
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3131342e3131332e3230302e302f32322d3234203d3e203435303632.roa
File: 3131342e3131332e3230302e302f32322d3234203d3e203435303632.roa (raw, json)
Hash identifier: u4vlLPd6bMg5JVInfiMbPtNZHhK/CKkLqrqwn+uPigw=
Subject key identifier: A4:22:7F:AE:0A:A6:1A:EE:ED:D8:2F:F4:7C:A6:92:46:13:AE:70:BF
Certificate issuer: /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial: 55CB894E2EF7C1ACFFA334E60BE5018DB8F9B791
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3131342e3131332e3230302e302f32322d3234203d3e203435303632.roa
Signing time: Fri 10 Apr 2026 05:49:15 +0000
ROA not before: Fri 10 Apr 2026 05:44:15 +0000
ROA not after: Fri 09 Apr 2027 05:49:15 +0000
asID: 45062
IP address blocks: 114.113.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:cb:89:4e:2e:f7:c1:ac:ff:a3:34:e6:0b:e5:01:8d:b8:f9:b7:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Validity
Not Before: Apr 10 05:44:15 2026 GMT
Not After : Apr 9 05:49:15 2027 GMT
Subject: CN=A4227FAE0AA61AEEEDD82FF47CA6924613AE70BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a7:06:da:16:db:5a:61:c8:53:65:e1:c5:68:
3a:01:d8:48:a6:e2:b8:18:eb:31:3a:62:77:26:24:
e8:eb:b5:5f:cc:2c:b7:fa:14:79:a4:fa:f1:83:27:
2d:46:79:1a:02:18:ba:64:d5:ad:c5:24:fa:6e:7c:
98:92:0d:d9:64:24:36:9a:13:20:1a:c9:d4:57:9b:
e6:b5:3b:5b:75:65:c0:92:4f:bd:fb:2a:bb:01:52:
89:33:cc:93:07:90:d8:e2:b8:3e:f6:5d:06:18:40:
64:4f:87:76:7f:96:bd:15:52:e8:53:86:cb:58:bb:
33:cd:46:e6:3e:fd:32:71:77:28:15:5c:03:67:56:
95:50:ca:d3:24:41:d2:36:f0:db:00:94:a1:97:ac:
15:c8:f7:3d:6e:0f:07:41:87:4b:49:8d:68:34:65:
d1:0e:14:52:aa:f0:4c:75:0c:52:20:5a:82:b0:0c:
73:5a:d7:fb:73:c8:28:32:ef:b1:8f:8a:5c:41:de:
89:fc:f8:9e:30:39:5d:1b:60:1b:75:60:89:ba:9b:
ce:31:9b:fc:6c:dd:fd:30:9f:b9:c4:59:59:66:56:
10:6d:c2:2e:bb:5d:15:73:7e:ab:9e:aa:1a:c3:6e:
b7:3a:28:16:9e:55:80:d0:72:23:69:6d:59:da:f6:
74:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:22:7F:AE:0A:A6:1A:EE:ED:D8:2F:F4:7C:A6:92:46:13:AE:70:BF
X509v3 Authority Key Identifier:
keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3131342e3131332e3230302e302f32322d3234203d3e203435303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.113.200.0/22
Signature Algorithm: sha256WithRSAEncryption
61:d7:be:0c:c2:c5:de:4b:26:a1:78:09:78:b7:b9:45:87:79:
07:28:96:3d:67:eb:9b:c3:84:8a:7c:75:c6:7f:84:49:20:ca:
b4:17:86:23:c8:ae:12:78:cb:7b:eb:3a:c3:4a:e5:11:a6:bf:
