
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447923715/1/3230332e3134382e302e302f31382d3234203d3e2039393339.roa
File: 3230332e3134382e302e302f31382d3234203d3e2039393339.roa (raw, json)
Hash identifier: OfFByel+DCFzurA0eWoD4UO4ZoHls3g26hE+8MfUOek=
Subject key identifier: 5C:95:21:8B:66:EC:64:BE:D9:E9:E1:15:CE:14:82:25:5C:F3:05:46
Certificate issuer: /CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5
Certificate serial: 3CDC118469F719E3860D30567937CA117920927B
Authority key identifier: CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/3230332e3134382e302e302f31382d3234203d3e2039393339.roa
Signing time: Fri 10 Apr 2026 07:48:43 +0000
ROA not before: Fri 10 Apr 2026 07:43:43 +0000
ROA not after: Fri 09 Apr 2027 07:48:43 +0000
asID: 9939
IP address blocks: 203.148.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl
rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 05:09:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:dc:11:84:69:f7:19:e3:86:0d:30:56:79:37:ca:11:79:20:92:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5
Validity
Not Before: Apr 10 07:43:43 2026 GMT
Not After : Apr 9 07:48:43 2027 GMT
Subject: CN=5C95218B66EC64BED9E9E115CE1482255CF30546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f7:9b:5d:49:5f:90:80:f2:82:3c:01:60:7b:
8d:68:5f:e9:f2:80:5d:d9:39:ac:66:b9:a7:39:9e:
fb:5a:1c:00:f4:1a:94:00:b1:ad:72:51:35:cb:ae:
dd:73:fb:7c:f4:16:03:d6:04:57:92:d4:e4:3a:21:
5b:9a:28:89:24:22:94:d9:2c:3a:09:8e:cc:61:48:
c6:81:95:8b:e0:23:b2:4b:8d:d1:70:24:c7:12:c8:
38:1c:11:43:e7:0a:68:ed:02:31:5c:42:f1:74:1f:
4e:73:01:6c:4f:f2:b1:38:24:f2:d5:36:fe:5d:0c:
8e:d6:61:d4:01:4e:5f:1a:9f:7c:d9:fe:b1:c6:c6:
59:4f:6d:c8:28:33:b9:28:6f:ed:ba:98:f9:8f:d0:
6a:5e:9a:c1:52:a4:e6:a8:f8:23:85:ff:3c:8c:e8:
fa:f6:da:43:77:3a:4c:9b:f6:b0:99:84:b2:37:46:
8d:7e:0f:02:21:62:aa:6c:66:ae:83:ae:68:e0:59:
fb:b6:8b:0a:e8:5d:c5:58:57:e4:23:ab:05:ef:fc:
84:2b:b6:1f:d2:b6:31:c6:a3:a9:01:70:04:91:6a:
18:d2:60:0a:d0:29:3c:38:27:93:e4:97:42:c9:2e:
91:b2:26:78:42:5a:d6:f0:d2:45:09:9b:bc:95:ac:
e3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:95:21:8B:66:EC:64:BE:D9:E9:E1:15:CE:14:82:25:5C:F3:05:46
X509v3 Authority Key Identifier:
keyid:CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/3230332e3134382e302e302f31382d3234203d3e2039393339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.148.0.0/18
Signature Algorithm: sha256WithRSAEncryption
0e:01:f3:b1:4d:a8:8b:62:92:84:a4:6c:5c:c1:60:48:a5:b7:
bd:6e:be:cb:fc:96:62:e7:6f:c2:a7:6d:b1:7d:6c:ca:77:66:
3d:cc:f2:81:03:dc:79:fd:2f:67:c7:8d:cd:a3:ab:f0:40:75:
9d:70:5d:b7:a2:51:bd:10:da:51:ee:8d:b9:fe:76:61:e4:55:
e2:c4:fc:30:32:71:21:ec:d7:80:7a:31:9c:76:e8:f9:56:86:
1a:6d:8c:13:c9:09:05:bd:5c:ce:e8:ad:9e:da:95:a4:6d:b9:
0a:0f:31:d8:ac:69:27:59:b4:2b:b3:36:87:9b:13:c6:19:1f:
b7:5f:14:4e:a8:d8:f6:e0:20:67:f8:1b:be:85:bf:6e:36:dd:
c4:f8:c8:24:7a:16:16:bc:88:c3:73:2e:cc:66:07:9a:d0:c7:
28:8c:cc:d4:80:72:ac:3b:3d:36:7a:55:ec:6f:ed:eb:26:34:
8f:a9:c2:7d:4a:ae:38:83:ae:ef:35:89:63:66:3d:d7:4b:b9:
d3:c1:97:2a:c8:3e:f6:35:35:1d:83:26:0e:b8:b4:0c:1d:4d:
cf:5c:00:3f:e0:d3:98:c9:d0:93:61:e0:c7:27:0a:bc:76:e8:
53:ae:c3:32:3e:87:4a:e3:91:40:55:6f:f5:c5:ab:ed:b6:86:
d6:9b:60:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:16 2026 by rpki-client