
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3138322e35302e3132302e302f32332d3233203d3e2039383038.roa
File: 3138322e35302e3132302e302f32332d3233203d3e2039383038.roa (raw, json)
Hash identifier: gFShjJ7oeCbAt0Kfn7bElf56lGup17guZiMkO2CMHSU=
Subject key identifier: F7:3D:8F:C1:8F:89:0B:27:AE:CC:41:04:B7:C4:D2:ED:CB:A6:07:20
Certificate issuer: /CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6
Certificate serial: 0E987640CD467E5B5D9BA763D7B5FEFDCD02186A
Authority key identifier: C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3138322e35302e3132302e302f32332d3233203d3e2039383038.roa
Signing time: Mon 13 Apr 2026 06:59:35 +0000
ROA not before: Mon 13 Apr 2026 06:54:35 +0000
ROA not after: Mon 12 Apr 2027 06:59:35 +0000
asID: 9808
IP address blocks: 182.50.120.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl
rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 08:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:98:76:40:cd:46:7e:5b:5d:9b:a7:63:d7:b5:fe:fd:cd:02:18:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6
Validity
Not Before: Apr 13 06:54:35 2026 GMT
Not After : Apr 12 06:59:35 2027 GMT
Subject: CN=F73D8FC18F890B27AECC4104B7C4D2EDCBA60720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:49:bc:75:49:1b:50:03:7b:3e:14:c5:32:55:
e6:48:b6:e1:5b:c3:3f:75:6e:b1:34:c2:33:85:44:
79:5b:29:46:d1:a2:a0:ed:9f:8f:33:89:87:ec:69:
75:95:29:e5:24:b2:b5:ed:b0:94:1b:c7:bf:e3:1a:
ef:5e:f9:ef:0b:82:7c:66:6e:80:5c:0b:7b:96:11:
bd:11:4f:ad:3d:7d:b1:e2:22:24:b2:d7:70:99:1a:
9c:b0:e5:51:86:34:bf:be:f4:c6:5a:72:0a:42:9b:
4e:cc:2e:4c:bf:f5:02:fa:72:21:73:b1:0e:c8:a9:
af:e6:97:53:88:46:eb:ee:21:d5:d3:4b:c9:c3:32:
d6:9c:c3:ec:fe:91:1c:63:52:30:95:60:e1:6a:cc:
a9:02:96:d8:5a:00:02:89:54:4c:94:2d:40:0e:3e:
13:5a:60:a9:61:da:95:8d:5f:8a:5d:89:8a:35:75:
eb:61:6b:72:ca:14:0d:0a:5d:5e:01:42:55:46:bd:
fe:67:57:8a:f2:9e:58:e4:94:93:dc:2b:ed:12:e4:
37:a2:3e:55:65:37:bb:71:48:40:e1:4d:cd:68:56:
41:c3:cc:47:4d:f2:8f:48:94:14:94:3b:96:3c:5f:
3d:de:c8:1a:e2:9f:c4:46:53:d2:e4:1a:e4:c0:ed:
13:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3D:8F:C1:8F:89:0B:27:AE:CC:41:04:B7:C4:D2:ED:CB:A6:07:20
X509v3 Authority Key Identifier:
keyid:C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3138322e35302e3132302e302f32332d3233203d3e2039383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.50.120.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:f5:d5:75:33:d4:5a:5d:f6:06:6e:ab:0d:0c:70:85:c8:da:
cf:db:50:c4:b5:de:bb:15:2c:02:7f:ad:82:3a:28:9f:e7:e6:
84:43:88:71:59:81:6e:54:9b:34:8c:07:4d:b5:91:c9:b8:4b:
ff:e9:99:da:6c:0f:59:39:2f:15:1e:df:59:10:41:2f:f3:d2:
ab:b2:4f:30:a0:f6:13:d9:c7:bb:78:01:10:ed:45:21:2b:90:
b8:36:70:b7:00:ef:6a:ee:0e:aa:83:d9:d5:1d:3a:cc:da:45:
0e:f9:97:11:67:3f:08:6e:6d:11:a0:1f:de:cd:66:51:51:f3:
c9:4b:44:1c:ab:90:ae:ed:55:88:0b:b6:f9:a0:01:5d:27:74:
82:c8:34:67:86:64:b7:08:34:fd:4b:0f:00:1c:1c:56:5e:08:
56:a8:1b:95:a0:fb:2c:a1:fb:7d:22:5a:28:59:f1:c7:13:9b:
63:72:3b:b3:d7:48:5e:04:42:31:73:45:55:97:04:42:39:ff:
21:c5:29:5f:de:71:d2:ab:73:8c:17:d5:0b:b5:52:6d:3b:3d:
9d:29:73:af:4f:5c:f5:48:05:b8:cf:b0:f3:6a:15:fa:35:26:
d2:85:47:9a:58:c0:4d:52:f1:20:55:d2:bc:53:6e:c2:0f:d7:
9d:52:b2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 15:24:02 2026 by rpki-client