
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230322e3137332e31342e302f32342d3234203d3e203338333435.roa
File: 3230322e3137332e31342e302f32342d3234203d3e203338333435.roa (raw, json)
Hash identifier: +PtZfJe0RyzYRVTWEZr68fvLw5zMtiPtZGcHlb9mNS0=
Subject key identifier: 86:CC:53:D4:E8:BB:F8:FA:A4:F0:26:CD:CD:D4:2D:9B:C6:56:A9:C7
Certificate issuer: /CN=A48290B7B4443542D0460FD49BDF1B444360AE86
Certificate serial: 38F5D3CC12EA08869923ECF97428323FD7C065E2
Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230322e3137332e31342e302f32342d3234203d3e203338333435.roa
Signing time: Fri 10 Apr 2026 08:05:15 +0000
ROA not before: Fri 10 Apr 2026 08:00:15 +0000
ROA not after: Fri 09 Apr 2027 08:05:15 +0000
asID: 38345
IP address blocks: 202.173.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl
rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 12:09:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:f5:d3:cc:12:ea:08:86:99:23:ec:f9:74:28:32:3f:d7:c0:65:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86
Validity
Not Before: Apr 10 08:00:15 2026 GMT
Not After : Apr 9 08:05:15 2027 GMT
Subject: CN=86CC53D4E8BBF8FAA4F026CDCDD42D9BC656A9C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e2:00:d9:3e:32:81:88:05:ff:a3:e2:ef:68:
db:1c:a8:67:98:8b:93:05:51:42:a9:8b:e4:d3:a6:
de:20:cc:70:52:1b:c2:1f:bf:c3:6f:b5:15:df:74:
d0:1e:36:4e:59:b0:e7:6c:0f:a6:f4:76:c2:1a:cc:
f1:43:2a:6c:09:ab:78:7e:8f:41:84:74:f4:4a:0a:
bc:81:4b:33:27:a8:51:da:63:c4:d0:8f:9e:0e:f0:
77:f2:14:a1:67:27:0e:b5:6c:37:81:18:24:54:4f:
43:ea:e4:05:d2:c3:38:88:53:94:5e:9f:8f:a5:15:
b8:ce:db:91:57:1f:d2:36:c3:19:a0:a6:52:0a:89:
ba:a7:70:93:80:8a:8b:ea:80:38:be:1c:5b:73:a5:
56:f3:af:44:77:95:d2:f8:6d:f1:7f:1f:dc:67:b6:
68:fa:e2:6b:50:c6:ee:c4:c9:a6:26:8e:ef:3b:b0:
ed:b0:f4:c1:7c:d9:df:d3:2c:9c:2a:0e:45:04:27:
bd:e6:10:3d:60:4e:38:d3:d0:d4:00:9f:c5:dd:34:
6f:39:aa:fc:96:88:1f:50:cf:6d:f9:98:d7:27:b7:
d0:cd:74:b2:1b:b7:13:3f:dc:d5:27:66:1c:62:13:
cb:89:15:7b:0c:c7:43:82:77:f5:16:ec:85:62:30:
e4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CC:53:D4:E8:BB:F8:FA:A4:F0:26:CD:CD:D4:2D:9B:C6:56:A9:C7
X509v3 Authority Key Identifier:
keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230322e3137332e31342e302f32342d3234203d3e203338333435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.173.14.0/24
Signature Algorithm: sha256WithRSAEncryption
02:19:51:fa:55:51:81:72:68:68:bb:fc:74:3c:4b:18:96:bd:
0d:58:f6:83:4b:ea:5c:4a:eb:c3:ef:08:da:d2:57:0a:20:cf:
c1:d6:ad:9e:5b:36:59:ab:6b:1e:4f:e7:6b:ab:8c:4e:2c:ff:
a5:18:9f:cd:b1:85:2e:12:f9:82:9a:1e:7b:2f:62:9f:f1:da:
5e:7a:3c:ae:e0:31:76:0f:0f:08:d4:03:9f:98:7c:ab:63:ee:
56:f5:97:67:ac:eb:c8:b5:b5:c9:c0:72:32:9d:d6:3f:13:3b:
0b:19:b8:c8:e3:28:59:c6:32:a1:c5:2f:95:bf:9b:f5:63:4e:
8f:23:d2:8a:1e:f1:8f:c7:54:35:d4:6b:1a:de:e2:10:0b:db:
2c:ac:cb:d3:68:6d:0e:d9:ce:3f:64:4a:20:26:ac:6f:3e:06:
8b:4e:3a:ba:bc:31:03:38:19:27:00:78:91:55:f9:e4:17:2b:
5d:cf:95:fd:6a:d2:3d:a4:17:2b:c4:c3:91:ca:90:88:17:46:
75:62:a3:dd:7a:c7:4d:c7:35:fc:c7:1e:aa:d9:8d:74:dc:71:
06:39:70:1e:45:a9:8e:37:3c:aa:76:4a:5c:33:4e:f1:a2:2b:
d1:80:ca:f2:82:dc:d8:05:6c:0d:32:51:fa:c1:05:db:dd:a4:
7e:5b:cd:c8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:17 2026 by rpki-client