
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3131302e34322e31342e302f32342d3332203d3e203536303431.roa
File: 3131302e34322e31342e302f32342d3332203d3e203536303431.roa (raw, json)
Hash identifier: I1mRTJEv7XMne15R/kYSDtJ3wwagmv0P2u9AEzdINQE=
Subject key identifier: FB:7A:BF:97:8E:EE:CD:D8:42:12:73:09:DD:30:3B:5D:63:BD:AB:05
Certificate issuer: /CN=0A37AC88E303F4BB834C180B06F250ADE69700BF
Certificate serial: 64ED6E03B01C06E98F9922E5F5F92102D3AE7D81
Authority key identifier: 0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3131302e34322e31342e302f32342d3332203d3e203536303431.roa
Signing time: Tue 21 Apr 2026 16:54:06 +0000
ROA not before: Tue 21 Apr 2026 16:49:06 +0000
ROA not after: Tue 20 Apr 2027 16:54:06 +0000
asID: 56041
IP address blocks: 110.42.14.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 03:39:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:ed:6e:03:b0:1c:06:e9:8f:99:22:e5:f5:f9:21:02:d3:ae:7d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A37AC88E303F4BB834C180B06F250ADE69700BF
Validity
Not Before: Apr 21 16:49:06 2026 GMT
Not After : Apr 20 16:54:06 2027 GMT
Subject: CN=FB7ABF978EEECDD842127309DD303B5D63BDAB05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bf:0b:90:c6:6a:e9:40:3f:a6:84:61:19:66:
95:09:81:e9:86:a5:3c:18:0c:8d:ee:d3:3d:23:20:
e1:a2:70:53:b2:26:2b:58:e4:00:20:8d:45:85:57:
3e:1d:34:6b:e1:79:47:4e:b2:22:00:17:24:45:c5:
ab:41:74:cf:86:7b:a8:67:18:df:4c:74:8a:bb:f5:
fe:d9:f3:7d:69:97:94:27:7a:25:a9:85:89:69:f5:
7b:fc:63:a8:6d:87:42:e3:f1:4d:4e:39:25:26:01:
11:04:c7:46:d0:a5:66:0a:75:df:0d:3d:d8:70:70:
a1:95:c3:44:13:8a:47:aa:39:35:28:2f:dc:5b:f2:
35:15:42:5e:45:11:9f:4f:d8:3c:a4:fd:08:21:a2:
7d:30:8d:02:a2:86:42:28:0a:c6:32:f8:8d:db:82:
02:ee:d5:3f:13:13:8c:67:0e:89:a7:97:27:8d:a2:
ea:3d:13:2e:21:a7:14:d8:cb:73:29:0f:f7:30:d5:
97:1e:32:ba:e8:ff:29:66:3a:b2:56:44:4a:b5:b9:
43:35:e4:ed:d0:a2:13:c3:85:af:ab:f2:17:f3:99:
8e:ee:1f:af:c8:fe:b3:d7:4e:1d:b0:2f:b0:f3:22:
65:38:42:d8:41:6d:93:69:fe:23:0f:1d:eb:cb:2c:
b0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7A:BF:97:8E:EE:CD:D8:42:12:73:09:DD:30:3B:5D:63:BD:AB:05
X509v3 Authority Key Identifier:
keyid:0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3131302e34322e31342e302f32342d3332203d3e203536303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.42.14.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:7b:b6:62:62:52:f4:3b:c0:16:68:22:f7:83:15:67:13:25:
36:cf:ad:60:5d:42:bc:bc:64:ee:f3:db:c3:0f:e9:c2:a1:04:
9a:08:cf:50:fb:5d:2c:5d:57:3a:eb:1f:91:3b:df:06:70:ef:
6a:b7:a8:a8:62:2d:2e:58:f5:42:71:b6:eb:38:ed:f1:06:68:
13:e5:90:eb:7d:20:aa:67:92:30:04:10:ec:49:c1:83:1e:50:
c1:47:76:44:42:2d:f0:b1:de:7c:e7:be:50:33:f3:d2:51:83:
dd:54:a7:cf:82:6d:dc:db:eb:f0:13:c5:78:36:77:71:de:ce:
68:58:ac:c2:c6:16:e3:bb:94:be:96:a0:4b:a4:8a:87:ec:3b:
fc:11:65:0a:2c:91:b6:5f:35:f4:4d:a9:70:ae:66:20:84:84:
a5:9b:f8:eb:ae:71:6c:bb:39:5a:3f:1f:9c:c7:a9:73:e3:bf:
0e:7d:b4:bb:95:b7:ab:f1:25:31:74:b8:6c:28:79:ad:a3:77:
86:a8:2b:91:cb:5f:a5:5b:06:41:4e:0d:ce:80:d7:85:23:40:
9f:5d:a6:25:05:61:9f:08:47:93:c2:49:3f:da:4a:d3:20:6e:
57:2a:41:41:49:0c:f3:32:ac:d8:05:a0:8d:58:dd:e7:df:e3:
9f:27:33:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:38:25 2026 by rpki-client