
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e39392e3232342e302f31392d3139203d3e2039383033.roa
File: 3231312e39392e3232342e302f31392d3139203d3e2039383033.roa (raw, json)
Hash identifier: M8yX9JIGKoJQxQCCYhZcFEPQjI82xJyedvbvJQsf97Y=
Subject key identifier: 2A:C3:09:62:53:20:77:59:2E:07:11:4B:BE:63:C8:C4:80:74:C1:8A
Certificate issuer: /CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC
Certificate serial: 2E4E945CA973BF9A67CA543C0946D58CD90AACB6
Authority key identifier: 22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e39392e3232342e302f31392d3139203d3e2039383033.roa
Signing time: Mon 13 Apr 2026 04:12:32 +0000
ROA not before: Mon 13 Apr 2026 04:07:32 +0000
ROA not after: Mon 12 Apr 2027 04:12:32 +0000
asID: 9803
IP address blocks: 211.99.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl
rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 10:09:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:4e:94:5c:a9:73:bf:9a:67:ca:54:3c:09:46:d5:8c:d9:0a:ac:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC
Validity
Not Before: Apr 13 04:07:32 2026 GMT
Not After : Apr 12 04:12:32 2027 GMT
Subject: CN=2AC30962532077592E07114BBE63C8C48074C18A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cb:67:f9:68:01:ab:f8:c0:46:23:4c:24:95:
49:c5:bf:81:b5:26:91:08:3a:02:c6:45:ff:b2:73:
4b:b6:60:36:c4:e6:f1:ce:f8:44:d2:0b:b8:66:db:
c5:25:51:4d:4c:e0:7b:b1:df:5d:bb:cd:70:8b:e3:
ce:0f:94:f8:34:78:4f:f5:14:5a:6a:b5:7d:6d:da:
c4:57:90:ef:44:2a:20:97:05:50:bc:8f:dd:18:20:
bf:cb:08:68:3e:d5:7b:94:6b:bf:97:6e:e8:c1:96:
5c:ba:15:af:ee:73:ef:63:e9:d1:4d:11:fe:2c:dd:
ae:ed:a4:d7:21:01:c4:14:17:21:b7:58:bf:64:ff:
9b:5c:2d:d3:d9:12:62:6f:d0:42:27:6f:b4:1a:9a:
36:63:f5:66:2e:a2:37:87:d7:23:1b:73:cc:54:07:
63:aa:89:f9:1e:b8:ba:9d:e3:b5:64:20:64:b5:95:
18:a6:9d:29:cb:89:0b:e2:43:68:43:53:48:12:87:
41:66:3f:fc:4d:c0:92:1d:94:4f:f2:f1:f5:ef:2a:
02:f0:4d:cb:9e:d6:ff:be:7c:8c:cc:f0:14:6b:02:
40:d8:aa:d1:4b:93:3c:e1:50:d9:00:2f:27:8f:57:
be:ff:0d:66:67:d4:e4:d1:f9:0e:2c:1c:01:28:70:
5d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C3:09:62:53:20:77:59:2E:07:11:4B:BE:63:C8:C4:80:74:C1:8A
X509v3 Authority Key Identifier:
keyid:22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e39392e3232342e302f31392d3139203d3e2039383033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.99.224.0/19
Signature Algorithm: sha256WithRSAEncryption
3a:1e:76:21:22:cc:86:5a:b5:60:3b:31:65:ec:75:97:e3:50:
