
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3233312e302f32342d3234203d3e203633363431.roa
File: 3132332e34392e3233312e302f32342d3234203d3e203633363431.roa (raw, json)
Hash identifier: R/B9h9aDzb4QG8w229AO47UsOafUEDPxQD3yu78YfZI=
Subject key identifier: E9:18:8E:46:AB:CA:10:1C:31:7F:4F:91:AA:4B:CA:4D:05:0C:90:1D
Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Certificate serial: 1BBD6CE1B96486E01936316F40D87748807D211D
Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3233312e302f32342d3234203d3e203633363431.roa
Signing time: Wed 22 Apr 2026 14:08:40 +0000
ROA not before: Wed 22 Apr 2026 14:03:40 +0000
ROA not after: Wed 21 Apr 2027 14:08:40 +0000
asID: 63641
IP address blocks: 123.49.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 10:43:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:bd:6c:e1:b9:64:86:e0:19:36:31:6f:40:d8:77:48:80:7d:21:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Validity
Not Before: Apr 22 14:03:40 2026 GMT
Not After : Apr 21 14:08:40 2027 GMT
Subject: CN=E9188E46ABCA101C317F4F91AA4BCA4D050C901D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d9:f9:9e:d0:23:29:29:29:f1:e3:09:95:c2:
2b:d5:87:8e:97:b6:5e:93:f4:fb:4a:09:b9:f8:8a:
c0:e1:7f:10:09:e5:67:d2:f7:29:ca:d9:69:01:91:
c9:ed:dc:21:5a:99:ef:14:d8:d4:2e:9b:c9:7a:67:
0e:a2:91:e6:f7:49:7e:a6:28:02:96:e7:12:ff:f1:
f0:d7:4e:2c:ce:a4:4c:55:a2:37:04:74:88:3a:a0:
ee:31:1c:de:ef:5a:09:71:d1:5e:b9:43:f9:55:a8:
dc:33:1a:1e:1a:39:0d:85:ed:2c:2f:1e:46:36:07:
79:7b:9b:a9:41:85:36:a6:5f:ec:3f:39:2b:12:4c:
79:ba:50:47:2f:b8:c8:fe:4b:c7:d6:54:ac:96:64:
cd:c1:26:f8:d8:fc:c0:b2:b8:0e:db:94:8b:85:3e:
51:83:85:c9:6a:73:08:06:02:bc:95:7a:3c:7a:a8:
11:5f:9f:10:28:4a:d2:19:6b:c8:f9:41:d4:84:74:
ef:4f:d1:8e:b9:e4:d7:fe:7b:a3:32:d5:cf:c4:a6:
12:45:e0:69:b0:d2:b4:2b:08:4f:53:49:1b:e9:00:
1c:66:89:8b:9b:f2:a4:ce:d0:eb:12:1f:03:1f:f2:
bc:44:8a:77:60:62:93:ec:5f:9e:fe:a6:ea:92:2f:
0e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:18:8E:46:AB:CA:10:1C:31:7F:4F:91:AA:4B:CA:4D:05:0C:90:1D
X509v3 Authority Key Identifier:
keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3233312e302f32342d3234203d3e203633363431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.49.231.0/24
Signature Algorithm: sha256WithRSAEncryption
45:b4:67:ee:13:71:cc:01:9b:4d:0a:0c:49:23:7d:e1:85:8d:
36:76:2a:ce:28:13:17:22:32:af:9e:17:82:ea:62:71:18:01:
3e:31:89:1e:a4:a0:35:c3:7b:ac:01:7a:20:5f:de:47:76:3c:
5e:d2:f7:ea:a8:46:66:a7:29:64:49:7c:df:ad:2e:c0:e9:ac:
cb:be:ad:9e:73:d0:b6:3b:f3:0a:63:12:73:f7:60:a4:b1:7d:
4b:e5:96:ec:e2:6a:c6:cf:ff:c8:a0:e7:1b:67:de:2d:fc:df:
aa:4a:ed:32:63:79:c4:c7:b2:7b:4f:0c:e5:1d:10:cf:2d:44:
dd:8a:e3:a4:d0:4f:bc:32:4d:00:21:2c:68:20:49:f8:43:0e:
bf:1c:82:f8:39:0e:d3:47:1e:fb:ba:9e:ca:65:e3:58:be:c3:
13:10:b1:a4:bd:d4:59:73:cc:61:fa:a8:4f:eb:2c:40:60:ac:
af:9f:c1:1c:20:b9:f4:41:93:4e:70:22:56:65:4a:e3:cf:47:
88:bb:f0:5d:93:87:27:15:ae:3e:f0:fc:9f:57:42:af:69:a1:
c9:3a:16:1c:69:52:2a:5b:20:d5:02:dc:ed:38:aa:84:fb:af:
50:7f:b0:f6:27:16:63:c4:db:e7:cc:6c:55:cd:0f:4a:0e:e9:
44:2b:90:05
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:06:07 2026 by rpki-client