
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447923715/1/3231382e39372e3136302e302f31392d3234203d3e2039393339.roa
File: 3231382e39372e3136302e302f31392d3234203d3e2039393339.roa (raw, json)
Hash identifier: k4+fg8C2hbwNPzLmG4G+qvi1WLKh32ah+UEl/BbuCoY=
Subject key identifier: B5:34:84:8E:B8:AD:17:7E:CD:C3:1E:C9:FD:F5:9B:93:73:DA:3B:EB
Certificate issuer: /CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5
Certificate serial: 01F19F0BCCB3651D38BB2C3D6B700A233F0CDAC4
Authority key identifier: CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/3231382e39372e3136302e302f31392d3234203d3e2039393339.roa
Signing time: Fri 10 Apr 2026 07:48:44 +0000
ROA not before: Fri 10 Apr 2026 07:43:44 +0000
ROA not after: Fri 09 Apr 2027 07:48:44 +0000
asID: 9939
IP address blocks: 218.97.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl
rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 05:09:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:f1:9f:0b:cc:b3:65:1d:38:bb:2c:3d:6b:70:0a:23:3f:0c:da:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5
Validity
Not Before: Apr 10 07:43:44 2026 GMT
Not After : Apr 9 07:48:44 2027 GMT
Subject: CN=B534848EB8AD177ECDC31EC9FDF59B9373DA3BEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:73:10:c2:9c:54:a6:49:88:e1:f5:0f:e5:9b:
0f:61:94:28:90:73:fd:8b:3b:be:32:c2:65:4f:b4:
b1:2c:f4:a6:9c:a2:6d:10:53:06:f9:2b:8d:c5:c8:
f7:14:fe:3c:e4:14:80:ed:c0:50:ce:8b:c3:9b:50:
51:05:33:4d:89:47:04:be:c5:4b:99:54:cd:5b:f2:
13:3c:b4:fb:af:b8:c1:4d:1e:6c:34:27:cd:eb:be:
9e:a6:2f:01:b2:0a:e1:87:91:bc:0c:de:c3:cd:2a:
ff:6f:f4:86:a3:bb:72:6b:14:49:81:24:0e:fa:3e:
ae:0b:f9:41:fe:b0:62:16:a8:3e:40:50:0b:c7:fc:
a4:dd:1f:b4:99:c1:07:56:34:e2:77:83:19:3f:86:
dc:c1:a4:c3:32:98:47:db:46:76:4e:57:73:af:01:
6f:e9:67:1b:1b:e8:ab:a3:29:4f:9d:84:75:21:03:
98:11:db:a1:39:a3:f3:bd:b8:42:6d:1f:41:ef:6c:
1e:7b:ad:d9:54:d7:f7:c3:8f:16:68:56:8c:25:53:
b2:0c:31:ea:ed:3f:4c:2d:71:fe:a0:53:0f:99:3a:
97:12:3a:1d:25:2e:64:98:c3:c5:30:66:92:f5:13:
03:9d:1c:e1:fc:8e:de:d5:54:6a:e0:fa:a0:31:8a:
2a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:34:84:8E:B8:AD:17:7E:CD:C3:1E:C9:FD:F5:9B:93:73:DA:3B:EB
X509v3 Authority Key Identifier:
keyid:CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/3231382e39372e3136302e302f31392d3234203d3e2039393339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.97.160.0/19
Signature Algorithm: sha256WithRSAEncryption
60:6b:bf:04:82:7b:fa:61:3a:42:58:bb:4b:c4:70:02:99:ba:
69:d7:41:51:e2:ee:2e:b0:a7:ae:f5:45:73:78:21:40:81:96:
0c:13:9e:fb:91:c6:9c:a7:ce:78:60:31:23:b5:6b:c0:f2:7c:
e7:c0:f7:55:d7:50:b8:d8:83:19:bf:9c:37:77:a0:c3:7c:3a:
b5:80:8b:b8:bf:34:11:64:65:29:05:6c:16:c9:69:d8:d6:6b:
54:6d:53:b5:8a:8a:12:cf:8a:a1:b8:1c:ac:19:ce:2d:14:b8:
97:c4:c4:1a:61:d8:63:30:d9:02:d9:da:65:15:b8:e5:78:a0:
7a:33:61:4f:08:d2:65:b5:c3:bc:d4:3b:3c:e0:eb:2f:f9:71:
cf:7a:c2:c9:46:d7:5b:b6:58:bc:0e:ee:f5:8f:ef:a2:36:1a:
95:1b:59:ff:22:86:2c:e5:10:0d:ed:2d:78:9f:79:fb:bf:9f:
9d:ae:b3:b7:f2:32:ee:d0:86:ff:2d:84:cf:04:61:58:7b:f4:
73:33:e6:b1:8f:f7:86:dd:f2:83:21:e5:21:68:98:eb:e9:3f:
e5:5e:78:4a:ee:bc:01:af:54:fc:78:d6:68:b7:f2:52:72:3d:
49:16:78:5b:aa:5a:76:07:7f:7f:a4:73:31:11:ee:cb:3d:ef:
b9:3b:ba:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 13:53:26 2026 by rpki-client