
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139332e302f32342d3234203d3e203633363431.roa
File: 3132332e34392e3139332e302f32342d3234203d3e203633363431.roa (raw, json)
Hash identifier: 7GuWWC6TeGbnaSkQZf3XPm7zXQVKR8It9F05zVH4dTw=
Subject key identifier: 51:82:0F:0D:3D:03:4D:11:4B:71:9C:04:B7:1E:36:84:82:25:95:F3
Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Certificate serial: 4F6F70AECFDF03F2B9521D7A3FF747136E4EDE0C
Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139332e302f32342d3234203d3e203633363431.roa
Signing time: Wed 22 Apr 2026 14:11:39 +0000
ROA not before: Wed 22 Apr 2026 14:06:39 +0000
ROA not after: Wed 21 Apr 2027 14:11:39 +0000
asID: 63641
IP address blocks: 123.49.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 10:43:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:6f:70:ae:cf:df:03:f2:b9:52:1d:7a:3f:f7:47:13:6e:4e:de:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Validity
Not Before: Apr 22 14:06:39 2026 GMT
Not After : Apr 21 14:11:39 2027 GMT
Subject: CN=51820F0D3D034D114B719C04B71E3684822595F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a9:aa:74:98:41:44:26:05:28:5e:ed:04:e3:
ad:bf:4e:87:54:ef:2d:3c:26:20:bf:65:f0:a9:a6:
12:b7:24:c2:24:5f:8b:6f:26:33:b0:c0:5e:41:80:
34:35:f4:ca:c5:c5:ba:33:24:00:00:7c:6e:bf:df:
a7:68:98:f2:37:90:d0:a6:3f:4e:a6:25:e1:ca:2f:
c3:22:82:a4:02:c6:ca:64:0c:f1:ff:7e:af:86:d7:
63:e8:b1:5c:43:ed:7f:23:53:8d:f4:01:5d:6f:f1:
b9:a0:79:5d:a2:e7:cb:4c:fa:2a:dd:4c:76:0e:65:
cc:47:f4:1c:bc:8a:24:a4:fc:b9:79:e5:4c:d5:85:
d4:13:78:68:5f:5b:17:6a:5f:0c:55:e9:10:06:c1:
89:34:ea:e1:e9:c9:45:f0:1e:e4:15:94:3f:3e:74:
2b:34:48:dc:a3:cd:02:26:f0:c0:66:33:b6:16:28:
a3:45:04:bf:f6:04:82:a3:fc:af:ba:55:6c:04:d2:
35:0c:7d:17:96:4e:58:48:a8:b2:02:26:b8:70:d7:
58:d5:fd:6f:57:bd:0c:bf:1a:3c:87:65:10:2d:cd:
fd:19:c5:fe:ad:89:4e:da:c1:95:a4:65:70:e9:30:
ad:1f:a8:cc:7a:c2:2a:d2:95:4a:ac:26:1b:1f:81:
7c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:82:0F:0D:3D:03:4D:11:4B:71:9C:04:B7:1E:36:84:82:25:95:F3
X509v3 Authority Key Identifier:
keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139332e302f32342d3234203d3e203633363431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.49.193.0/24
Signature Algorithm: sha256WithRSAEncryption
65:cf:c5:26:28:8a:81:8c:6c:88:60:cf:ab:7a:22:14:d1:33:
c4:49:2b:de:ca:64:b4:b5:9a:39:5d:f5:7f:d6:fd:d0:e7:00:
7d:01:85:f2:d3:88:95:cb:1c:fa:1a:21:61:3e:d7:dd:4a:31:
1c:a3:fe:20:cb:3e:dd:e3:fa:13:12:24:1d:bd:f5:fe:a8:15:
fd:95:fa:ad:10:1b:45:7a:86:8d:d2:e6:23:f6:b2:29:04:1d:
c7:ac:81:df:07:77:4b:82:f7:af:1d:da:f1:b6:21:7e:e7:96:
27:af:81:dd:c2:42:4d:a6:91:fd:b6:fa:76:aa:ab:2d:7c:19:
2a:5b:94:15:85:e3:da:00:cf:ee:19:25:b8:48:ef:8f:7d:b4:
63:64:f5:1f:95:5d:82:72:39:16:8b:db:0d:06:a8:b6:fa:c8:
c5:d1:a5:b1:a3:53:00:27:af:d9:ef:77:8e:a0:5a:80:79:95:
01:52:50:f2:e4:a6:96:6d:2a:14:5b:ed:19:ef:f7:e3:4a:f1:
fe:89:97:d2:e5:97:c4:50:bc:db:be:32:23:4a:7a:af:52:da:
b9:7f:6b:09:06:a9:b1:4e:ef:d0:53:7f:34:7f:2b:8b:9c:5a:
c9:19:26:1c:5e:c1:bf:74:ec:d2:f4:92:07:96:51:d4:03:43:
99:39:8d:04
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:07:23 2026 by rpki-client