
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1134692662507470893/0/3130312e34392e3230362e302f32342d3234203d3e203539303638.roa
File: 3130312e34392e3230362e302f32342d3234203d3e203539303638.roa (raw, json)
Hash identifier: CKMl/00h/msypGP4zF+uCyfg/cUiErV8Q9I2C6W5rc8=
Subject key identifier: 16:52:29:D9:11:20:B8:91:C3:EB:38:98:F6:2C:53:BB:06:56:30:A2
Certificate issuer: /CN=B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559
Certificate serial: 43D69103DEEB73AF12BCA33FC8E8D3D7393B345F
Authority key identifier: B8:AF:B6:96:C1:5A:BC:4F:FE:FB:3E:B1:EA:10:EF:D4:93:19:E5:59
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1134692662507470893/0/3130312e34392e3230362e302f32342d3234203d3e203539303638.roa
Signing time: Wed 29 Jul 2026 04:16:47 +0000
ROA not before: Wed 29 Jul 2026 04:11:47 +0000
ROA not after: Wed 28 Jul 2027 04:16:47 +0000
asID: 59068
IP address blocks: 101.49.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1134692662507470893/0/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.crl
rsync://rpki-rps.cnnic.cn/repo/A1134692662507470893/0/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 22:45:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:d6:91:03:de:eb:73:af:12:bc:a3:3f:c8:e8:d3:d7:39:3b:34:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559
Validity
Not Before: Jul 29 04:11:47 2026 GMT
Not After : Jul 28 04:16:47 2027 GMT
Subject: CN=165229D91120B891C3EB3898F62C53BB065630A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a1:e4:9b:56:4e:3f:2f:12:b9:46:1b:5a:52:
15:6e:0e:16:f7:4e:a8:3e:32:57:16:fa:3a:12:f2:
ef:ac:0e:48:82:a3:9e:a7:c8:cf:41:66:d6:93:ce:
38:ec:0e:b9:16:3f:5a:b7:fa:fc:3c:5d:f4:91:3a:
bd:d2:85:46:bd:78:57:0d:c4:c1:e5:9b:c4:15:0e:
aa:8e:79:fd:50:f1:2b:fc:ab:4c:82:18:86:84:a9:
ce:db:03:88:32:3f:85:73:f1:e8:0f:e1:8d:8d:8a:
bf:cb:46:eb:93:57:f2:4d:27:44:2a:e5:d6:c6:c1:
f9:3d:02:06:5f:7d:6f:34:e7:b5:a1:47:be:45:28:
a5:e7:52:e0:d3:71:be:c7:c9:7a:82:d7:12:d9:b5:
3a:60:23:e9:fe:4e:36:b6:cc:ef:80:3d:19:6a:a2:
dc:ff:60:6e:b2:d7:48:d5:07:31:74:43:6b:7c:a8:
9c:04:62:8e:3d:3e:97:5b:16:cf:e0:ef:74:96:67:
03:5d:52:d9:fe:f1:4b:34:c7:c1:32:11:4b:a7:8d:
44:d9:ec:7b:eb:e9:74:9b:86:72:4e:38:0d:bc:d0:
17:25:53:45:6b:f8:41:da:eb:96:03:84:37:c6:74:
bd:67:fa:62:3b:39:a1:9f:40:93:11:4f:dd:0e:32:
d9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:52:29:D9:11:20:B8:91:C3:EB:38:98:F6:2C:53:BB:06:56:30:A2
X509v3 Authority Key Identifier:
keyid:B8:AF:B6:96:C1:5A:BC:4F:FE:FB:3E:B1:EA:10:EF:D4:93:19:E5:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1134692662507470893/0/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1134692662507470893/0/3130312e34392e3230362e302f32342d3234203d3e203539303638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.49.206.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:2b:f5:b1:52:68:56:7a:49:3e:b2:c9:b7:ec:85:e1:5f:57:
a5:96:71:7c:c0:49:24:ac:a4:06:d3:69:d5:d1:0b:c1:f3:29:
90:a2:74:c4:aa:1b:71:34:34:ec:f9:9e:b5:26:94:89:13:a4:
5d:9f:21:49:42:e7:f9:30:ff:ca:c9:ce:9f:55:eb:ab:f1:8c:
32:4e:0e:6c:6c:bb:3a:35:d9:8c:43:ff:97:fa:00:f0:79:c6:
20:98:c8:84:c8:aa:aa:bd:31:dc:95:50:d0:10:4a:e7:1f:55:
92:a1:87:1f:d3:5a:52:02:81:d7:78:84:f0:94:7b:81:ad:b8:
e8:b6:1d:b2:f7:de:6f:8c:93:16:00:fa:5b:bc:d6:0e:ec:bc:
92:91:9c:17:a3:13:bd:da:06:90:9f:97:87:a2:d3:85:4a:fa:
1f:49:23:d5:82:a4:49:16:fe:97:ac:68:8d:29:de:6a:18:77:
4a:3b:57:d4:bb:38:b4:7a:5a:5b:52:06:59:8f:55:ca:b1:02:
37:fa:92:31:2d:c0:74:d3:00:b3:d6:b0:e7:7b:c9:3f:7d:6d:
30:cb:92:24:37:6b:3a:16:53:94:d8:54:66:63:df:82:b4:ee:
2f:9f:19:d9:54:08:df:8c:85:fe:f5:b5:18:49:9e:7e:cd:ce:
36:3a:c5:2e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 29 23:51:56 2026 by rpki-client