
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130362e322e33322e302f31392d3234203d3e203435303632.roa
File: 3130362e322e33322e302f31392d3234203d3e203435303632.roa (raw, json)
Hash identifier: goVU4/hIFmBLQgB0i2wlhKi34GQgGiua9oCSv5wxPqU=
Subject key identifier: 84:FE:26:8E:B3:30:B9:7B:6A:91:FE:37:FB:34:AF:57:84:F3:38:B1
Certificate issuer: /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial: 087E8B6433135BE153D07ECFCFD4617246A64048
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130362e322e33322e302f31392d3234203d3e203435303632.roa
Signing time: Fri 10 Apr 2026 06:04:07 +0000
ROA not before: Fri 10 Apr 2026 05:59:07 +0000
ROA not after: Fri 09 Apr 2027 06:04:07 +0000
asID: 45062
IP address blocks: 106.2.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:7e:8b:64:33:13:5b:e1:53:d0:7e:cf:cf:d4:61:72:46:a6:40:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Validity
Not Before: Apr 10 05:59:07 2026 GMT
Not After : Apr 9 06:04:07 2027 GMT
Subject: CN=84FE268EB330B97B6A91FE37FB34AF5784F338B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:80:63:59:ca:1b:ab:a8:dc:03:d8:b5:55:44:
44:db:3d:83:77:70:fb:56:fe:2b:de:23:6b:25:06:
eb:a1:78:0f:99:50:0a:55:37:b2:d0:88:27:b1:fc:
0b:49:5a:1b:31:9d:56:50:fb:fc:73:7b:4f:ea:30:
9c:ad:4a:cc:f4:3d:cc:95:0b:37:6b:05:09:06:f1:
5f:5b:bd:1f:47:c9:62:98:18:0d:f0:7c:70:41:34:
58:75:a0:01:19:ce:50:d6:7b:b9:ba:d1:b3:b4:d6:
ec:d7:95:ff:69:b6:f6:0a:60:b8:7c:ba:1c:eb:68:
6d:c4:be:a0:70:5d:22:af:53:e2:c2:5c:9e:f6:20:
5d:3e:28:c6:7a:86:0a:cd:b6:46:de:71:20:9a:60:
99:eb:4b:22:e0:4f:31:b6:9b:2c:4e:d6:42:1d:c4:
ad:b2:0c:ae:de:1f:fb:b4:e2:87:eb:64:60:8d:66:
00:69:36:e2:07:6a:01:9c:ae:f0:56:fc:be:bf:c5:
a9:02:b7:03:88:11:42:f7:74:3d:e0:29:84:7f:af:
ab:86:45:67:b2:1d:f2:5b:0a:b0:fa:2f:86:ec:c1:
89:6c:c5:4e:67:37:b7:c2:8c:4b:da:04:d1:6b:00:
78:d7:18:9b:ba:cb:b6:44:54:61:5c:02:d4:6a:f2:
5d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FE:26:8E:B3:30:B9:7B:6A:91:FE:37:FB:34:AF:57:84:F3:38:B1
X509v3 Authority Key Identifier:
keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130362e322e33322e302f31392d3234203d3e203435303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
106.2.32.0/19
Signature Algorithm: sha256WithRSAEncryption
27:39:0f:56:fc:b4:d6:53:bb:f0:d9:36:46:68:dd:ab:0e:97:
b9:da:29:40:3c:33:21:5a:a7:67:e2:3e:fd:b5:b4:5b:85:00:
9a:a1:11:fc:02:78:37:34:c2:7c:d4:ac:5d:c3:73:43:46:24:
3a:5c:d6:a9:e3:55:99:c5:a3:13:63:14:25:18:42:23:92:7d:
ba:cc:51:df:2f:70:79:06:5c:3b:bd:29:21:a7:55:9d:56:aa:
a7:ef:13:96:ab:72:60:34:ce:b1:c6:ff:66:e5:ed:6c:c8:83:
67:66:2d:ff:21:d5:0b:70:f4:c3:78:6b:db:12:d7:9b:de:68:
3b:4a:cc:49:53:14:41:c1:7e:20:b1:6c:20:2d:09:27:d3:ef:
07:03:96:a4:56:87:97:e4:8b:8e:96:26:fe:96:48:a1:f7:1f:
1f:6a:1b:90:c9:72:6e:81:11:54:db:12:ee:a5:81:11:a4:56:
81:b6:0f:9d:14:3f:6c:40:fa:38:70:b9:37:ad:13:6b:c7:ea:
26:f5:7b:23:64:0c:78:fd:1c:7b:17:1c:8c:51:dc:da:36:ef:
d6:7e:41:1c:c6:5f:18:75:b8:02:95:97:a1:69:d7:12:e3:19:
c3:20:4d:6d:37:63:4b:af:fd:72:1a:70:c8:7f:94:f6:65:d6:
f2:75:72:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:17 2026 by rpki-client