
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130362e322e3132342e302f32322d3234203d3e203435303632.roa
File: 3130362e322e3132342e302f32322d3234203d3e203435303632.roa (raw, json)
Hash identifier: cuCwEnQtVh2j0AzrvEUtlgRSf/2sPeV0J/b/YAzokKQ=
Subject key identifier: 0E:A1:3B:4A:BA:B6:9F:FA:08:31:54:23:AA:1C:86:B7:83:A5:71:93
Certificate issuer: /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial: 50C61F663125BF3F1A86D888892CAC3AC8D3EF13
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130362e322e3132342e302f32322d3234203d3e203435303632.roa
Signing time: Fri 10 Apr 2026 06:04:08 +0000
ROA not before: Fri 10 Apr 2026 05:59:08 +0000
ROA not after: Fri 09 Apr 2027 06:04:08 +0000
asID: 45062
IP address blocks: 106.2.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:c6:1f:66:31:25:bf:3f:1a:86:d8:88:89:2c:ac:3a:c8:d3:ef:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Validity
Not Before: Apr 10 05:59:08 2026 GMT
Not After : Apr 9 06:04:08 2027 GMT
Subject: CN=0EA13B4ABAB69FFA08315423AA1C86B783A57193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:95:fa:38:05:cd:85:44:35:e3:cd:92:0a:59:
52:7c:0f:3f:7a:f9:fb:89:d0:74:b3:c6:cd:79:fd:
71:02:1f:d1:6e:ef:54:64:16:ee:92:26:a1:1a:12:
aa:80:7d:a9:aa:fc:4d:74:39:90:7b:a5:f9:8a:37:
44:74:6a:b1:88:4b:68:e2:e1:54:4a:f9:b4:70:c8:
88:38:bc:90:1b:e7:fb:40:14:1f:30:ce:98:c5:4c:
20:68:d8:b1:9a:f5:12:44:f6:2d:83:43:10:d5:4a:
5d:77:b3:2d:4d:84:fd:3c:b3:f7:db:3c:66:a4:24:
61:09:e8:d5:c5:b2:55:b0:ee:30:9d:8e:c1:f7:28:
a3:c1:cd:27:eb:87:96:5a:15:5a:cb:20:bc:89:6b:
d7:9f:be:87:77:96:4a:74:29:e8:9c:75:9a:2e:e3:
ea:6b:f4:cd:e8:aa:49:96:2f:b3:df:41:3d:02:ef:
af:69:a1:2b:ee:04:2f:8d:75:e1:23:7a:7b:94:73:
f1:88:96:00:cc:f6:09:d2:f6:40:7b:68:cd:61:66:
ec:9d:82:b9:55:c4:4d:22:1b:5f:13:e1:fc:d0:ea:
17:47:04:4e:67:1c:a8:a3:2d:09:02:4f:48:33:9b:
4c:30:ae:1c:c5:ea:e3:2a:11:10:b2:c9:ff:c3:c4:
7f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A1:3B:4A:BA:B6:9F:FA:08:31:54:23:AA:1C:86:B7:83:A5:71:93
X509v3 Authority Key Identifier:
keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130362e322e3132342e302f32322d3234203d3e203435303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
106.2.124.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:19:b9:d0:90:44:6d:7f:b8:2a:1d:6a:44:db:30:33:06:1e:
a9:f1:2b:f8:88:72:a4:aa:83:02:5e:e7:cc:84:31:04:37:cf:
65:1c:dd:a8:20:d1:e5:80:e9:e1:e7:29:53:16:bd:ee:4b:32:
87:4b:eb:ff:c8:5f:ab:9d:df:d3:8c:4c:66:a2:55:27:c9:de:
3f:30:48:bf:cf:1e:14:95:3a:ed:2e:f5:c7:a7:7b:b7:29:88:
bd:3f:9c:b4:86:da:1d:82:10:cb:de:e4:ef:ce:2a:e3:9e:4d:
b1:6f:85:35:f2:82:57:d1:cf:0f:bc:7e:a2:ed:60:c6:f5:ee:
e1:06:63:f3:ca:ba:2e:ec:4e:ad:57:81:ad:e9:88:73:1a:72:
02:51:ee:11:3a:1e:63:96:b6:b5:16:6d:d6:a7:bd:22:69:9a:
7b:7e:66:4f:6e:23:cd:da:d7:32:26:4a:20:c7:0a:be:97:73:
e3:c1:fb:d2:6d:4d:41:56:f3:ad:a0:7e:b8:b2:55:44:74:42:
2e:bb:9a:24:6a:68:48:d8:13:cf:5f:45:51:aa:7f:2f:f9:69:
8e:c1:73:12:2c:f1:76:72:d4:85:49:a9:05:5b:17:28:b8:3c:
5b:b1:de:c2:ea:7f:e8:95:bb:19:d3:84:6d:93:68:5e:32:6c:
39:0d:61:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:23:26 2026 by rpki-client