
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3232362e302f32342d3234203d3e203633363431.roa
File: 3132332e34392e3232362e302f32342d3234203d3e203633363431.roa (raw, json)
Hash identifier: c0SwRhNglIfttkQWz/s0xuIoNu1vmya+zZZxRn4a7dc=
Subject key identifier: 32:71:E1:FD:7F:DE:66:33:75:0D:A2:09:46:4F:9B:A4:B0:B1:70:D4
Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Certificate serial: 2EE3182F8FC1B8BE5EF724A91E8BFCBEE3D0724F
Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3232362e302f32342d3234203d3e203633363431.roa
Signing time: Wed 22 Apr 2026 14:07:04 +0000
ROA not before: Wed 22 Apr 2026 14:02:04 +0000
ROA not after: Wed 21 Apr 2027 14:07:04 +0000
asID: 63641
IP address blocks: 123.49.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 10:43:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:e3:18:2f:8f:c1:b8:be:5e:f7:24:a9:1e:8b:fc:be:e3:d0:72:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Validity
Not Before: Apr 22 14:02:04 2026 GMT
Not After : Apr 21 14:07:04 2027 GMT
Subject: CN=3271E1FD7FDE6633750DA209464F9BA4B0B170D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f1:4a:10:87:16:d5:85:94:1b:cc:81:25:87:
c8:b1:e8:cb:0c:6a:a4:b4:a3:f4:c2:7e:e5:fc:62:
5d:d2:e8:de:89:02:41:2e:b3:69:43:bf:1e:68:8f:
42:f2:38:34:4f:01:ec:d5:30:ae:d7:fb:1c:49:c4:
b9:d8:5e:d3:2c:70:2a:6e:6b:d5:a1:0a:23:84:0f:
90:e5:df:e9:77:99:2c:21:9f:0d:df:98:2c:20:34:
d8:92:57:7f:a2:54:62:09:87:d7:50:04:e6:86:ed:
0e:b5:9a:8e:e0:0f:01:81:ec:c6:23:0f:0b:22:11:
c8:92:64:6a:34:c8:71:35:63:9d:f3:5a:1c:60:2e:
a6:46:6d:9a:90:6f:04:5a:af:f3:49:12:ff:90:4a:
71:a0:94:f1:ab:8e:f5:3c:ce:6c:f5:bb:c0:d4:d0:
d9:1a:cc:90:0c:23:e9:e7:b1:78:c7:33:ef:95:a5:
8e:99:b4:c0:5b:a5:9a:b2:2c:81:59:70:3d:fb:10:
d0:c7:fa:9d:c2:d6:c7:5f:4f:37:40:01:88:0d:16:
9f:b5:93:6f:aa:c9:16:01:bf:d4:85:a2:d7:60:b1:
c0:1f:f2:9c:ef:59:bf:a1:3a:85:d9:78:28:23:cd:
9a:36:42:ec:cd:48:90:1c:b1:5b:77:c3:33:a6:e9:
6b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:71:E1:FD:7F:DE:66:33:75:0D:A2:09:46:4F:9B:A4:B0:B1:70:D4
X509v3 Authority Key Identifier:
keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3232362e302f32342d3234203d3e203633363431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.49.226.0/24
Signature Algorithm: sha256WithRSAEncryption
25:2e:7b:aa:8f:a6:40:6f:d7:a1:e5:82:b6:ce:ac:e1:a4:f4:
76:2d:9e:d5:1e:8c:da:ae:7d:a1:c8:b3:3c:be:9c:29:ef:3d:
4a:ab:9a:f8:8f:9b:d9:67:07:d3:8e:f4:b9:c9:e4:7e:29:2c:
26:a4:05:70:ff:38:01:b9:13:cc:c7:b7:06:22:73:6c:d5:c8:
cd:3d:60:fc:63:08:1a:ba:80:23:48:fa:93:2b:2e:10:53:35:
1a:0a:5a:c8:53:a3:34:b8:88:4b:62:dd:67:a9:69:ac:86:de:
c7:4f:d4:9a:c0:61:91:f1:a4:c2:13:76:e6:1f:b2:11:53:e4:
09:dc:67:d0:2a:12:6a:d2:11:5d:88:c6:42:0b:fb:ed:6d:3f:
6f:25:c7:21:b3:3a:1e:53:5d:ef:cb:f8:b2:6d:95:a2:77:1c:
c8:1c:61:7b:7e:44:a0:a3:5f:ff:0f:99:bc:c0:cc:e9:84:9c:
9f:21:4a:96:e2:90:3b:1a:57:28:98:18:1b:01:6d:2c:18:13:
aa:e2:b5:35:4f:cd:85:38:a3:b4:ea:21:7b:dc:ff:4f:a6:ec:
c6:28:a2:0c:f3:b0:1d:6b:ba:57:e1:e6:f4:2b:fb:f8:c6:f0:
eb:65:1e:6e:82:8b:4b:74:43:92:c1:82:9d:29:6e:ff:dc:18:
93:5d:ac:f5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:06:43 2026 by rpki-client