
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447923715/1/3230332e3134382e32302e302f32322d3232203d3e2039393339.roa
File: 3230332e3134382e32302e302f32322d3232203d3e2039393339.roa (raw, json)
Hash identifier: kdaeAr7E0r/rkHkUkUn/GRQDVO3ansN771tR0fE4xHs=
Subject key identifier: 45:FC:8E:FD:27:9C:9F:58:E4:ED:DD:5B:07:E9:5C:BA:97:72:7B:5B
Certificate issuer: /CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5
Certificate serial: 5C963AD0401045405AA8E9A446A4B7F53B135A29
Authority key identifier: CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/3230332e3134382e32302e302f32322d3232203d3e2039393339.roa
Signing time: Fri 10 Apr 2026 07:48:44 +0000
ROA not before: Fri 10 Apr 2026 07:43:44 +0000
ROA not after: Fri 09 Apr 2027 07:48:44 +0000
asID: 9939
IP address blocks: 203.148.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl
rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 05:09:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:96:3a:d0:40:10:45:40:5a:a8:e9:a4:46:a4:b7:f5:3b:13:5a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5
Validity
Not Before: Apr 10 07:43:44 2026 GMT
Not After : Apr 9 07:48:44 2027 GMT
Subject: CN=45FC8EFD279C9F58E4EDDD5B07E95CBA97727B5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:02:48:3a:e8:ed:6d:88:6f:5f:f6:7c:1e:33:
9c:6b:b6:9b:6f:9d:c5:51:c5:9e:c0:59:cb:49:9e:
cb:ba:fd:8c:df:0d:2d:5f:fc:77:b8:a8:38:19:b9:
16:c7:77:b0:d4:f9:98:93:a6:ff:60:87:55:9d:3e:
15:67:2c:48:b7:f4:8b:1c:d9:f7:15:d9:be:6e:69:
63:48:10:1a:09:c8:7d:57:4f:35:3b:c1:20:40:8f:
c2:46:45:7a:44:f3:a2:be:b5:26:41:84:0a:d9:60:
17:f4:1b:14:b3:fe:30:55:fb:4b:e8:35:64:ea:50:
8a:5f:16:05:04:60:60:ef:a5:e6:24:a6:8c:4f:56:
2a:46:b1:1c:f7:d5:1e:a6:c4:24:1f:39:3f:54:09:
6b:c2:c3:e0:4f:f7:14:e0:f0:d3:39:da:c6:aa:a6:
3b:f6:78:9b:e8:75:63:3d:08:6c:73:2c:e7:20:77:
f1:f7:30:2b:74:63:f6:20:80:b8:6b:d9:96:97:2d:
4e:df:87:2e:71:b6:47:81:e5:97:cc:05:79:fe:5f:
3c:a9:2c:01:68:f0:82:fb:75:ee:85:6e:60:1d:5b:
f6:cf:45:90:b1:47:c5:4b:de:c3:bb:a5:93:12:97:
50:78:09:02:4f:22:d0:f3:4f:2a:91:f0:70:bc:a3:
9d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FC:8E:FD:27:9C:9F:58:E4:ED:DD:5B:07:E9:5C:BA:97:72:7B:5B
X509v3 Authority Key Identifier:
keyid:CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/3230332e3134382e32302e302f32322d3232203d3e2039393339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.148.20.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:a4:35:75:46:fe:f3:75:55:ac:7e:b6:4a:e9:3f:e9:07:84:
55:df:8d:9f:25:01:97:02:76:66:65:25:cd:03:b4:e3:e8:39:
1e:e2:32:d8:fa:dd:c3:86:bb:af:94:84:a8:71:da:31:08:b3:
5c:ef:19:54:fd:69:29:cd:b0:48:f8:6f:c5:4c:6c:89:b2:df:
b6:77:0b:5c:32:93:c7:79:76:8e:20:57:38:18:a6:3b:fb:b7:
f4:6e:5d:5b:96:cd:97:5f:1a:69:0f:28:db:5e:bf:0e:35:60:
6d:88:14:d8:db:b6:91:45:15:5e:75:25:10:f3:96:d2:98:e0:
a4:9a:b0:22:9b:f6:4a:82:fd:40:81:2b:91:f8:eb:e9:cc:08:
97:1e:e1:27:44:ba:ae:d0:f8:81:ed:a0:a0:1e:5f:10:4e:be:
e0:a4:39:28:b2:31:a7:72:23:1e:7a:61:6b:fb:a6:66:85:c0:
68:4a:a1:60:d9:2d:69:c8:8a:ed:93:40:c3:14:96:25:a9:72:
5d:16:33:65:96:c2:fb:8e:a2:74:d9:4c:e9:07:26:d5:bf:ff:
fc:d0:fb:70:96:4a:0c:d3:3f:e4:9b:ec:6e:51:bf:37:cb:91:
94:c8:75:66:34:ee:59:8c:30:fc:9f:c1:ee:3a:40:b6:7b:23:
a1:aa:40:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:12 2026 by rpki-client