
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3131372e37342e3132382e302f31372d3137203d3e2030.roa
File: 3131372e37342e3132382e302f31372d3137203d3e2030.roa (raw, json)
Hash identifier: 5MlJOu/q0Q3Mts15LBalJ1sepbxwUb+VkGap3rDiJX0=
Subject key identifier: 8D:ED:2E:EF:1F:8A:FE:55:37:51:82:D7:C6:E2:20:27:28:62:C6:6D
Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F
Certificate serial: 49D97AB7F76690046BEBCDB68E2649781D1312A1
Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3131372e37342e3132382e302f31372d3137203d3e2030.roa
Signing time: Mon 13 Apr 2026 02:57:13 +0000
ROA not before: Mon 13 Apr 2026 02:52:13 +0000
ROA not after: Mon 12 Apr 2027 02:57:13 +0000
asID: 0
IP address blocks: 117.74.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl
rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:58:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:d9:7a:b7:f7:66:90:04:6b:eb:cd:b6:8e:26:49:78:1d:13:12:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F
Validity
Not Before: Apr 13 02:52:13 2026 GMT
Not After : Apr 12 02:57:13 2027 GMT
Subject: CN=8DED2EEF1F8AFE55375182D7C6E220272862C66D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:42:0f:6f:27:aa:31:b6:42:00:d5:be:c2:25:
41:e7:31:80:71:15:b7:f1:0a:da:41:2b:2c:9d:31:
c9:7c:49:5b:18:39:42:90:7d:da:51:0f:a9:b7:0c:
27:c7:6c:09:6f:47:aa:db:a8:01:e1:48:60:fc:1b:
07:3e:e5:00:76:a1:5c:e1:50:50:69:d7:45:6a:aa:
6b:8a:6f:b2:78:b2:19:2c:ff:2d:a2:89:8f:7e:4b:
1a:fb:fd:de:c2:28:9c:44:40:c3:f1:64:b0:7a:24:
33:6b:c0:52:e0:91:8d:d5:bc:01:50:55:a5:94:7d:
3d:fa:89:70:71:e4:11:ed:2e:5c:76:54:c8:7b:94:
96:ef:0d:79:53:a9:4b:af:9b:cc:ab:cd:95:8b:5c:
9f:77:a6:83:03:3c:7e:4a:86:5b:bf:00:4a:97:35:
fc:e9:2e:38:61:62:7e:a4:62:88:e2:bb:09:e8:c3:
08:d2:5b:43:05:5c:3f:58:9e:a5:f5:71:60:40:e1:
23:13:5a:12:1d:3f:d2:93:e6:aa:f4:72:dc:4b:8d:
61:f9:18:32:e2:e0:93:03:89:22:18:41:95:4e:d0:
b2:89:2b:9e:a1:cd:c8:fd:9b:6b:61:02:2a:1e:e7:
1d:0e:d6:5b:c6:d2:44:b4:9e:41:38:c5:4b:75:36:
31:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:ED:2E:EF:1F:8A:FE:55:37:51:82:D7:C6:E2:20:27:28:62:C6:6D
X509v3 Authority Key Identifier:
keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3131372e37342e3132382e302f31372d3137203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.74.128.0/17
Signature Algorithm: sha256WithRSAEncryption
89:05:eb:b4:ae:30:63:f6:f0:ad:f2:af:94:85:0f:a5:0c:02:
2b:60:f3:84:22:95:75:8a:46:c6:35:fb:38:3a:07:5e:bf:64:
54:8f:47:e1:e5:3e:3f:de:5a:e0:5f:9f:b8:6d:ab:98:9f:61:
b5:35:1a:50:c6:7b:b4:d3:b1:a8:f8:a8:5f:64:f4:9d:27:ec:
17:20:b5:0f:dc:32:a3:1b:87:ed:fd:01:dd:71:59:7f:23:39:
8e:f3:ec:20:d7:86:da:ff:0b:c7:c0:bf:43:4a:62:8e:4f:a6:
6f:c3:f2:dd:e8:9f:89:18:fa:28:9e:25:d1:dc:ed:56:40:36:
95:f9:90:6c:c3:b7:31:99:65:ef:40:97:09:8b:e4:77:76:cd:
53:20:a0:27:d0:2b:15:ad:0b:a0:e7:2f:46:65:7d:57:fe:ba:
de:24:2b:df:fc:75:1f:0e:1d:fd:1c:e5:f5:9b:fa:75:c0:9b:
04:53:0c:66:16:a8:c3:af:84:29:0b:ef:7b:cd:89:44:7a:9f:
87:c2:8a:0b:ea:96:17:a3:c7:74:40:d3:a2:dd:19:ce:b6:fd:
d5:cb:89:bd:1b:1d:ad:a4:3b:a3:98:fd:5e:65:2c:b7:9a:8f:
ed:86:28:ff:e5:c7:05:b9:83:09:3f:7c:1d:03:9a:e0:3f:ba:
7e:93:b7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:23:25 2026 by rpki-client