ad:c0:d8:f9:ea:88:5f:be:1d:02:70:6d:22:61:50:f4:3a:79:
eb:47:c0:ce:91:78:a0:bb:10:78:2b:af:f5:44:f0:aa:de:6c:
c4:79:ee:be:c4:9d:c4:01:14:7b:ab:4c:a2:2b:02:72:62:8f:
de:66:ae:3f:e3:46:5c:0e:bb:16:87:20:70:7f:bc:f8:da:1d:
da:fd:01:bf:77:9b:2b:86:91:91:f0:fd:a2:53:64:e3:31:e0:
14:84:5d:7c:c3:6a:04:18:98:23:89:df:73:c2:fb:13:18:9a:
77:6c:47:c3:65:51:eb:27:d3:74:4f:ca:3b:84:7e:f7:4f:e0:
40:3d:53:68:44:dc:ce:75:ac:97:a5:75:3f:40:0a:fb:87:26:
8e:f6:19:fe:26:58:fc:f7:30:78:e4:f8:e4:7d:c0:75:84:24:
62:f3:af:07:0c:12:c7:b8:42:7b:5a:44:79:0a:fe:4e:4a:d5:
87:56:14:6c:64:6d:6b:11:06:1d:ac:72:ba:ad:c2:33:09:30:
b5:41:89:b4
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUVcuJTi73waz/ozTmC+UBjbj5t5EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzc5NDY3RDlGOUQyREJGRUZFQjgwOTU3NTUwMDRFREQ0
MkNFMDBFNjAeFw0yNjA0MTAwNTQ0MTVaFw0yNzA0MDkwNTQ5MTVaMDMxMTAvBgNV
BAMTKEE0MjI3RkFFMEFBNjFBRUVFREQ4MkZGNDdDQTY5MjQ2MTNBRTcwQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCppwbaFttaYchTZeHFaDoB2Eim
4rgY6zE6YncmJOjrtV/MLLf6FHmk+vGDJy1GeRoCGLpk1a3FJPpufJiSDdlkJDaa
EyAaydRXm+a1O1t1ZcCST737KrsBUokzzJMHkNjiuD72XQYYQGRPh3Z/lr0VUuhT
hstYuzPNRuY+/TJxdygVXANnVpVQytMkQdI28NsAlKGXrBXI9z1uDwdBh0tJjWg0
ZdEOFFKq8Ex1DFIgWoKwDHNa1/tzyCgy77GPilxB3on8+J4wOV0bYBt1YIm6m84x
m/xs3f0wn7nEWVlmVhBtwi67XRVzfqueqhrDbrc6KBaeVYDQciNpbVna9nSJAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUpCJ/rgqmGu7t2C/0fKaSRhOucL8wHwYDVR0j
BBgwFoAUN5Rn2fnS2/7+uAlXVQBO3ULOAOYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDgxOTUyNzkxMDIyNzk3MS8wLzM3OTQ2N0Q5RjlEMkRCRkVGRUI4MDk1NzU1MDA0
RURENDJDRTAwRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzc5NDY3RDlGOUQyREJGRUZFQjgwOTU3NTUwMDRFREQ0MkNFMDBFNi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwOTQ4MTk1Mjc5MTAyMjc5NzEvMC8zMTMxMzQyZTMx
MzEzMzJlMzIzMDMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzQzNTMwMzYzMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAnJxyDANBgkqhkiG9w0BAQsFAAOCAQEAYde+DMLF3ksmoXgJeLe5
RYd5ByiWPWfrm8OEinx1xn+ESSDKtBeGI8iuEnjLe+s6w0rlEaa/rcDY+eqIX74d
AnBtImFQ9Dp560fAzpF4oLsQeCuv9UTwqt5sxHnuvsSdxAEUe6tMoisCcmKP3mau
P+NGXA67FocgcH+8+Nod2v0Bv3ebK4aRkfD9olNk4zHgFIRdfMNqBBiYI4nfc8L7
Exiad2xHw2VR6yfTdE/KO4R+90/gQD1TaETcznWsl6V1P0AK+4cmjvYZ/iZY/Pcw
eOT45H3AdYQkYvOvBwwSx7hCe1pEeQr+TkrVh1YUbGRtaxEGHaxyuq3CMwkwtUGJ
tA==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:23:25 2026 by rpki-client