
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3231322e302f32342d3234203d3e203633363431.roa
File: 3132332e34392e3231322e302f32342d3234203d3e203633363431.roa (raw, json)
Hash identifier: hluS2YHlrAouJjWMCLwiaOG5fWQG0a1fbf9rMpiv4Ao=
Subject key identifier: 78:FC:C3:9C:53:8C:DC:E0:D2:54:F5:27:F5:02:71:C4:66:A4:D3:A5
Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Certificate serial: 1E906EF317308CB2F0F24C5F454B4C577D1198B1
Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3231322e302f32342d3234203d3e203633363431.roa
Signing time: Wed 22 Apr 2026 14:17:52 +0000
ROA not before: Wed 22 Apr 2026 14:12:52 +0000
ROA not after: Wed 21 Apr 2027 14:17:52 +0000
asID: 63641
IP address blocks: 123.49.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 10:43:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:90:6e:f3:17:30:8c:b2:f0:f2:4c:5f:45:4b:4c:57:7d:11:98:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Validity
Not Before: Apr 22 14:12:52 2026 GMT
Not After : Apr 21 14:17:52 2027 GMT
Subject: CN=78FCC39C538CDCE0D254F527F50271C466A4D3A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:99:12:89:4b:ce:4e:c5:a9:5e:a7:c7:41:4b:
39:37:4d:a5:2e:b9:78:3b:17:80:9d:5e:78:82:f9:
c5:83:a6:c1:a9:50:ee:f4:c5:6b:ad:47:ca:be:38:
d4:d7:6f:80:dd:cd:fc:db:ee:29:5a:bf:bb:8a:57:
46:cd:1e:42:44:9f:28:58:c0:98:6b:2b:37:0a:e1:
07:eb:1d:50:69:d8:52:b7:10:f7:a3:b3:89:64:55:
cc:7d:bd:08:d0:37:12:4e:4a:f1:f7:72:24:aa:fd:
21:73:61:f0:1b:03:88:98:d8:f0:68:3c:dd:e2:48:
c2:39:65:a8:e1:d8:0f:e3:29:0b:4e:93:ed:c9:ea:
96:64:f2:c0:60:71:30:07:b5:8c:70:65:21:e2:22:
38:5f:31:a3:cb:81:6a:55:37:a7:06:e7:f0:d3:36:
4c:3d:ac:35:d8:ae:74:5d:60:c3:12:2f:f5:2d:ab:
9a:37:31:34:02:b3:13:8e:82:a4:8e:64:12:a0:79:
32:41:60:e1:f7:6f:e6:f7:bf:64:07:49:de:7c:a5:
b2:be:fe:ec:90:b0:41:08:69:7f:43:58:ad:e3:de:
14:b4:fc:e6:21:15:04:17:79:b8:e0:6e:7a:ed:6b:
6c:cf:33:f3:85:8d:c7:43:d6:ce:ed:78:25:f9:23:
03:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FC:C3:9C:53:8C:DC:E0:D2:54:F5:27:F5:02:71:C4:66:A4:D3:A5
X509v3 Authority Key Identifier:
keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3231322e302f32342d3234203d3e203633363431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.49.212.0/24
Signature Algorithm: sha256WithRSAEncryption
e1:75:6b:9a:b0:ad:c5:5e:f7:07:51:d1:c4:61:41:fc:af:33:
82:b6:d1:53:64:cf:ce:92:1b:68:13:ae:87:da:75:67:ea:24:
a5:84:6a:30:0c:8e:fd:4c:cd:93:55:ba:bf:ce:4b:f5:79:e1:
f2:af:8a:fa:3c:64:7f:ce:57:c9:17:38:e1:ea:38:1c:82:56:
9c:6b:de:5c:c7:80:db:12:4f:7b:a3:df:d9:d2:b8:f2:18:a8:
f4:0f:38:5a:10:e5:43:a0:a2:0c:b7:74:56:6c:ea:72:04:87:
b1:55:62:96:ae:54:d5:5e:e4:28:ab:4e:57:fe:da:62:db:78:
63:a3:42:14:4d:a7:3f:25:98:24:7d:d4:51:03:f7:8b:44:b8:
bf:f2:6d:fb:5b:35:fa:ac:f2:f2:49:31:54:78:83:9c:37:3e:
b2:1d:4c:de:d1:4f:29:7c:1f:1c:3d:d4:40:4c:39:a1:9c:0b:
fe:e4:25:f1:53:b8:d3:2b:5d:6d:12:b3:46:7b:6e:c7:7d:20:
c1:c1:87:68:09:5a:76:5d:67:fc:89:04:4d:84:da:24:dd:52:
30:55:6e:da:df:86:86:3a:91:86:fe:9a:30:a2:0f:31:f1:02:
f0:62:6f:e3:49:1b:5c:67:14:15:41:43:95:23:d3:d9:19:64:
b1:bf:65:e7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:06:44 2026 by rpki-client