
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231302e37382e3132382e302f32342d3234203d3e203233373234.roa
File: 3231302e37382e3132382e302f32342d3234203d3e203233373234.roa (raw, json)
Hash identifier: Hj0VBjEG1A/Vy5CfFa3SODbtJ9ifdSazK6JMSWZX3f4=
Subject key identifier: 22:63:8D:A3:53:D2:5D:0C:0C:26:01:B4:25:C5:D0:CC:DB:F2:8E:CF
Certificate issuer: /CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC
Certificate serial: 6D63266D37C050913FD6A393C6101C7F20F4CBDD
Authority key identifier: 22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231302e37382e3132382e302f32342d3234203d3e203233373234.roa
Signing time: Mon 13 Apr 2026 06:00:43 +0000
ROA not before: Mon 13 Apr 2026 05:55:43 +0000
ROA not after: Mon 12 Apr 2027 06:00:43 +0000
asID: 23724
IP address blocks: 210.78.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl
rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 10:09:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:63:26:6d:37:c0:50:91:3f:d6:a3:93:c6:10:1c:7f:20:f4:cb:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC
Validity
Not Before: Apr 13 05:55:43 2026 GMT
Not After : Apr 12 06:00:43 2027 GMT
Subject: CN=22638DA353D25D0C0C2601B425C5D0CCDBF28ECF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d2:01:81:91:33:19:17:b0:27:73:b3:7b:fc:
09:c5:e5:5c:b9:24:07:7c:6f:cc:53:b7:57:d8:b3:
a3:7a:6a:f8:a1:5f:c4:69:de:41:ae:80:56:b9:22:
ff:4e:25:17:1c:40:12:f6:ac:03:d2:f4:c4:3a:22:
ff:a3:d0:db:77:b9:9b:d5:ed:80:95:c1:79:a9:f6:
8a:50:a6:e9:2e:51:42:30:f0:a3:6d:0d:90:1b:d5:
13:4f:d4:be:45:14:0d:fe:a9:16:e0:f1:54:fb:24:
fe:0d:e9:fb:b7:da:de:ac:4d:b8:83:b5:83:8a:d1:
1e:ab:b4:7f:a6:f0:8a:fb:22:af:e0:25:92:1f:dc:
6e:4b:6d:21:2e:2c:df:94:ab:04:1f:f9:61:d4:37:
ef:e5:14:ac:a8:bf:71:fa:9a:66:81:fe:4c:9d:99:
60:ca:23:15:2a:d3:26:45:73:b9:6b:6f:ea:e4:04:
e9:dc:37:ed:4b:6a:69:f0:6e:71:49:d0:72:d5:d5:
79:ab:a5:47:f6:8e:c3:77:42:cd:2b:91:aa:d5:a6:
cc:1c:ae:d0:9a:57:05:88:34:bc:ab:63:ae:9a:ff:
4c:a9:d1:ad:c6:ce:c3:ad:78:04:ab:b7:58:74:ac:
d0:e1:e1:13:eb:f5:f9:7c:7e:01:65:e3:94:56:d8:
d0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:63:8D:A3:53:D2:5D:0C:0C:26:01:B4:25:C5:D0:CC:DB:F2:8E:CF
X509v3 Authority Key Identifier:
keyid:22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231302e37382e3132382e302f32342d3234203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.78.128.0/24
Signature Algorithm: sha256WithRSAEncryption
90:ac:82:7c:98:3d:92:76:ef:67:61:ce:e6:3a:3c:dd:0a:c8:
12:fd:29:2a:b7:12:76:1e:10:a0:d5:82:66:13:79:4c:e7:a9:
9d:45:32:e1:ad:79:7e:b2:8e:30:4a:93:81:49:04:3f:d4:28:
e7:9f:88:57:72:d4:dc:41:ee:5c:0e:f4:2e:34:07:a8:2c:25:
85:e7:ee:d0:e2:39:2a:0e:71:25:a9:5a:05:3f:51:bf:62:70:
9c:1a:9d:aa:05:cb:a3:34:8e:84:3c:87:8f:86:b0:c9:53:77:
ad:6a:e4:63:3a:c5:45:5a:32:42:a4:bf:5c:4a:30:16:5a:6d:
9f:ee:55:5c:b8:a5:aa:8a:88:01:4d:6e:a7:a1:68:86:d5:42:
64:02:75:90:6c:57:ad:43:d0:66:cd:f1:d5:9d:d2:f7:ca:75:
88:23:4d:e7:92:8e:d0:16:33:ce:cf:88:de:e3:bf:38:80:c7:
6e:d8:4c:f2:cd:a0:b1:62:85:69:a5:cb:67:09:82:52:e4:50:
33:8b:a2:af:2a:8c:b5:5e:97:77:04:0f:5d:15:a1:d6:01:bb:
d5:2e:ec:31:06:36:ea:cc:40:9b:60:42:34:bd:11:d3:f0:df:
24:92:80:09:d1:f5:56:21:12:1c:03:18:df:02:f5:94:6a:a6:
8a:01:ac:09
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:53:29 2026 by rpki-client