
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3138322e35302e3132342e302f32332d3233203d3e2034383437.roa
File: 3138322e35302e3132342e302f32332d3233203d3e2034383437.roa (raw, json)
Hash identifier: e08jwn+1XN6LbeJg7YnzLqoiFIlpKNQRiWEZmYBNoi0=
Subject key identifier: 5E:19:16:9C:42:01:27:99:C1:96:DB:86:62:B8:54:A9:7B:02:BA:B8
Certificate issuer: /CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6
Certificate serial: 787DD53828DB4FAD7AF61FE34B968A625D4C15E7
Authority key identifier: C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3138322e35302e3132342e302f32332d3233203d3e2034383437.roa
Signing time: Mon 13 Apr 2026 06:59:35 +0000
ROA not before: Mon 13 Apr 2026 06:54:35 +0000
ROA not after: Mon 12 Apr 2027 06:59:35 +0000
asID: 4847
IP address blocks: 182.50.124.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl
rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 08:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:7d:d5:38:28:db:4f:ad:7a:f6:1f:e3:4b:96:8a:62:5d:4c:15:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6
Validity
Not Before: Apr 13 06:54:35 2026 GMT
Not After : Apr 12 06:59:35 2027 GMT
Subject: CN=5E19169C42012799C196DB8662B854A97B02BAB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ac:53:d5:c4:33:b3:18:7e:10:8e:67:df:eb:
3f:7d:ab:4b:87:4e:fb:e0:08:d3:af:7a:3f:f2:29:
fc:eb:4a:72:a0:d3:c8:68:7c:06:d1:04:21:4b:47:
d7:c0:b7:41:0b:df:b8:49:9b:f3:8e:7b:e9:9b:93:
14:67:0b:ad:37:b5:19:e3:66:58:16:2a:39:63:49:
c1:03:9d:54:b3:6e:c8:25:2e:b5:d1:2b:66:13:d0:
de:4c:9a:4c:44:e3:21:a0:c6:61:5e:aa:7a:9e:17:
3b:4a:ed:6e:85:33:83:e4:44:01:5a:d0:ba:4a:62:
dc:37:29:24:1e:38:c4:72:2e:a8:d2:cb:4b:cf:99:
9e:5c:fc:44:0d:8b:8d:63:25:6c:d9:a9:30:83:be:
ed:e0:99:51:8a:2d:cb:f2:88:2d:76:c2:58:12:d2:
f2:8e:ef:df:b7:0d:9c:7a:b8:4d:a2:1e:d4:02:d2:
a5:7f:67:69:b1:9a:c6:a6:92:3f:21:d1:03:b9:35:
20:44:57:fa:e8:b2:4f:99:68:9f:f7:4a:56:9d:f9:
95:15:74:19:e4:b4:cc:d5:4d:b1:de:7a:7a:8a:f9:
fd:4f:ae:3a:47:3b:4e:a6:6a:cb:4a:c3:32:a1:ae:
c9:13:50:e9:46:59:4d:cf:ed:39:ca:3e:1d:1e:72:
21:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:19:16:9C:42:01:27:99:C1:96:DB:86:62:B8:54:A9:7B:02:BA:B8
X509v3 Authority Key Identifier:
keyid:C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3138322e35302e3132342e302f32332d3233203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.50.124.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:08:db:05:f8:8f:ef:9f:70:d7:70:f8:a6:e4:83:2b:bb:19:
48:52:e2:f2:39:96:45:c2:21:16:8a:6d:8e:26:c3:7f:fe:79:
33:29:cc:0a:fb:f4:7d:d7:fc:cb:bc:37:cb:63:4b:79:3a:62:
a5:9c:15:94:0b:07:67:f8:1d:e8:1b:d5:26:db:5e:ac:0f:92:
fa:20:3e:dd:0d:ec:09:02:de:28:5d:67:19:3b:c5:d0:14:2b:
d8:8a:68:07:ae:13:69:b0:a2:ec:ef:5c:24:e8:ce:f9:d1:d7:
7d:a0:fd:0e:25:79:9f:37:60:11:df:e0:29:0b:bc:e5:e4:a2:
e8:df:53:3f:5c:89:04:af:52:18:1e:50:e3:e4:1e:0f:32:51:
44:12:ad:11:91:f9:6c:2f:68:04:9d:2d:f7:a2:36:39:22:d2:
dd:8d:65:47:10:0d:1e:a9:74:87:49:6e:52:88:e5:fc:a5:83:
a2:f9:49:5a:b3:b2:5c:f1:d1:55:94:83:cb:74:9e:d5:d6:f5:
62:e7:8b:36:5e:be:e5:37:fc:4a:0a:04:29:3f:03:7f:f0:41:
4e:a7:8b:02:3e:3e:59:e7:88:18:33:6a:a6:08:6b:03:44:01:
a7:6c:99:60:b7:6c:03:5a:37:ee:f8:16:12:a1:43:47:2c:d4:
8e:1d:d1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:47:17 2026 by rpki-client