
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094488822684581890/0/3231312e3130312e3234342e302f32322d3234203d3e203538353139.roa
File: 3231312e3130312e3234342e302f32322d3234203d3e203538353139.roa (raw, json)
Hash identifier: /uXfkAccy3v3a9BHA09vw6dKcshdQs/6n+DUQ8IYKi8=
Subject key identifier: 59:E6:17:58:74:4F:7E:21:2B:3D:EB:1C:DA:E4:41:69:C5:FD:3E:E8
Certificate issuer: /CN=AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9
Certificate serial: 495F2302AB985ADC672A9FC92BBB759231D5C6DE
Authority key identifier: AE:4A:D2:7D:33:F9:D6:4B:7F:A2:18:4C:6C:03:0A:7B:80:91:E9:E9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/3231312e3130312e3234342e302f32322d3234203d3e203538353139.roa
Signing time: Thu 09 Apr 2026 05:09:20 +0000
ROA not before: Thu 09 Apr 2026 05:04:20 +0000
ROA not after: Thu 08 Apr 2027 05:09:20 +0000
asID: 58519
IP address blocks: 211.101.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl
rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 22:46:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:5f:23:02:ab:98:5a:dc:67:2a:9f:c9:2b:bb:75:92:31:d5:c6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9
Validity
Not Before: Apr 9 05:04:20 2026 GMT
Not After : Apr 8 05:09:20 2027 GMT
Subject: CN=59E61758744F7E212B3DEB1CDAE44169C5FD3EE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8a:f6:ab:46:dc:1f:02:67:68:e8:40:19:81:
0e:20:1c:fe:2a:c3:b2:a0:63:91:a6:e2:9d:85:8d:
38:aa:5f:f9:f4:d9:f0:b8:40:6b:47:ad:9c:92:c9:
4d:cc:8e:8d:d9:f8:d4:d8:7e:c2:25:b4:fe:82:f8:
6a:08:08:55:65:be:16:30:8f:c2:69:af:62:8b:eb:
93:43:1c:be:11:c7:b3:0c:f9:fe:f5:28:16:12:d6:
8b:eb:2c:24:79:2b:36:9d:3e:ce:5f:91:4c:8e:8d:
d7:ea:9e:67:6b:fe:42:65:bd:64:d1:ec:03:60:a7:
db:37:2a:ad:c2:4a:bb:c8:4b:77:7b:21:2a:0e:ca:
23:33:52:6c:66:0e:1d:52:59:1d:13:62:67:01:ac:
d8:fa:45:7b:a7:c4:67:c3:5f:eb:2a:c0:1c:6a:61:
59:8f:8c:e2:55:97:2a:e5:21:fd:e4:66:f2:04:c7:
55:c2:05:55:7b:91:b5:e7:dc:6a:36:c3:a9:5f:c7:
b5:7d:86:96:5f:6e:07:5d:cf:31:f6:f4:12:b3:02:
55:dd:ae:4c:46:1a:1e:62:c7:3f:63:47:a0:4a:e2:
4f:57:9b:76:45:b3:1a:0f:f1:17:8a:ec:e9:ce:7a:
dd:40:59:db:eb:a0:de:f0:d0:e4:a6:7e:15:55:de:
9e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E6:17:58:74:4F:7E:21:2B:3D:EB:1C:DA:E4:41:69:C5:FD:3E:E8
X509v3 Authority Key Identifier:
keyid:AE:4A:D2:7D:33:F9:D6:4B:7F:A2:18:4C:6C:03:0A:7B:80:91:E9:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/3231312e3130312e3234342e302f32322d3234203d3e203538353139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.101.244.0/22
Signature Algorithm: sha256WithRSAEncryption
65:20:7f:b3:a5:65:46:6d:47:c3:41:dc:3b:87:09:b7:d0:bd:
dd:c5:11:30:c6:78:8f:b6:ae:d2:14:e7:1c:69:6d:44:55:01:
ab:b4:15:f8:cf:50:78:da:73:9a:65:da:97:99:d0:f9:21:a9:
24:ef:67:9b:ad:49:86:41:1d:8a:ba:22:12:48:53:50:10:15:
10:6a:f9:45:cd:24:fd:bb:4d:7c:93:8b:6f:56:b4:29:50:08:
2d:da:1e:d6:4e:7a:e3:61:7a:12:4f:67:b9:2e:8e:23:63:9a:
cd:0a:9f:4b:d1:b4:5e:8f:d0:ba:20:24:8d:6e:35:b9:9f:b9:
b4:b7:9d:ed:02:79:68:ba:e0:aa:10:01:5c:fc:18:09:3a:dd:
18:5d:57:ba:34:38:97:a5:55:85:77:40:88:f4:6b:d2:34:31:
70:aa:12:88:28:53:a2:0c:42:bf:17:75:e0:a7:e7:37:68:8b:
24:2b:fe:65:f4:c3:84:ff:73:3f:0c:58:ac:f6:f5:85:bf:50:
b4:1f:09:4e:43:ff:4c:0b:40:95:53:40:7a:ad:b2:cf:41:59:
5c:6a:15:1d:76:c0:1f:57:49:84:29:c2:8c:11:75:80:a5:c4:
a6:1e:e2:f6:84:df:e5:74:1a:01:b8:f3:54:46:04:c2:0b:c6:
7e:29:42:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:26:26 2026 by rpki-client