
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111933397845934097/0/3231382e39382e39362e302f32332d3233203d3e2039383038.roa
File: 3231382e39382e39362e302f32332d3233203d3e2039383038.roa (raw, json)
Hash identifier: /vupNlAkVqBtQwoRk/vBzblmtVxgOGAGGyn//LCdMZY=
Subject key identifier: B7:84:C0:DE:51:AB:76:3D:E1:4C:56:94:04:D3:54:45:D6:F8:02:EC
Certificate issuer: /CN=E75349FBEA39CFED65BB280A32055EB716679089
Certificate serial: 0C3A9BAAD70FF164B18EAB945E791DB88FE87C42
Authority key identifier: E7:53:49:FB:EA:39:CF:ED:65:BB:28:0A:32:05:5E:B7:16:67:90:89
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E75349FBEA39CFED65BB280A32055EB716679089.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/3231382e39382e39362e302f32332d3233203d3e2039383038.roa
Signing time: Fri 12 Jun 2026 09:51:35 +0000
ROA not before: Fri 12 Jun 2026 09:46:35 +0000
ROA not after: Fri 11 Jun 2027 09:51:35 +0000
asID: 9808
IP address blocks: 218.98.96.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/E75349FBEA39CFED65BB280A32055EB716679089.crl
rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/E75349FBEA39CFED65BB280A32055EB716679089.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E75349FBEA39CFED65BB280A32055EB716679089.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 09:42:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:3a:9b:aa:d7:0f:f1:64:b1:8e:ab:94:5e:79:1d:b8:8f:e8:7c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E75349FBEA39CFED65BB280A32055EB716679089
Validity
Not Before: Jun 12 09:46:35 2026 GMT
Not After : Jun 11 09:51:35 2027 GMT
Subject: CN=B784C0DE51AB763DE14C569404D35445D6F802EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bd:cb:0c:ff:a2:ce:29:9c:6d:aa:a4:82:e6:
9b:03:34:28:2f:fd:52:bc:07:8b:6e:18:ad:c8:ce:
4d:b9:8c:78:77:52:e8:a9:ad:c6:ce:e4:56:6b:73:
17:1f:1b:6f:46:9a:a0:4f:4b:2e:77:11:e6:7d:d8:
ac:ab:6b:74:33:4d:99:ce:1b:18:6f:1f:8b:ec:17:
6c:ff:dd:55:2f:91:bd:e9:26:fb:4b:1d:f8:a2:4e:
e3:a1:51:aa:7e:ad:2f:35:87:6d:dc:1a:33:82:48:
f7:46:1b:54:41:6f:56:80:27:3e:b4:47:d9:79:8a:
dc:3e:50:5a:bd:bb:40:ae:4c:0a:5f:48:b6:c4:0d:
9d:10:31:ce:3b:56:56:d1:28:eb:8f:97:70:09:84:
08:c5:3c:58:77:52:cd:81:26:9c:87:be:96:68:af:
fe:3d:83:11:06:86:58:65:c1:27:fd:2f:6e:99:e2:
47:84:19:e3:9d:6b:fc:bb:67:2a:98:53:87:75:ff:
ec:6d:3c:c5:2a:46:50:f9:3a:36:14:83:01:5d:8f:
a3:2d:c2:54:7f:b3:7f:9a:ea:ef:de:7a:5e:7c:b9:
91:80:0a:6e:17:04:da:2a:0b:77:26:a4:49:90:0b:
4a:9c:1d:7d:4a:59:73:81:4a:95:cf:26:51:1c:08:
58:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:84:C0:DE:51:AB:76:3D:E1:4C:56:94:04:D3:54:45:D6:F8:02:EC
X509v3 Authority Key Identifier:
keyid:E7:53:49:FB:EA:39:CF:ED:65:BB:28:0A:32:05:5E:B7:16:67:90:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/E75349FBEA39CFED65BB280A32055EB716679089.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E75349FBEA39CFED65BB280A32055EB716679089.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/3231382e39382e39362e302f32332d3233203d3e2039383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.98.96.0/23
Signature Algorithm: sha256WithRSAEncryption
44:94:00:21:90:1a:19:2f:09:72:05:3d:4e:bb:07:5d:cb:41:
12:2c:6b:62:c7:07:88:c3:ab:aa:07:8b:6f:1a:a1:89:81:21:
1d:c7:12:b7:63:ba:b9:69:0a:ad:29:3b:29:3b:7b:eb:df:66:
48:88:ba:dc:3f:8e:53:c1:84:bd:c5:d1:16:92:c5:5a:6f:16:
a0:98:c5:a1:4c:4f:44:fc:5b:c4:d9:c2:e1:c1:02:08:b4:5c:
16:e8:d6:86:e7:44:91:39:92:97:77:d8:66:10:5a:0c:d7:96:
82:9a:3d:44:81:04:08:74:d2:81:f8:50:5d:6a:17:03:5e:bb:
97:d2:cf:41:53:0c:d2:f8:e8:76:2c:2b:9b:b1:2d:bc:b3:d1:
79:c7:16:b5:ff:e8:c5:18:e1:ec:1c:67:cb:51:d7:27:3e:2b:
63:e8:95:4d:18:1d:8f:53:92:f1:39:ee:71:d0:a8:a2:0b:27:
20:12:58:0d:ff:0d:7a:8d:c1:3e:81:3a:aa:f7:65:13:b2:68:
21:91:9b:f5:80:b9:54:1d:51:94:34:dc:f6:ab:9d:fb:21:23:
71:0c:58:37:a0:65:b7:77:6b:f5:df:f5:04:fb:7b:a0:34:d9:
1b:43:1d:a9:9e:dc:73:09:43:17:5f:e7:4c:50:ff:a7:7a:03:
83:5f:19:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:50:12 2026 by rpki-client