
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130362e322e36342e302f32302d3234203d3e203435303632.roa
File: 3130362e322e36342e302f32302d3234203d3e203435303632.roa (raw, json)
Hash identifier: 2b1ZiRWXbOjJmQJ1B8EmGE+VWBlCBWKFL5qi7Fo4mSY=
Subject key identifier: 75:18:32:F3:00:17:AF:F0:B7:41:68:11:5B:D2:9D:10:73:30:5E:78
Certificate issuer: /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial: 56B6F7939296EAD7B3851F60E1816EED4F8325C0
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130362e322e36342e302f32302d3234203d3e203435303632.roa
Signing time: Fri 10 Apr 2026 06:04:08 +0000
ROA not before: Fri 10 Apr 2026 05:59:08 +0000
ROA not after: Fri 09 Apr 2027 06:04:08 +0000
asID: 45062
IP address blocks: 106.2.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:b6:f7:93:92:96:ea:d7:b3:85:1f:60:e1:81:6e:ed:4f:83:25:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Validity
Not Before: Apr 10 05:59:08 2026 GMT
Not After : Apr 9 06:04:08 2027 GMT
Subject: CN=751832F30017AFF0B74168115BD29D1073305E78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:91:3f:71:30:a7:33:c6:fd:51:aa:4c:c1:96:
05:94:1a:66:ac:0b:70:b8:9e:9f:e6:00:12:d5:86:
1a:80:3a:7e:ae:33:68:3f:67:63:4b:75:5f:d7:4a:
78:8a:51:58:2f:07:63:66:f2:fc:f2:27:67:e4:ca:
21:70:f7:93:05:8e:51:58:98:0e:b6:64:5d:20:89:
a4:15:b7:6b:36:2d:3c:21:e6:d0:d4:8f:16:9b:13:
13:59:a2:5f:52:9b:81:6b:e6:3f:80:50:63:bf:7c:
b5:04:c6:84:24:b6:6a:cd:05:b3:2c:e7:9a:25:4e:
aa:8d:f8:4d:0a:68:42:e5:ea:ec:b7:93:20:6f:96:
e5:88:6d:64:66:07:d0:6c:87:87:d9:d6:30:4c:69:
9a:6d:19:15:0e:1b:21:1e:b4:da:be:8b:95:e8:cc:
da:36:1c:14:67:bf:2b:8a:b0:d6:7d:79:86:3b:f6:
02:12:2f:30:cc:48:55:2f:69:e8:ef:70:9a:f9:f6:
37:b6:9f:36:38:13:2d:1f:ab:24:56:84:86:1f:0c:
62:84:92:cd:2c:82:82:2b:ef:49:e8:b2:90:2e:ba:
09:19:8d:3c:d0:5b:aa:1f:77:a6:5d:f4:ba:6b:fb:
a2:3a:24:0f:3b:ae:21:f4:9e:97:96:b8:f4:3d:87:
75:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:18:32:F3:00:17:AF:F0:B7:41:68:11:5B:D2:9D:10:73:30:5E:78
X509v3 Authority Key Identifier:
keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130362e322e36342e302f32302d3234203d3e203435303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
106.2.64.0/20
Signature Algorithm: sha256WithRSAEncryption
5e:19:9b:18:53:2d:8e:1c:7b:4a:85:a1:92:35:e9:04:db:91:
ec:6c:1d:48:84:d3:dc:97:fd:d0:12:07:c1:ad:a3:9a:88:1d:
c7:55:d8:28:6a:61:0a:e7:a7:53:73:d6:3e:b1:6d:ff:29:c1:
cc:8c:12:2f:fc:15:75:fc:c2:b6:ec:4f:49:b1:60:0a:ed:1e:
17:16:21:25:9b:69:0a:59:04:54:9c:30:cf:f8:49:ae:67:b7:
17:7f:c4:a9:95:4a:63:7a:2e:97:80:a7:46:19:77:bd:d9:54:
30:8a:ab:0a:80:ed:07:f3:a6:d5:fb:09:a0:c1:3e:f2:ed:3a:
f2:66:ab:ab:9c:4e:29:e4:6c:8b:6b:0b:4e:ac:28:79:cf:91:
a4:e5:45:f8:a9:7c:2c:4c:31:86:3b:c5:d8:83:cf:8a:fa:6e:
be:90:be:b5:3e:18:1b:7e:62:73:d0:a1:21:4c:9b:e9:58:7c:
a1:78:c0:08:99:90:20:f3:27:ef:79:35:a9:89:8d:61:d0:3a:
07:b5:bb:0a:04:27:36:1b:73:37:5c:d0:8c:46:01:5c:43:9e:
b4:d0:84:91:4e:63:21:b4:b0:a1:3b:72:f7:0d:c2:89:e4:3b:
38:40:9f:39:86:20:49:ca:cd:15:e4:a4:e2:ed:99:2c:bc:4f:
6b:29:62:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:23:24 2026 by rpki-client