
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117016035443146775/0/3136322e342e3133362e302f32332d3234203d3e20313336323530.roa
File: 3136322e342e3133362e302f32332d3234203d3e20313336323530.roa (raw, json)
Hash identifier: 1EIqmfJpGg9YGua/kg8dNOeN9v4HQ/9sl12YP3T1lzc=
Subject key identifier: 2E:9D:4D:5E:CF:6F:4A:6A:2E:5A:03:A8:32:35:8F:2F:32:F0:32:40
Certificate issuer: /CN=4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C
Certificate serial: 529EED5F04750BF976E6B679F0CA0B5C649F9AAC
Authority key identifier: 4E:F5:FA:B9:59:4A:1D:46:B9:FC:A2:CE:FA:FD:12:EA:0E:11:4A:1C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/3136322e342e3133362e302f32332d3234203d3e20313336323530.roa
Signing time: Wed 10 Jun 2026 09:12:46 +0000
ROA not before: Wed 10 Jun 2026 09:07:46 +0000
ROA not after: Wed 09 Jun 2027 09:12:46 +0000
asID: 136250
IP address blocks: 162.4.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.crl
rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:58:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:9e:ed:5f:04:75:0b:f9:76:e6:b6:79:f0:ca:0b:5c:64:9f:9a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C
Validity
Not Before: Jun 10 09:07:46 2026 GMT
Not After : Jun 9 09:12:46 2027 GMT
Subject: CN=2E9D4D5ECF6F4A6A2E5A03A832358F2F32F03240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:22:1b:77:4b:09:26:0d:f6:b3:66:ff:f4:c3:
1c:ed:d5:8b:93:ff:d9:b3:cd:37:e8:e4:64:65:39:
13:d1:ad:26:61:b2:e6:2c:5d:a1:a8:6f:b6:dc:cf:
12:e7:c3:d3:fc:d1:7c:f9:12:54:9c:65:02:c7:ec:
9e:8b:c0:46:6c:24:6e:48:8c:84:82:47:40:94:44:
6c:bf:8c:fd:89:09:16:fa:99:ca:3c:29:77:64:dc:
12:27:4c:6d:f0:c4:bc:eb:e0:5c:98:28:aa:be:09:
42:43:de:a2:32:e2:ba:95:2e:67:d8:e2:49:fe:31:
cd:f3:13:67:f5:ba:8a:9b:b5:d1:a3:4f:a8:0f:69:
5d:5c:11:ee:ad:4b:d6:3d:8f:3b:1f:2e:b4:33:7e:
49:f6:85:63:87:16:17:01:da:fc:49:93:03:d1:cc:
55:af:ee:98:51:50:28:bf:ad:ff:d5:e0:d5:52:85:
81:70:c8:0f:c5:a0:cc:0a:6b:1d:41:31:e1:74:26:
13:cc:9b:e4:9e:14:3f:53:95:e0:49:03:7b:20:26:
e3:93:74:cd:db:90:5a:6c:43:00:d8:6c:40:92:de:
e1:93:6a:7e:5b:cb:a7:a3:c5:e8:df:22:a9:cc:a1:
7a:23:44:e0:8b:63:9b:c6:51:6d:23:ff:0f:00:fb:
ab:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9D:4D:5E:CF:6F:4A:6A:2E:5A:03:A8:32:35:8F:2F:32:F0:32:40
X509v3 Authority Key Identifier:
keyid:4E:F5:FA:B9:59:4A:1D:46:B9:FC:A2:CE:FA:FD:12:EA:0E:11:4A:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/3136322e342e3133362e302f32332d3234203d3e20313336323530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.4.136.0/23
Signature Algorithm: sha256WithRSAEncryption
75:61:54:94:95:7b:09:d3:49:34:de:73:01:ac:05:cf:16:1f:
e9:be:83:52:86:bd:0a:03:fb:8d:23:9d:dd:63:56:27:e0:f9:
7c:4b:3f:d6:da:e6:39:dc:6f:90:ea:9a:21:be:23:02:59:b2:
5a:4f:30:77:4d:b3:f3:c1:38:74:c6:75:cf:af:0e:46:6b:45:
51:ba:37:da:13:9d:82:09:30:64:f4:46:3d:35:b3:89:58:c6:
89:42:86:00:99:29:b1:b6:61:bf:9b:8d:d1:ad:b7:69:36:1d:
35:43:28:f5:e8:14:2b:a0:51:b3:8f:7a:d1:6b:06:26:ba:7e:
4e:a2:4c:ef:44:59:b5:3c:bf:62:c4:c2:b8:dc:7d:33:2c:53:
03:19:54:95:69:c1:5a:07:93:55:15:33:81:05:78:61:cb:87:
25:20:8b:e8:33:21:7e:9d:85:78:68:85:9a:d5:75:82:99:e1:
44:bb:d8:69:b2:73:8d:49:9d:c7:6e:8d:4c:0c:84:8c:e7:ce:
f2:28:47:72:f4:38:fb:47:8b:7c:64:84:fa:37:33:c9:af:83:
81:3d:54:ea:a8:e5:b8:c7:71:50:7e:2d:bd:be:7b:51:e9:00:
ab:f0:7b:56:e3:23:7a:4e:50:f4:61:5d:f8:46:0e:0d:2f:58:
89:6d:1e:b5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:41 2026 by rpki-client