
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3230392e302f32342d3234203d3e203633363431.roa
File: 3132332e34392e3230392e302f32342d3234203d3e203633363431.roa (raw, json)
Hash identifier: WWjH9RgI5wcL4/fTzeAf0Az4ehEFm1I0FQazks3t46s=
Subject key identifier: 30:CD:E5:0B:03:50:17:0E:59:55:F5:78:5D:8E:1E:CB:B8:BD:8C:F5
Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Certificate serial: 76A50AEAB92B13E4435AB99C5FC3AE37944BEF3F
Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3230392e302f32342d3234203d3e203633363431.roa
Signing time: Wed 22 Apr 2026 14:17:04 +0000
ROA not before: Wed 22 Apr 2026 14:12:04 +0000
ROA not after: Wed 21 Apr 2027 14:17:04 +0000
asID: 63641
IP address blocks: 123.49.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 10:43:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:a5:0a:ea:b9:2b:13:e4:43:5a:b9:9c:5f:c3:ae:37:94:4b:ef:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Validity
Not Before: Apr 22 14:12:04 2026 GMT
Not After : Apr 21 14:17:04 2027 GMT
Subject: CN=30CDE50B0350170E5955F5785D8E1ECBB8BD8CF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:56:48:a6:49:90:c4:d0:92:dc:74:e1:34:98:
77:04:51:91:f7:78:e1:25:9c:98:1b:b5:8e:e2:a8:
6d:49:ac:cd:25:77:27:7a:5a:9f:35:b2:d8:d3:6e:
9b:65:f2:ba:99:ab:52:30:16:0a:23:e2:cb:d0:c2:
27:d2:30:58:16:af:97:0a:1f:65:c0:ad:34:8b:cf:
ac:15:fb:8c:38:71:12:61:68:56:e8:f8:62:21:ba:
ed:5f:4b:f9:9a:fe:2a:5a:99:23:9a:9a:5b:66:f4:
65:d1:5b:6d:29:c2:a7:5e:9d:d4:41:cb:dd:3b:9b:
1e:37:37:b2:f2:95:85:46:f1:98:97:69:13:c5:7b:
4c:2e:45:5e:85:0a:7e:99:c6:50:78:c9:67:bf:47:
7f:48:2e:ff:a2:06:97:01:6b:8f:11:5c:b4:5b:35:
a6:8c:d5:78:1f:f4:77:11:56:b9:ca:f5:6c:a8:05:
fd:72:bf:54:c9:2d:87:6e:4a:03:85:cd:5c:47:96:
55:25:b3:ed:6c:e5:75:45:eb:c0:7d:49:eb:2b:f1:
db:b4:3e:04:22:6f:bc:7f:cd:fc:58:0b:59:b0:8f:
d6:89:cb:25:25:c0:25:e8:1d:9f:c7:d3:4a:70:26:
e5:57:ca:39:87:80:cb:f8:a5:ca:83:1a:01:a6:77:
25:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CD:E5:0B:03:50:17:0E:59:55:F5:78:5D:8E:1E:CB:B8:BD:8C:F5
X509v3 Authority Key Identifier:
keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3230392e302f32342d3234203d3e203633363431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.49.209.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:8b:f2:d7:f9:db:90:72:3c:9d:43:3f:1f:27:b5:ca:ea:af:
8c:d8:56:f1:89:39:9b:5c:59:65:2c:20:18:80:20:ad:84:ba:
f5:0b:85:8d:5f:5b:65:d7:95:86:41:a1:89:39:a5:00:15:e7:
ef:49:9e:47:0c:d6:22:d9:3a:84:25:09:17:64:8f:71:18:5c:
c1:f3:e2:a9:c2:a2:67:a8:37:7f:0e:c7:d6:54:f8:1b:74:b0:
8f:a8:b0:6c:be:12:65:36:ae:fc:e4:80:69:d5:2e:65:a7:9d:
ff:39:a6:99:32:24:4d:b9:c3:1a:7a:b4:11:47:dc:22:2a:08:
54:fd:24:34:2e:92:af:39:8e:ce:3d:78:86:52:e5:08:6a:83:
5f:d7:32:18:f4:92:d0:62:33:37:d0:de:4a:2e:9a:84:48:a3:
66:bd:88:57:a8:97:85:55:e6:d7:53:c6:8d:f2:f4:94:06:33:
c8:7c:f5:2b:d6:e0:76:ad:ed:74:87:2b:a4:1a:29:ef:7b:aa:
35:cf:51:77:0d:ef:27:a8:6d:9a:c8:a5:cb:7b:8b:c4:9a:5a:
ae:65:41:eb:ea:81:9c:ee:d7:4b:b9:ec:74:a5:39:37:c6:f9:
60:15:ae:d3:c2:bb:b9:33:39:b0:9f:10:37:0b:73:3f:ad:5f:
ec:d7:65:43
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:06:27 2026 by rpki-client