
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3130302e37322e302f32342d3234203d3e203233373234.roa
File: 3231312e3130302e37322e302f32342d3234203d3e203233373234.roa (raw, json)
Hash identifier: SecKXvNuh0Fsq9JdTecOZLzm1VTOb/94Z648V5IO+DI=
Subject key identifier: F1:F9:E2:D6:23:4C:B4:A7:81:5F:BA:31:9C:18:74:BA:97:CD:02:22
Certificate issuer: /CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC
Certificate serial: 032B6F91056B2E3159E576ED8905D962D390C07B
Authority key identifier: 22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3130302e37322e302f32342d3234203d3e203233373234.roa
Signing time: Mon 13 Apr 2026 06:03:51 +0000
ROA not before: Mon 13 Apr 2026 05:58:51 +0000
ROA not after: Mon 12 Apr 2027 06:03:51 +0000
asID: 23724
IP address blocks: 211.100.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl
rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 10:09:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:2b:6f:91:05:6b:2e:31:59:e5:76:ed:89:05:d9:62:d3:90:c0:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC
Validity
Not Before: Apr 13 05:58:51 2026 GMT
Not After : Apr 12 06:03:51 2027 GMT
Subject: CN=F1F9E2D6234CB4A7815FBA319C1874BA97CD0222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c4:14:7e:ba:85:14:76:14:8f:8a:5f:10:e9:
d2:ef:a3:37:bb:44:40:35:ff:02:b3:80:73:94:cb:
27:14:fc:18:5e:e1:f4:38:bc:36:f0:71:fe:9c:92:
4c:8e:5e:9b:85:52:0a:65:1a:23:15:0c:59:b0:6e:
f8:0a:5f:4b:7d:84:f7:8e:f4:9c:ee:18:5d:3e:eb:
76:c7:60:a7:93:4f:6d:a7:b3:56:f9:06:1a:68:3f:
a4:c1:5e:2e:b6:6b:26:f7:73:f4:8b:74:3a:f7:1f:
cf:fb:55:89:af:42:a4:3d:1e:af:0e:55:c9:b4:c5:
7a:b4:ba:f6:47:02:c6:0a:18:47:bf:19:55:ed:8b:
cf:ac:98:80:4a:cf:8a:c2:54:07:95:f8:fc:0d:20:
24:9a:85:ab:3a:a3:1a:27:ae:30:97:4e:d9:92:67:
6b:5b:b8:f8:54:c6:0a:a1:ca:9f:cc:ad:b4:bb:10:
7d:8e:56:85:9e:76:63:90:e2:fd:bd:09:2b:85:85:
d2:76:7c:f9:74:02:2b:b5:a9:80:08:e1:bb:f9:b7:
4b:2c:92:a7:7d:20:5f:7e:d2:b9:7a:73:81:78:75:
12:bb:87:22:64:f3:9e:70:ae:39:ce:c1:dd:76:e7:
96:3f:6c:59:e3:72:fc:70:6d:22:09:1a:86:62:da:
85:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F9:E2:D6:23:4C:B4:A7:81:5F:BA:31:9C:18:74:BA:97:CD:02:22
X509v3 Authority Key Identifier:
keyid:22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3130302e37322e302f32342d3234203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.100.72.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:65:10:f9:b7:92:8d:bb:6d:2d:61:2b:94:54:47:aa:55:2b:
c5:9d:7a:4f:54:1e:42:d8:46:4a:40:56:cf:4e:41:8a:63:cf:
46:ff:eb:bb:18:4b:e4:43:3b:fc:77:50:ef:b0:bf:c1:15:e9:
e7:6e:e5:8e:17:bb:8f:c9:cf:49:c4:f9:aa:9d:58:b4:c7:81:
d7:b8:90:50:b6:08:52:05:4a:be:09:59:0b:44:7d:f0:90:52:
63:11:50:74:44:15:ff:31:d4:21:a8:67:3c:47:31:af:f3:eb:
83:e9:40:9f:17:5e:df:d2:fe:8d:60:c2:3c:cd:f6:b3:8a:d3:
4d:82:4d:6d:55:c0:0b:0f:ce:c3:91:bb:aa:e1:2e:9b:97:8c:
73:61:b1:02:cd:41:ae:f0:3f:4f:ea:74:08:b3:56:2b:19:fe:
93:b9:46:c2:f5:45:69:80:43:f1:f8:6b:9a:17:27:f4:aa:19:
1c:1b:c8:44:cd:55:bd:9f:b1:1c:ea:9d:be:a6:9d:4b:d5:b6:
c2:b0:84:68:1e:c7:3a:7c:ea:d6:23:f5:95:f6:d9:d4:04:a7:
3f:2d:91:4a:5a:ab:a5:4d:de:1b:94:60:55:f2:e2:32:2f:75:
ba:81:d3:e1:0f:63:87:b9:f4:1b:dc:0e:18:74:9a:75:17:f4:
2c:90:86:52
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:53:25 2026 by rpki-client