
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3131352e3137342e36342e302f31392d3139203d3e2030.roa
File: 3131352e3137342e36342e302f31392d3139203d3e2030.roa (raw, json)
Hash identifier: As26+wR/6J8V3hH1a7jwPHCuFWYH1V7nKS6DR1a3od4=
Subject key identifier: 7F:EA:F7:1B:BB:AD:88:5E:9B:B4:23:CC:1E:2B:9F:5E:AA:AF:13:BC
Certificate issuer: /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
Certificate serial: 1B5A974C2E588060E530B0CEC567243D4D70FD7C
Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3131352e3137342e36342e302f31392d3139203d3e2030.roa
Signing time: Fri 10 Apr 2026 03:40:27 +0000
ROA not before: Fri 10 Apr 2026 03:35:27 +0000
ROA not after: Fri 09 Apr 2027 03:40:27 +0000
asID: 0
IP address blocks: 115.174.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 08:13:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:5a:97:4c:2e:58:80:60:e5:30:b0:ce:c5:67:24:3d:4d:70:fd:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
Validity
Not Before: Apr 10 03:35:27 2026 GMT
Not After : Apr 9 03:40:27 2027 GMT
Subject: CN=7FEAF71BBBAD885E9BB423CC1E2B9F5EAAAF13BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4b:8c:ab:be:e9:09:0a:38:a5:5e:d4:f6:94:
ab:0a:03:fb:d9:75:a1:a1:b2:0c:46:ca:a4:1c:d3:
d2:03:86:3c:c7:20:a1:47:16:23:38:79:9d:45:31:
e6:1f:57:25:2c:f6:52:67:f7:be:24:7b:b7:18:af:
a5:ca:36:6c:1e:62:52:84:16:94:17:b3:56:e2:76:
06:e9:4a:df:29:7a:18:54:61:cd:c0:e9:94:25:42:
14:9a:3d:d1:ed:89:a0:8b:18:a6:7a:21:70:50:73:
99:6d:96:bc:55:24:8a:3b:63:9f:d2:86:ef:6c:c8:
70:8e:33:3b:0e:3b:0c:36:77:82:f7:cd:5a:16:b8:
1a:fd:0e:87:f6:e2:e9:db:71:e4:aa:71:98:77:20:
6a:28:f0:57:7c:00:7a:a3:b6:dc:1b:0e:f3:9c:95:
91:71:35:5e:91:84:23:05:03:65:d4:51:89:ce:d4:
b9:31:e4:c6:44:a4:0f:8d:ca:69:82:25:9a:5d:66:
57:e6:bf:29:9f:2f:68:0e:87:25:56:18:aa:dc:4e:
7f:d5:99:d8:80:96:70:85:72:1c:19:0b:29:a6:b6:
22:f7:6a:fa:66:b7:0d:ed:56:2c:fc:e4:b8:a0:ad:
99:10:fc:a4:f4:44:7c:8d:f5:75:96:54:d4:45:fb:
c8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EA:F7:1B:BB:AD:88:5E:9B:B4:23:CC:1E:2B:9F:5E:AA:AF:13:BC
X509v3 Authority Key Identifier:
keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3131352e3137342e36342e302f31392d3139203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.174.64.0/19
Signature Algorithm: sha256WithRSAEncryption
13:64:f8:b3:bc:1a:62:87:65:23:99:ff:2d:41:97:db:82:be:
f9:99:cf:0e:94:49:2d:07:a1:34:df:ea:4a:24:b8:da:01:f1:
27:9f:c6:b4:2c:4c:b6:72:bf:12:20:cd:b5:2e:be:81:ac:c2:
d1:f6:f7:b8:08:5d:37:3a:1e:fa:78:bc:69:b3:c9:c0:67:41:
61:9c:86:47:73:ad:e0:f0:95:8f:aa:d5:08:0b:5e:af:23:70:
a3:85:e9:3f:70:81:2d:e1:ef:30:3f:00:e5:c7:4a:93:8f:d1:
a2:25:1b:d8:9f:34:3c:b9:fe:44:dc:8e:c3:f4:14:6d:a5:08:
f0:35:44:45:1b:22:e9:24:4d:f5:66:8e:dc:5d:c4:b4:56:23:
18:52:cb:0e:6d:bd:68:3b:5a:5f:e3:31:91:93:e7:ca:46:01:
4f:4f:07:82:cb:ea:c4:2c:4c:f7:3e:1e:06:c1:67:03:7d:45:
64:a6:bc:14:3c:da:00:04:62:79:e1:92:9f:5f:6c:3e:f9:3e:
83:d2:45:15:e7:d5:a6:db:4d:4c:82:ae:e1:87:77:c1:7e:fc:
87:3e:f0:b7:02:10:f1:93:d2:fa:9e:02:43:95:d6:de:59:8d:
b1:1d:e6:c0:86:cb:f3:61:7b:1d:c6:ce:05:f8:3e:e7:6e:8d:
bc:58:ad:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:23:24 2026 by rpki-client