
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3232332e3235322e3139322e302f31392d3234203d3e203435303632.roa
File: 3232332e3235322e3139322e302f31392d3234203d3e203435303632.roa (raw, json)
Hash identifier: CRKWMaVeS+Fdcuzm5GW1+mQIQ8xWl8Qk/mPG4sP7HJU=
Subject key identifier: 6E:00:8D:F3:29:6F:F0:02:5D:6B:44:32:EA:9A:F4:F4:5C:F9:5A:F0
Certificate issuer: /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial: 2F530C5CB565FA8C4E9E0E03C7215A063766D670
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3232332e3235322e3139322e302f31392d3234203d3e203435303632.roa
Signing time: Fri 10 Apr 2026 05:49:15 +0000
ROA not before: Fri 10 Apr 2026 05:44:15 +0000
ROA not after: Fri 09 Apr 2027 05:49:15 +0000
asID: 45062
IP address blocks: 223.252.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:53:0c:5c:b5:65:fa:8c:4e:9e:0e:03:c7:21:5a:06:37:66:d6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Validity
Not Before: Apr 10 05:44:15 2026 GMT
Not After : Apr 9 05:49:15 2027 GMT
Subject: CN=6E008DF3296FF0025D6B4432EA9AF4F45CF95AF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ae:61:9e:ea:3c:ed:10:4f:b9:41:19:49:c4:
8c:63:36:02:d1:53:1c:9d:04:9c:b9:d2:9b:de:b0:
29:85:d0:33:cd:90:fa:c8:e8:21:c9:5b:c5:3e:28:
e1:f8:6f:ec:36:b3:a9:27:c1:3b:8a:ae:ba:90:87:
67:8b:10:42:2b:ec:7d:73:ce:f1:1b:3d:53:5d:e1:
51:60:bf:9b:e6:a5:82:db:c5:4d:3d:5a:59:18:84:
bc:0d:36:ea:be:c7:d4:c8:78:13:4e:bf:5a:56:d5:
c6:91:50:24:fe:7c:4e:7f:a3:27:4e:44:65:f3:ba:
a7:d5:a6:da:bc:58:eb:19:5f:b2:17:98:c4:6e:ba:
ff:0b:cf:bf:54:81:f1:0b:52:1a:0b:ea:76:2e:c9:
10:04:0c:5e:b4:6c:58:23:e8:5a:ff:52:8d:bb:37:
d6:63:c2:57:af:fd:d0:db:de:8e:02:8e:02:aa:b6:
3c:5e:1b:97:54:b1:41:0c:bc:86:7b:24:01:9f:90:
2c:c9:1f:f0:b0:ba:e9:09:07:4c:06:d2:b7:93:d4:
48:1c:02:e5:6b:0a:b8:eb:ae:b0:7e:fa:28:cb:73:
f8:b2:5a:37:37:2f:ee:3e:68:10:a3:1f:f4:30:5a:
e7:7a:01:46:a3:56:2e:e4:56:e0:c5:54:14:16:a9:
f9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:00:8D:F3:29:6F:F0:02:5D:6B:44:32:EA:9A:F4:F4:5C:F9:5A:F0
X509v3 Authority Key Identifier:
keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3232332e3235322e3139322e302f31392d3234203d3e203435303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.252.192.0/19
Signature Algorithm: sha256WithRSAEncryption
b6:00:4e:68:d7:a9:a0:6f:ff:cf:7c:9b:8a:c4:d5:74:2e:22:
ff:ed:68:9e:b6:2c:c2:a1:f4:8d:bf:c1:03:f7:6a:d1:71:19:
26:7b:a5:57:fc:4a:97:56:66:45:c8:16:4f:c8:3e:c8:89:68:
2f:a4:ac:d9:6d:89:77:e0:57:3f:48:36:b3:64:6b:e4:7a:4a:
c5:85:db:08:b5:52:82:11:5a:c6:9f:fc:59:ea:95:42:ce:75:
c5:c3:62:c0:6f:05:20:50:df:a9:d6:1c:53:ae:e0:ae:48:7a:
89:5a:11:91:97:1d:48:e2:93:3b:79:6a:e5:f1:12:53:65:41:
7f:51:c7:f1:6d:a3:3c:06:e1:b2:67:61:ab:4d:5a:c0:5b:29:
d6:7e:76:25:83:82:09:8c:a1:77:c3:52:6b:31:8d:6f:15:5e:
ec:21:2d:10:3e:d4:06:42:e3:63:26:06:16:82:6a:ca:02:92:
18:89:1b:d6:a2:0c:d5:ae:75:ce:15:50:b8:cd:0e:2f:55:1b:
b4:cb:d2:9a:21:d9:ea:ce:83:16:0f:6c:d2:b2:92:9e:c5:ae:
f9:be:3b:67:69:43:76:03:83:bd:3a:c3:e2:87:b5:83:fa:01:
d1:8a:8b:0e:17:66:ec:0f:83:e2:03:9f:92:59:5e:fe:30:0b:
23:eb:a1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 15:22:08 2026 by rpki-client