
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e3131392e38332e302f32342d3234203d3e203338333435.roa
File: 3230332e3131392e38332e302f32342d3234203d3e203338333435.roa (raw, json)
Hash identifier: znKTdWWi4E6nOX2tGV+NOpDlPU4KvRF4EsRhHq0XTC8=
Subject key identifier: 66:E8:2A:B5:A1:7B:8A:B0:8E:B8:D6:30:60:BE:0F:B5:39:2D:10:45
Certificate issuer: /CN=A48290B7B4443542D0460FD49BDF1B444360AE86
Certificate serial: 1F2665B5D471318AC2AB93744E5340FA4445ED45
Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e3131392e38332e302f32342d3234203d3e203338333435.roa
Signing time: Fri 10 Apr 2026 08:13:07 +0000
ROA not before: Fri 10 Apr 2026 08:08:07 +0000
ROA not after: Fri 09 Apr 2027 08:13:07 +0000
asID: 38345
IP address blocks: 203.119.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl
rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 12:09:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:26:65:b5:d4:71:31:8a:c2:ab:93:74:4e:53:40:fa:44:45:ed:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86
Validity
Not Before: Apr 10 08:08:07 2026 GMT
Not After : Apr 9 08:13:07 2027 GMT
Subject: CN=66E82AB5A17B8AB08EB8D63060BE0FB5392D1045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:91:ad:40:a1:cd:0f:31:f0:79:c5:6f:3b:f1:
dd:21:d4:eb:20:5f:ac:77:3f:cb:25:b4:61:9c:3e:
23:cc:74:a2:85:f0:7b:b5:56:d1:4b:b3:7a:2a:3f:
c6:19:57:34:b2:ec:b8:f8:83:6b:d5:e4:8e:3f:8e:
88:27:bc:f8:ad:9d:39:d6:fc:23:d5:38:5d:71:38:
4a:04:16:7c:16:85:56:c4:d9:b9:85:ba:a5:48:9d:
0e:9e:16:f5:cc:f0:13:c5:2f:61:44:f7:1a:f3:3f:
b3:62:1d:87:26:d7:11:c6:f6:68:dd:3b:77:7c:ff:
e4:36:7a:ce:6d:f1:84:57:22:5f:a9:5b:c5:f0:90:
1d:48:7d:f0:4c:c2:3b:8e:c1:07:ee:e8:52:6a:60:
5b:71:c0:6c:60:f9:da:93:82:df:08:e3:ce:c2:b8:
a2:84:c4:07:12:6a:47:89:be:69:a8:04:66:10:1b:
38:e1:21:28:64:2b:0e:fe:21:43:3c:4c:c7:7c:72:
7c:a5:62:af:e8:f3:4a:29:45:21:eb:68:c9:85:ec:
a9:28:0d:36:5f:9a:6a:de:cf:3a:e8:e2:29:b8:03:
60:cd:b2:01:71:5c:02:c7:ed:c6:eb:46:e5:46:c4:
2a:bf:37:a0:04:c8:36:5c:73:ed:20:58:21:12:f1:
32:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E8:2A:B5:A1:7B:8A:B0:8E:B8:D6:30:60:BE:0F:B5:39:2D:10:45
X509v3 Authority Key Identifier:
keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e3131392e38332e302f32342d3234203d3e203338333435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.119.83.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:62:f9:c5:bd:15:26:2b:3e:a7:eb:1b:2d:cc:6a:bd:02:61:
55:9a:14:d7:26:fd:b3:97:86:ce:22:cd:d3:7c:6e:34:8b:3e:
02:a0:d1:b7:98:a5:53:c2:72:5a:7c:cf:02:bf:9d:a7:e8:3a:
ad:2c:2b:1c:26:84:65:82:9a:3a:35:c9:b2:eb:6a:df:c6:3f:
f9:64:4b:2c:b9:28:79:7b:8f:18:50:bb:e3:b5:cb:69:31:1f:
cd:e9:c3:6c:f9:e2:47:c4:00:de:02:e4:60:34:f0:d4:b6:7d:
fb:b7:09:52:ef:b8:96:38:96:ec:b4:fb:6e:43:8c:b6:80:67:
54:28:a1:19:0e:74:32:38:12:91:02:81:01:7c:09:88:fc:4c:
32:5d:b3:89:98:26:c0:17:41:91:f6:28:8a:86:ab:5e:a7:8e:
57:c0:28:87:81:7a:c4:ba:d1:d3:45:d6:7c:d8:65:12:e5:f3:
56:fb:34:d4:bf:f7:9d:fc:56:d5:0f:69:60:27:09:81:9d:3b:
02:74:10:97:3c:a1:c7:65:3c:92:ba:b5:2d:1a:0f:de:f0:15:
a3:fd:c1:eb:3f:91:32:7b:ad:36:67:6e:ed:32:8c:07:42:db:
b3:d1:b2:d1:79:3a:d8:00:73:a3:74:36:7d:02:f1:18:05:0b:
0c:a2:79:b8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:09 2026 by rpki-client