
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e3131392e38302e302f32342d3234203d3e203338333435.roa
File: 3230332e3131392e38302e302f32342d3234203d3e203338333435.roa (raw, json)
Hash identifier: JLsP1AEWU7Q1uUE1TUelFTYDB2gFwr1Hp4A7myufs7o=
Subject key identifier: DD:A8:F6:2B:E3:29:BE:1F:01:7A:B3:0F:50:6F:EE:79:80:CA:3A:0F
Certificate issuer: /CN=A48290B7B4443542D0460FD49BDF1B444360AE86
Certificate serial: 1D9A69D32315C259F6EB23919138807AB7EB0BBC
Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e3131392e38302e302f32342d3234203d3e203338333435.roa
Signing time: Fri 10 Apr 2026 08:13:07 +0000
ROA not before: Fri 10 Apr 2026 08:08:07 +0000
ROA not after: Fri 09 Apr 2027 08:13:07 +0000
asID: 38345
IP address blocks: 203.119.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl
rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 12:09:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:9a:69:d3:23:15:c2:59:f6:eb:23:91:91:38:80:7a:b7:eb:0b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86
Validity
Not Before: Apr 10 08:08:07 2026 GMT
Not After : Apr 9 08:13:07 2027 GMT
Subject: CN=DDA8F62BE329BE1F017AB30F506FEE7980CA3A0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:df:bc:43:0a:10:6e:69:90:f8:b8:a3:2e:e4:
39:17:f4:7e:14:05:49:43:58:d4:34:62:09:d0:25:
64:23:31:8e:cd:73:e3:a7:cf:eb:63:19:d8:4b:a2:
db:c6:93:d9:e8:b9:fa:e1:0a:3c:1a:4f:68:05:d3:
a6:bb:00:32:5f:26:fa:f5:4f:96:14:a3:fc:cf:04:
d8:40:c7:9e:ee:3a:03:6a:40:8b:64:a5:b4:cb:df:
59:f0:61:50:23:a3:60:85:9e:53:62:54:af:3a:dc:
3c:23:32:4f:dd:03:a0:ea:f9:9f:d8:a1:d9:70:77:
6e:5b:05:b9:c5:7d:36:01:09:bd:84:71:ab:54:9d:
7f:2e:70:e7:80:8c:7d:07:f4:de:12:1d:e2:fc:01:
b5:a0:16:ee:6b:99:06:18:36:90:f8:6b:e6:ad:4e:
1f:83:85:0a:5d:a5:a8:6d:cf:93:d3:25:b2:8d:74:
82:94:06:84:f9:76:97:ab:73:c9:f6:a7:c2:87:5f:
57:d9:f8:d5:02:05:4a:e3:4c:75:94:a6:78:33:78:
75:6d:8e:9e:40:d9:54:d7:0e:fd:82:2f:bd:49:54:
38:95:cb:ec:b6:4b:77:83:c5:16:9c:78:71:6c:82:
75:e2:a7:65:89:25:de:38:b6:3b:8b:f6:18:21:6e:
af:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A8:F6:2B:E3:29:BE:1F:01:7A:B3:0F:50:6F:EE:79:80:CA:3A:0F
X509v3 Authority Key Identifier:
keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e3131392e38302e302f32342d3234203d3e203338333435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.119.80.0/24
Signature Algorithm: sha256WithRSAEncryption
85:8a:46:e2:fb:46:b6:01:8f:a4:b3:68:aa:2e:94:17:85:2f:
0d:18:fd:70:53:9c:aa:61:6c:73:6b:ca:0d:fb:7c:e3:ed:e3:
f2:ba:65:56:a2:52:93:28:a1:cb:32:e9:47:cd:1b:ee:c7:5b:
08:ba:82:37:70:83:60:56:5d:90:32:08:97:f3:18:3f:a0:52:
db:81:bd:ff:bc:09:0c:7c:08:01:93:68:f5:e8:fa:58:1c:8c:
3c:c0:9e:1a:5f:af:64:b8:b4:c8:c6:62:92:23:fb:bd:e0:a1:
03:03:50:6c:ac:69:aa:58:58:0d:cb:c9:82:90:52:2c:ca:e7:
92:a9:eb:79:35:3c:a2:f6:7c:d3:d5:d8:80:1c:01:7c:65:02:
be:de:c3:c6:43:08:72:34:47:e2:58:43:b1:4e:11:10:e1:80:
5e:d5:38:e3:e3:5e:e2:90:80:a0:2a:3a:fa:67:79:82:af:4f:
67:e6:24:ec:3b:a7:93:a9:3b:4f:37:41:22:7d:36:4f:20:bd:
37:6d:8f:4b:ab:bc:2b:24:59:15:52:87:de:85:8d:2d:35:df:
6c:3d:0f:9d:31:9a:80:88:1e:11:7f:9c:47:9b:4d:a5:2e:02:
65:72:cf:10:d9:54:df:ca:1e:3f:45:83:b0:2c:e2:2a:48:a9:
0e:13:74:8e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:11 2026 by rpki-client