
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3136302e3230322e3231342e302f32342d3234203d3e203536303436.roa
File: 3136302e3230322e3231342e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier: jp/C8ddTqaIGYMOKc4+t+KpnjUeQuW4SO5A8itHfp7w=
Subject key identifier: 33:E6:FE:C6:1A:BA:94:AE:3C:D2:66:39:5B:C5:17:DA:EF:60:93:7F
Certificate issuer: /CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE
Certificate serial: 16108B3453461DCFE089BB77D45B3A61B19334F6
Authority key identifier: EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3136302e3230322e3231342e302f32342d3234203d3e203536303436.roa
Signing time: Fri 12 Jun 2026 06:31:20 +0000
ROA not before: Fri 12 Jun 2026 06:26:20 +0000
ROA not after: Fri 11 Jun 2027 06:31:20 +0000
asID: 56046
IP address blocks: 160.202.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl
rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:10:8b:34:53:46:1d:cf:e0:89:bb:77:d4:5b:3a:61:b1:93:34:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE
Validity
Not Before: Jun 12 06:26:20 2026 GMT
Not After : Jun 11 06:31:20 2027 GMT
Subject: CN=33E6FEC61ABA94AE3CD266395BC517DAEF60937F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f7:e7:45:70:e3:66:31:98:f7:00:48:8f:9a:
a3:72:d7:e1:64:0e:84:ec:07:e3:cc:f1:b9:af:9b:
44:69:31:a6:a4:cf:54:9f:02:5a:da:50:75:e8:4f:
50:e2:7f:0a:35:6b:fe:6e:47:b1:ee:d4:fb:8e:47:
11:45:1d:af:ef:c1:20:fd:c9:84:b7:8e:29:3f:a5:
2b:34:c5:78:03:6f:56:1c:1e:58:e0:2a:fa:e9:b7:
93:be:ce:56:e7:5f:ec:69:c9:6b:b3:5d:97:84:77:
7e:f8:54:ce:69:9e:84:e3:93:5a:d9:95:d1:83:2a:
2b:96:50:e2:8f:a2:d1:f5:f5:75:2a:2c:60:cd:ad:
e7:51:c4:e2:42:4b:a8:06:19:5b:31:ec:a6:85:0f:
76:a3:53:40:1e:e0:f7:30:37:63:ac:82:77:67:f9:
a0:b7:ad:80:df:dc:88:9f:0f:98:d1:c4:2e:07:7a:
cc:3c:3b:61:78:15:a6:24:32:e1:71:e2:91:7d:50:
18:9f:47:c4:9a:2d:86:91:d8:d6:47:ec:3d:10:cb:
e8:28:a0:8e:ef:a2:dc:8d:85:69:af:d3:cc:ee:1a:
4c:19:0a:76:61:3e:86:71:85:4d:48:b3:e4:30:a9:
c4:8c:db:a9:48:d9:c9:11:8f:ed:da:ef:10:11:82:
82:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E6:FE:C6:1A:BA:94:AE:3C:D2:66:39:5B:C5:17:DA:EF:60:93:7F
X509v3 Authority Key Identifier:
keyid:EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/3136302e3230322e3231342e302f32342d3234203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.202.214.0/24
Signature Algorithm: sha256WithRSAEncryption
19:ba:02:db:f1:7b:dd:91:6e:43:5b:02:9c:57:6b:72:b0:9d:
77:9f:ed:08:d5:bf:88:ff:77:7e:fb:a9:93:c0:66:79:9b:e4:
38:31:aa:57:98:fb:27:ed:b3:cf:b7:43:f8:c8:6a:30:2c:f7:
86:11:11:5b:7a:c2:d0:84:b6:70:40:bf:f6:13:c0:8a:40:d8:
b6:d2:8f:c3:f5:50:9c:aa:89:d0:7d:7c:3b:28:9f:5a:82:e5:
df:f7:c1:00:86:25:23:9c:5c:97:b9:04:7d:e8:00:44:af:e2:
e9:89:d8:3c:a6:f1:c5:01:20:57:fd:4b:38:0d:5e:4c:78:15:
1f:8d:e1:93:2f:20:ef:9e:ad:62:6a:1a:99:97:25:a5:0b:a1:
f0:e5:55:8b:5b:6f:cd:42:d6:b4:d1:89:ad:e0:b2:a7:d6:eb:
01:a2:45:37:bc:06:23:d7:4b:aa:48:eb:4f:aa:93:a7:66:0b:
b5:90:77:75:72:15:5a:71:94:22:8d:97:ba:e2:c4:d6:e5:5c:
fc:5c:01:c3:4d:40:05:61:4a:2e:aa:ee:f4:d6:02:f7:23:63:
f0:51:4c:81:0a:62:20:7a:c3:8d:78:54:65:83:56:26:ec:d5:
fe:ca:30:1d:ae:52:c7:00:79:85:a3:b9:49:5c:b6:c7:33:e5:
ce:d9:92:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:18:26 2026 by rpki-client