
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230322e3137332e31302e302f32342d3234203d3e203338333435.roa
File: 3230322e3137332e31302e302f32342d3234203d3e203338333435.roa (raw, json)
Hash identifier: K9ogw8bFxysmFaV/6fv0ofsfruKflMJrP0fmoWopg84=
Subject key identifier: 90:F1:E8:00:B9:B7:AA:30:9D:5E:A4:9C:E0:DD:9D:0C:68:06:C7:69
Certificate issuer: /CN=A48290B7B4443542D0460FD49BDF1B444360AE86
Certificate serial: 5F2A5FA9C6CA2F75A2773C218780A5EEEE51CFE2
Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230322e3137332e31302e302f32342d3234203d3e203338333435.roa
Signing time: Fri 10 Apr 2026 08:05:15 +0000
ROA not before: Fri 10 Apr 2026 08:00:15 +0000
ROA not after: Fri 09 Apr 2027 08:05:15 +0000
asID: 38345
IP address blocks: 202.173.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl
rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 12:09:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:2a:5f:a9:c6:ca:2f:75:a2:77:3c:21:87:80:a5:ee:ee:51:cf:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86
Validity
Not Before: Apr 10 08:00:15 2026 GMT
Not After : Apr 9 08:05:15 2027 GMT
Subject: CN=90F1E800B9B7AA309D5EA49CE0DD9D0C6806C769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ed:d6:17:f0:26:22:0a:31:f5:5b:c9:b9:2a:
f3:c9:8c:a4:99:e3:6a:b3:ab:ac:ad:09:fe:10:ff:
bc:40:d7:21:f5:ea:71:2f:d9:4e:08:0f:2f:d6:95:
4a:73:cf:1c:1e:14:3f:a5:db:f4:76:e6:fe:fc:69:
12:05:fb:9b:53:de:a8:1f:3b:64:dd:15:d1:73:4d:
bb:c7:f8:61:f0:c3:72:73:02:a2:cf:0c:07:50:33:
ff:e1:85:6f:92:1c:23:7a:9d:bd:cb:f6:60:2f:98:
be:20:27:a9:0b:d9:b6:db:aa:df:a7:61:8c:f0:a7:
6d:aa:df:ba:bf:b5:65:fe:dd:ed:01:f4:47:9a:d8:
9e:5d:88:a3:fe:8f:18:5a:b1:31:0c:90:70:c1:e7:
40:b3:af:25:04:a5:8d:da:67:db:2b:97:66:86:94:
07:fa:44:83:cb:f3:f0:15:b7:d7:9f:7f:74:90:30:
14:82:b1:2e:b8:89:e5:fb:61:93:ca:4d:4c:c3:86:
75:76:d5:29:7e:62:ee:63:4c:45:56:0f:ea:aa:e0:
d6:88:0a:94:c1:b7:46:0c:ed:37:74:42:41:8b:14:
54:d6:67:5b:07:e9:de:40:66:6c:aa:bb:d1:db:b8:
39:e6:a3:4e:27:84:58:dd:00:cc:41:8a:0a:80:df:
ec:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F1:E8:00:B9:B7:AA:30:9D:5E:A4:9C:E0:DD:9D:0C:68:06:C7:69
X509v3 Authority Key Identifier:
keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230322e3137332e31302e302f32342d3234203d3e203338333435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.173.10.0/24
Signature Algorithm: sha256WithRSAEncryption
61:63:96:d1:c7:6e:82:b5:87:49:61:ea:76:49:8c:82:ec:d2:
c9:a1:96:d6:0f:69:07:cc:30:19:81:4b:79:7a:c8:cd:07:a7:
0f:76:c4:85:ed:e2:d8:1b:05:3c:2d:e1:c9:9c:93:f2:cf:f6:
a2:4e:44:65:6e:36:4e:2d:75:30:e5:63:f7:1c:b7:69:d0:ed:
26:36:ee:d5:8c:f7:36:cd:bd:4a:2d:c3:3c:76:d9:4a:f8:ea:
b4:1d:25:65:fb:c6:75:f4:c5:f6:d6:4f:94:c1:9f:12:59:d1:
de:e9:92:84:a2:e6:d2:3a:b5:23:10:ea:42:bd:28:83:b2:0b:
10:33:96:fa:82:60:b8:71:5e:01:2c:08:c2:5f:e9:17:59:cd:
7b:3c:6f:52:6c:62:96:ae:56:79:e6:66:d3:c7:76:0a:77:e3:
66:ac:b0:61:0e:d2:18:ed:75:ed:48:a5:5a:20:c6:f6:02:ca:
dc:a9:4c:45:49:52:ee:c4:54:81:f1:49:73:13:18:d3:47:01:
7c:ae:32:ad:3c:3d:68:6b:3e:d1:e7:81:23:97:13:17:ae:76:
1b:f8:d3:e4:50:f0:b2:f4:8f:b0:46:1e:48:66:f0:7b:ac:37:
f5:c1:50:00:41:4e:15:ed:18:99:ec:cb:50:8e:da:9c:55:49:
c4:08:54:70
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:56:16 2026 by rpki-client