
Not Before: Jun 12 06:26:21 2026 GMT
Not After : Jun 11 06:31:21 2027 GMT
Subject: CN=0290B570583DDE5FD5F2FDBAC7C4AA54F48DE916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b4:6f:de:88:1f:24:52:d0:2b:5c:6f:ab:e3:
2a:9a:12:dc:fa:c9:ee:6e:b4:cb:55:43:74:14:bf:
03:02:de:8d:54:00:27:38:35:bb:8d:4e:8c:69:5d:
db:20:04:95:92:5b:39:49:ea:d2:ea:f2:76:a4:63:
3b:12:76:c0:6a:2c:81:f2:ee:38:0c:ba:f4:6c:f4:
72:24:1d:4e:ca:7d:e5:90:6d:8c:88:e8:54:f9:b9:
ca:8f:f0:90:e6:18:c9:7f:e2:5c:65:a3:9e:bc:a8:
ac:fd:1b:85:b5:04:a1:0c:5f:e4:98:5a:ab:c3:52:
2f:68:55:0b:18:16:4e:a0:c0:d4:3d:d4:12:3c:ac:
4e:80:9d:1e:29:5a:e0:31:a1:0c:d8:06:29:af:fb:
9f:24:b9:f7:2a:32:e4:e9:cb:49:74:20:99:cf:da:
04:fa:2d:60:11:dc:37:e9:69:21:bc:30:b8:4f:e7:
11:37:c6:3c:8a:d5:ed:4b:d8:49:78:1d:67:c9:40:
c9:66:7a:d0:52:28:c0:d7:70:66:aa:f8:02:5c:f2:
3a:f1:ae:5b:aa:4f:2c:83:b3:9d:9c:ce:8d:b7:d8:
24:d2:95:db:35:c3:93:6e:27:1d:b7:61:a2:5a:3f:
8a:75:66:6f:85:f5:51:76:56:d4:45:95:6b:8a:06:
74:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:90:B5:70:58:3D:DE:5F:D5:F2:FD:BA:C7:C4:AA:54:F4:8D:E9:16
X509v3 Authority Key Identifier:
keyid:EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3136302e3230322e3231322e302f32342d3234203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.202.212.0/24
Signature Algorithm: sha256WithRSAEncryption
18:fd:24:72:d5:86:89:f1:a4:d7:f7:6e:1f:2c:9a:a6:97:29:
fb:28:b6:5e:ec:e5:16:31:3c:b5:32:d7:2d:80:33:fa:04:ac:
10:0a:d0:23:45:c1:48:8d:41:86:1d:c7:05:c5:01:cf:29:db:
3e:3f:55:5e:76:25:cb:9b:ae:c0:38:eb:6f:11:a5:79:7d:51:
44:46:aa:3f:81:0b:a2:96:6c:58:d4:e9:80:aa:12:2b:29:ea:
67:6c:b5:bf:7b:b0:69:71:6b:0b:39:f6:56:8a:46:0b:a7:78:
c0:81:22:67:d4:0a:b9:74:b5:c1:e3:8f:04:f1:1e:a5:ff:ab:
53:31:db:c1:a3:7b:5a:77:55:60:55:86:53:f6:8e:ee:6c:70:
62:8e:b6:a8:df:77:f3:b1:bb:3e:ec:18:e9:b1:f9:0e:f3:e3:
c7:8d:4b:bb:1e:7e:b5:3c:9e:ca:0b:26:ba:dc:f3:27:a2:41:
29:f0:19:60:5b:6f:a4:ac:0c:05:c4:34:d7:98:64:fd:c8:12:
68:c8:a0:e6:e4:82:e0:29:48:f9:f7:89:dc:eb:86:b6:a5:79:
57:73:6a:3c:c9:f3:ac:58:32:f7:9b:7d:d8:28:28:ef:d6:22:
8b:a2:98:40:c0:6e:12:12:fb:43:aa:3d:68:66:93:8b:a6:a5:
49:15:13:7f
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUP6+YDcMO+rsmmwUz7dQARGX6Y8IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUI4MDY3MkFENDJBMjc5NkFGREI2Qzk5RjdGRkI2MjlF
NkEwQTRFRTAeFw0yNjA2MTIwNjI2MjFaFw0yNzA2MTEwNjMxMjFaMDMxMTAvBgNV
BAMTKDAyOTBCNTcwNTgzRERFNUZENUYyRkRCQUM3QzRBQTU0RjQ4REU5MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCctG/eiB8kUtArXG+r4yqaEtz6
ye5utMtVQ3QUvwMC3o1UACc4NbuNToxpXdsgBJWSWzlJ6tLq8nakYzsSdsBqLIHy
7jgMuvRs9HIkHU7KfeWQbYyI6FT5ucqP8JDmGMl/4lxlo568qKz9G4W1BKEMX+SY
WqvDUi9oVQsYFk6gwNQ91BI8rE6AnR4pWuAxoQzYBimv+58kufcqMuTpy0l0IJnP
2gT6LWAR3DfpaSG8MLhP5xE3xjyK1e1L2El4HWfJQMlmetBSKMDXcGaq+AJc8jrx
rluqTyyDs52czo232CTSlds1w5NuJx23YaJaP4p1Zm+F9VF2VtRFlWuKBnSBAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUApC1cFg93l/V8v26x8SqVPSN6RYwHwYDVR0j
BBgwFoAU64BnKtQqJ5av22yZ9/+2KeagpO4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
ODUyNjYwNzY3MDI0NzQyNS8wL0VCODA2NzJBRDQyQTI3OTZBRkRCNkM5OUY3RkZC
NjI5RTZBMEE0RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRUI4MDY3MkFENDJBMjc5NkFGREI2Qzk5RjdGRkI2MjlFNkEwQTRFRS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwOTg1MjY2MDc2NzAyNDc0MjUvMC8zMTM2MzAyZTMy
MzAzMjJlMzIzMTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAKDK1DANBgkqhkiG9w0BAQsFAAOCAQEAGP0kctWGifGk1/duHyya
ppcp+yi2XuzlFjE8tTLXLYAz+gSsEArQI0XBSI1Bhh3HBcUBzynbPj9VXnYly5uu
wDjrbxGleX1RREaqP4ELopZsWNTpgKoSKynqZ2y1v3uwaXFrCzn2VopGC6d4wIEi
Z9QKuXS1weOPBPEepf+rUzHbwaN7WndVYFWGU/aO7mxwYo62qN9387G7PuwY6bH5
DvPjx41Lux5+tTyeygsmutzzJ6JBKfAZYFtvpKwMBcQ015hk/cgSaMig5uSC4ClI
+feJ3OuGtqV5V3NqPMnzrFgy95t92Cgo79Yii6KYQMBuEhL7Q6o9aGaTi6alSRUT
fw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:47:46 2026 by rpki-client