6b:a8:a9:7e:d3:da:c4:63:85:ba:99:91:8a:80:ce:74:09:a4:
24:4b:68:ba:ad:c4:bb:36:de:ac:ea:2e:16:d0:32:95:f0:38:
fc:20:b4:3b:a7:72:aa:cf:91:8e:73:9b:6d:20:d0:fa:39:8e:
45:66:7c:1a:b0:eb:a8:7d:a1:e5:9f:b4:d5:68:18:76:f1:5a:
31:7b:fa:8c:68:8b:16:85:aa:c3:b2:39:bb:85:dd:b9:37:07:
8f:14:8a:d7:04:84:31:c6:a8:1d:03:9b:18:0a:25:bb:5d:d6:
50:40:d5:c8:93:2d:a1:23:b5:37:34:3c:26:83:bf:21:3a:ac:
02:05:4a:d6:14:70:a2:c5:90:4e:5e:61:6c:5f:f1:62:25:71:
a0:90:d6:f9:b6:94:bb:87:2c:3b:8f:92:27:dd:2f:5d:a5:85:
fe:94:4d:12:d2:0b:ad:82:70:25:49:ea:f6:db:f0:89:b1:fc:
0d:c7:4e:b8:1a:3b:75:95:90:b2:5b:bc:a0:08:0f:de:99:3b:
0e:29:4d:07:d7:7e:dd:bb:f6:ad:ff:47:be:ef:91:39:31:2a:
20:67:4e:85:6b:d7:8a:61:25:f7:f1:7d:74:b7:01:96:4b:71:
4b:2a:eb:96
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIULk6UXKlzv5pnylQ8CUbVjNkKrLYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjIxMDJGN0VBQjM3QzgxRTg3QkI1RUIyMTU2MEJGQTYy
NDM1NTNDQzAeFw0yNjA0MTMwNDA3MzJaFw0yNzA0MTIwNDEyMzJaMDMxMTAvBgNV
BAMTKDJBQzMwOTYyNTMyMDc3NTkyRTA3MTE0QkJFNjNDOEM0ODA3NEMxOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOy2f5aAGr+MBGI0wklUnFv4G1
JpEIOgLGRf+yc0u2YDbE5vHO+ETSC7hm28UlUU1M4Hux3127zXCL484PlPg0eE/1
FFpqtX1t2sRXkO9EKiCXBVC8j90YIL/LCGg+1XuUa7+XbujBlly6Fa/uc+9j6dFN
Ef4s3a7tpNchAcQUFyG3WL9k/5tcLdPZEmJv0EInb7QamjZj9WYuojeH1yMbc8xU
B2OqifkeuLqd47VkIGS1lRimnSnLiQviQ2hDU0gSh0FmP/xNwJIdlE/y8fXvKgLw
Tcue1v++fIzM8BRrAkDYqtFLkzzhUNkALyePV77/DWZn1OTR+Q4sHAEocF31AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUKsMJYlMgd1kuBxFLvmPIxIB0wYowHwYDVR0j
BBgwFoAUIhAvfqs3yB6Hu16yFWC/piQ1U8wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTkyMDAwNjk1NDIyMTU2OS8xLzIyMTAyRjdFQUIzN0M4MUU4N0JCNUVCMjE1NjBC
RkE2MjQzNTUzQ0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMjIxMDJGN0VBQjM3QzgxRTg3QkI1RUIyMTU2MEJGQTYyNDM1NTNDQy5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk1OTIwMDA2OTU0MjIxNTY5LzEvMzIzMTMxMmUzOTM5
MmUzMjMyMzQyZTMwMmYzMTM5MmQzMTM5MjAzZDNlMjAzOTM4MzAzMy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBdNj4DANBgkqhkiG9w0BAQsFAAOCAQEAOh52ISLMhlq1YDsxZex1l+NQa6ip
ftPaxGOFupmRioDOdAmkJEtouq3EuzberOouFtAylfA4/CC0O6dyqs+RjnObbSDQ
+jmORWZ8GrDrqH2h5Z+01WgYdvFaMXv6jGiLFoWqw7I5u4XduTcHjxSK1wSEMcao
HQObGAolu13WUEDVyJMtoSO1NzQ8JoO/ITqsAgVK1hRwosWQTl5hbF/xYiVxoJDW
+baUu4csO4+SJ90vXaWF/pRNEtILrYJwJUnq9tvwibH8DcdOuBo7dZWQslu8oAgP
3pk7DilNB9d+3bv2rf9Hvu+ROTEqIGdOhWvXimEl9/F9dLcBlktxSyrrlg==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:23:27 2026 by rpki-client