
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3131302e34322e382e302f32322d3332203d3e203536303431.roa
File: 3131302e34322e382e302f32322d3332203d3e203536303431.roa (raw, json)
Hash identifier: 4ItvTLtj+FpBxXUf6Cb9DmrofJ9CsKlPeKBC/5vMQFc=
Subject key identifier: 05:C7:A9:53:07:05:06:22:74:89:04:D5:54:54:B9:D7:2C:A6:93:64
Certificate issuer: /CN=0A37AC88E303F4BB834C180B06F250ADE69700BF
Certificate serial: 3AEA270636B41595EBA9BC00C8DE2A771EA6E658
Authority key identifier: 0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3131302e34322e382e302f32322d3332203d3e203536303431.roa
Signing time: Tue 21 Apr 2026 16:54:06 +0000
ROA not before: Tue 21 Apr 2026 16:49:06 +0000
ROA not after: Tue 20 Apr 2027 16:54:06 +0000
asID: 56041
IP address blocks: 110.42.8.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 03:39:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:ea:27:06:36:b4:15:95:eb:a9:bc:00:c8:de:2a:77:1e:a6:e6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A37AC88E303F4BB834C180B06F250ADE69700BF
Validity
Not Before: Apr 21 16:49:06 2026 GMT
Not After : Apr 20 16:54:06 2027 GMT
Subject: CN=05C7A95307050622748904D55454B9D72CA69364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:9f:2a:9f:ac:12:07:38:5b:48:09:4d:75:80:
b2:ea:e6:e2:6f:28:6d:c8:a1:0e:bb:e5:ae:b7:59:
ba:6c:b8:8e:37:75:bc:b1:21:c1:97:f8:65:af:0d:
14:57:c3:d1:16:a9:13:a0:f9:8a:ff:c0:6a:a3:db:
b4:7d:99:c4:c8:bc:3d:98:29:c9:e7:fe:19:5d:af:
0f:c1:60:c2:16:74:8a:1a:68:ba:db:00:9c:8f:65:
db:12:71:70:86:97:e3:49:97:79:eb:ae:78:24:f2:
97:b2:fa:21:bb:51:a5:0e:a0:cf:da:16:81:ab:d6:
f1:52:89:bd:63:0d:45:c7:85:b5:e3:e2:4c:45:02:
4f:2c:a4:19:12:9a:13:b4:80:38:1a:a0:cb:53:87:
93:57:60:64:f6:f4:55:b3:82:43:db:42:81:56:75:
56:4b:78:b5:3f:4e:96:3d:a5:69:1e:f4:5b:ea:ac:
eb:4d:93:df:10:c3:b0:87:ad:70:9a:9d:b3:b0:4d:
a1:eb:ec:94:02:11:45:19:36:a4:c2:de:05:84:2e:
d8:bd:b4:f1:4f:8b:e9:9d:67:77:6d:c6:6b:ca:8c:
5b:69:74:4f:ad:85:3a:e3:20:05:d3:bb:12:cc:40:
87:64:2b:f8:e9:3f:5a:1f:cd:d3:de:a8:3f:14:47:
35:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C7:A9:53:07:05:06:22:74:89:04:D5:54:54:B9:D7:2C:A6:93:64
X509v3 Authority Key Identifier:
keyid:0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3131302e34322e382e302f32322d3332203d3e203536303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.42.8.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:6f:6c:47:3b:59:01:3c:b9:89:d1:21:c4:cc:c6:73:59:71:
38:13:87:ac:3a:df:b4:00:63:7f:15:3f:46:81:51:8a:69:eb:
fa:07:85:b0:7e:4f:1e:5d:d6:39:d3:13:9f:a8:b5:43:72:b4:
2e:85:e4:83:9e:94:d0:36:38:12:77:80:3e:7e:e8:30:c2:94:
32:c3:09:4a:83:43:d5:f2:29:4e:43:2e:83:72:ec:62:3e:68:
d7:26:1f:e2:a0:0f:36:d1:c9:31:7a:59:e7:4e:00:40:d0:e6:
07:5d:71:69:d0:d4:01:85:46:0e:89:8f:31:2c:64:25:d0:f2:
19:7e:47:b8:2f:4f:1d:f0:24:0e:9d:de:e7:15:c0:41:e8:8b:
0f:34:0c:77:fb:bc:9f:e6:76:54:40:1c:a1:3e:2e:ca:65:da:
f8:9a:92:27:40:d1:c4:08:a4:7a:6a:50:9b:06:f3:ec:88:fe:
07:5f:47:d7:7a:43:3d:06:bc:17:11:b5:c1:27:0b:cd:f0:ec:
fa:aa:e0:e8:09:20:12:dd:05:61:da:27:f2:58:6f:be:55:f2:
7a:b7:c7:6d:50:d8:82:2b:4c:9b:e3:c2:a2:ac:27:c8:89:ef:
fe:f3:da:b5:a7:11:ac:be:2a:03:8e:4b:98:e6:58:67:63:cb:
6c:89:1a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:39:14 2026 by rpki-client