
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3130302e36382e302f32332d3233203d3e203233373234.roa
File: 3231312e3130302e36382e302f32332d3233203d3e203233373234.roa (raw, json)
Hash identifier: VE+W5cAJWZHQZFaO6dxpe/v1H6DwQ7Pjd3iJdOLXsNw=
Subject key identifier: EE:9A:11:37:10:69:B5:95:1B:F7:03:F6:BB:A7:A2:A2:FE:D0:98:38
Certificate issuer: /CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC
Certificate serial: 3EC37BE778C8270FB80A3DBA5B83AA61718946A1
Authority key identifier: 22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3130302e36382e302f32332d3233203d3e203233373234.roa
Signing time: Mon 13 Apr 2026 06:03:51 +0000
ROA not before: Mon 13 Apr 2026 05:58:51 +0000
ROA not after: Mon 12 Apr 2027 06:03:51 +0000
asID: 23724
IP address blocks: 211.100.68.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl
rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 10:09:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:c3:7b:e7:78:c8:27:0f:b8:0a:3d:ba:5b:83:aa:61:71:89:46:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC
Validity
Not Before: Apr 13 05:58:51 2026 GMT
Not After : Apr 12 06:03:51 2027 GMT
Subject: CN=EE9A11371069B5951BF703F6BBA7A2A2FED09838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:82:fa:62:9c:97:52:c9:fb:af:f9:fe:09:26:
2f:87:1e:1f:b1:30:60:22:db:9f:e3:77:87:29:c6:
b9:ab:b2:8e:7d:66:b3:1b:4e:9a:f9:09:68:7d:39:
2b:45:d0:fb:21:4a:9d:0c:62:a9:8d:d3:c3:ce:ce:
cf:6a:80:20:82:72:03:24:2d:f1:4a:d3:ee:7e:72:
63:17:1d:d2:f3:10:85:c6:60:c9:da:14:5a:83:e4:
36:9b:0a:da:6c:64:6b:9b:b1:85:50:f6:74:2d:44:
28:33:1a:7f:5c:e6:52:68:41:0b:3d:c7:e7:4c:84:
c9:59:4c:c1:b3:6a:05:3e:c9:d4:d5:41:c0:96:2d:
e4:86:5c:ee:37:ba:09:b2:3f:e5:be:a6:1b:88:81:
3f:79:a8:ce:5c:af:3c:68:57:4e:8f:f1:e6:df:98:
6d:de:49:c9:ee:62:98:9d:52:fb:33:1f:55:70:71:
6a:2c:13:c5:5a:ff:a9:99:02:a0:f7:5c:d4:e6:22:
66:a0:ac:9a:93:51:56:b7:93:4a:54:ff:ed:3b:e0:
6c:c9:65:e9:03:de:33:71:14:da:06:30:7e:d9:6f:
e6:89:40:22:c1:25:39:d6:ad:88:11:5b:3d:ca:7e:
49:6c:06:48:be:5b:5f:99:f0:a4:f5:50:8e:0d:bb:
fc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9A:11:37:10:69:B5:95:1B:F7:03:F6:BB:A7:A2:A2:FE:D0:98:38
X509v3 Authority Key Identifier:
keyid:22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3130302e36382e302f32332d3233203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.100.68.0/23
Signature Algorithm: sha256WithRSAEncryption
88:ba:5a:04:62:86:a5:60:38:fd:9b:e9:cb:67:8a:29:1f:94:
f7:b0:13:71:14:92:d3:92:76:55:cc:21:a6:10:48:7b:53:a5:
d1:a3:82:9e:31:ef:29:49:8b:8c:cb:3b:32:00:2a:3a:dd:a6:
b5:5c:70:e2:51:3e:20:75:18:60:0f:68:2b:5e:b9:cf:1a:ee:
29:e5:3d:b5:0e:86:3d:2a:70:c8:36:4d:e7:39:58:f7:9d:66:
d3:92:be:d1:3f:bf:3c:70:11:e1:cd:e2:31:0f:21:9f:c1:d3:
51:4e:46:fa:79:07:ab:c6:de:d5:27:16:15:1a:2c:ab:93:de:
b8:de:72:5c:b8:3e:49:86:9f:e4:20:a8:b5:af:de:d0:bc:a6:
a6:60:1d:fc:4d:2e:82:5d:f0:2d:3c:5f:f4:38:ef:28:62:25:
55:2a:fb:9a:cb:f9:37:a0:2e:fe:c6:00:c0:9b:ad:0c:67:f9:
c6:b8:b0:44:1e:8c:fb:3f:5c:bd:6b:71:8a:95:52:0d:46:fb:
fb:a5:5e:82:95:07:3e:56:8c:68:c3:8e:32:c6:a1:6a:ea:cb:
22:e2:91:ef:63:fc:f6:92:24:4f:48:cc:38:3f:65:f9:a6:de:
c9:68:5f:96:a2:4e:66:ff:36:10:37:81:4d:de:b0:32:6c:8d:
55:f2:9c:40
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:23 2026 by rpki-client