
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3138322e35302e3131362e302f32322d3232203d3e2039383038.roa
File: 3138322e35302e3131362e302f32322d3232203d3e2039383038.roa (raw, json)
Hash identifier: XGJccjyzdeYZsWhv+4moDjGZBERZ7kfKNVgjbskkwvg=
Subject key identifier: 4D:23:7D:D1:EA:93:3B:D3:B4:B0:BB:CD:B4:D9:E6:EB:72:FB:76:33
Certificate issuer: /CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6
Certificate serial: 4CAA8550FC0896B82448A9C9180BCEC9D9D02180
Authority key identifier: C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3138322e35302e3131362e302f32322d3232203d3e2039383038.roa
Signing time: Mon 13 Apr 2026 06:59:36 +0000
ROA not before: Mon 13 Apr 2026 06:54:36 +0000
ROA not after: Mon 12 Apr 2027 06:59:36 +0000
asID: 9808
IP address blocks: 182.50.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl
rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 08:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:aa:85:50:fc:08:96:b8:24:48:a9:c9:18:0b:ce:c9:d9:d0:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6
Validity
Not Before: Apr 13 06:54:36 2026 GMT
Not After : Apr 12 06:59:36 2027 GMT
Subject: CN=4D237DD1EA933BD3B4B0BBCDB4D9E6EB72FB7633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a8:a1:fc:40:c9:24:eb:af:16:92:ea:cb:17:
e7:f3:ad:20:ea:69:49:4e:1c:c7:49:66:70:38:c2:
5b:a2:e0:ea:86:67:4f:ec:4c:fc:e6:10:56:7c:82:
7b:5f:4f:fd:cd:89:18:f0:16:40:bd:d8:5c:57:45:
ce:b9:c9:95:99:e3:05:e9:55:f2:18:50:72:c0:d8:
77:1b:9a:6d:9e:16:c4:e1:42:76:41:78:96:dc:cb:
f7:88:87:df:c7:c4:a5:4e:68:e3:1d:82:b8:7e:33:
11:51:8c:6a:dd:59:d1:bc:85:28:e6:4d:3b:f1:3c:
81:cd:72:b5:a3:d9:64:cc:3d:56:7a:d8:f1:21:2d:
3e:1a:76:c3:57:77:25:1a:70:1c:6a:c3:5d:93:e3:
fd:58:94:7f:3c:0f:eb:4e:84:eb:15:3c:c8:e1:a9:
18:17:c3:9f:b4:7b:37:d9:6a:fc:94:c8:1a:30:78:
c2:a9:5c:07:75:ec:ad:41:cb:9a:09:dc:27:27:f3:
4f:d2:b9:65:b3:d8:64:a8:b2:21:4c:19:84:20:18:
cb:51:96:e0:0a:88:fc:3a:65:66:d3:fb:cd:98:b8:
cb:d2:d5:03:30:a1:92:33:c6:42:a1:a6:cf:ba:da:
15:fa:dc:b0:c1:be:2b:25:50:8b:fe:c0:47:8a:f9:
29:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:23:7D:D1:EA:93:3B:D3:B4:B0:BB:CD:B4:D9:E6:EB:72:FB:76:33
X509v3 Authority Key Identifier:
keyid:C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3138322e35302e3131362e302f32322d3232203d3e2039383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.50.116.0/22
Signature Algorithm: sha256WithRSAEncryption
15:17:d4:75:6f:7e:40:23:df:ab:fa:4d:ff:e2:33:74:39:ba:
9b:d3:61:e4:32:09:9d:fe:84:70:11:c5:81:4d:32:0c:50:71:
50:4b:61:c5:ad:51:e6:06:c5:e4:5d:2b:5c:a6:2d:76:73:ce:
28:05:26:bb:85:13:9d:b1:23:c2:21:1d:60:13:12:1e:42:68:
6a:40:c6:39:b6:92:68:dc:2d:8f:1e:27:18:5a:5d:d7:e3:4d:
7d:2b:1a:50:d1:d4:a5:44:27:03:73:b4:a0:1a:a4:7c:79:a9:
c0:9e:74:77:74:08:e8:31:a7:22:ff:ee:05:39:c9:83:e0:1b:
f8:08:6c:77:40:a3:b1:d7:21:3d:fb:ef:57:10:e3:b3:20:11:
a0:88:60:58:4a:ed:a6:c3:e8:51:be:56:5a:8d:2f:2f:9e:f0:
54:c9:76:f9:10:28:91:85:2a:ab:ea:42:8e:8e:9b:45:fc:8b:
c7:6a:68:d7:4a:fa:5a:19:ec:41:dc:fb:64:06:fd:8a:26:35:
75:4e:01:32:ac:9b:91:69:22:0a:aa:e0:97:c2:be:1c:bd:29:
53:09:0c:93:1b:39:dd:16:87:0d:0f:77:dc:63:4f:5e:ed:4e:
c4:d8:d2:0a:2b:5f:fa:53:20:5f:1f:38:6d:0e:ee:c6:8a:5a:
56:45:08:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 15:24:01 2026 by rpki-client