
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3138322e35302e3132352e302f32342d3234203d3e2039383038.roa
File: 3138322e35302e3132352e302f32342d3234203d3e2039383038.roa (raw, json)
Hash identifier: 9o6zg2gyS2nfg/4caSukcyLIl16wmmX9pkUV4gKiJBg=
Subject key identifier: BC:E2:27:D5:4C:A4:F5:7E:8A:CC:43:5E:03:4A:9A:34:AC:8F:20:45
Certificate issuer: /CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6
Certificate serial: 3AA028CB101D3B2075DB6D1F001435186741EE0E
Authority key identifier: C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3138322e35302e3132352e302f32342d3234203d3e2039383038.roa
Signing time: Mon 13 Apr 2026 06:59:34 +0000
ROA not before: Mon 13 Apr 2026 06:54:34 +0000
ROA not after: Mon 12 Apr 2027 06:59:34 +0000
asID: 9808
IP address blocks: 182.50.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl
rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 08:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:a0:28:cb:10:1d:3b:20:75:db:6d:1f:00:14:35:18:67:41:ee:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6
Validity
Not Before: Apr 13 06:54:34 2026 GMT
Not After : Apr 12 06:59:34 2027 GMT
Subject: CN=BCE227D54CA4F57E8ACC435E034A9A34AC8F2045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:85:14:b1:64:66:2b:b7:58:ce:25:c7:60:91:
24:28:c5:3a:41:32:5c:c4:eb:af:77:c5:e1:b9:d1:
68:7c:df:04:76:79:78:51:80:92:28:b1:68:b8:e8:
d0:04:b7:0a:fa:49:93:eb:86:4a:0b:ca:61:a2:fa:
ff:ea:1e:0d:c6:32:09:31:1d:f6:4d:7c:71:43:81:
aa:f0:db:f2:64:1f:e8:73:d4:8f:91:1e:1b:7d:48:
ad:97:81:f8:59:13:28:10:17:60:29:10:68:16:86:
0e:49:1a:d6:e6:c5:07:83:06:00:39:b4:06:0d:d3:
2a:1f:ed:df:ab:a0:88:34:d5:cf:75:a1:a4:3a:a1:
19:4c:78:bf:d4:f7:e5:dc:77:84:78:47:aa:a2:1a:
34:e6:cc:15:14:35:c3:79:d8:41:d7:7e:ec:87:b6:
b9:6f:75:4b:2b:8b:b7:3d:b5:86:f7:4d:b1:2c:26:
3b:2c:c7:69:b0:9b:d2:89:58:ef:a9:34:33:83:c2:
3a:21:96:8a:c2:54:58:3d:63:22:c9:2a:db:56:65:
54:3d:37:0d:54:75:60:f9:ef:a6:e3:64:5e:02:6d:
4a:71:81:d4:c2:24:6a:f0:9e:c9:ea:96:f9:70:8b:
4f:e0:d9:04:ef:cf:e5:96:e9:e2:82:e8:5d:6d:81:
7e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E2:27:D5:4C:A4:F5:7E:8A:CC:43:5E:03:4A:9A:34:AC:8F:20:45
X509v3 Authority Key Identifier:
keyid:C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3138322e35302e3132352e302f32342d3234203d3e2039383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.50.125.0/24
Signature Algorithm: sha256WithRSAEncryption
94:d9:e0:f2:05:4b:76:37:65:7b:49:c4:7d:bf:ac:ae:39:29:
1d:c8:96:49:66:93:82:87:05:b5:d5:49:49:c2:34:d8:60:9d:
c4:dd:c0:a3:70:db:7f:db:a9:c1:e6:04:1a:88:38:23:4f:f0:
99:22:08:dc:8e:ef:f0:c2:ed:62:f4:8f:47:c7:92:01:bd:3e:
87:78:0a:5e:01:a5:a8:06:d2:42:35:eb:3c:ca:d9:27:f4:bd:
cc:60:2f:94:da:38:d4:4a:4f:d9:b3:52:a9:d7:b3:ac:3e:45:
ec:c5:a4:e3:0f:7f:a3:8b:a0:de:73:b7:d4:1b:ea:70:0a:5e:
1b:83:09:8d:da:de:e7:e4:b3:d7:91:98:82:53:f1:58:a2:db:
dd:7a:8b:8c:14:83:f3:0a:b3:8f:86:15:23:26:b5:bb:23:5c:
2c:b0:d7:98:fd:6c:91:8a:04:50:33:7c:4e:a2:2a:07:ff:ae:
39:05:40:3d:64:ed:03:19:8f:b2:a9:3b:8e:21:4c:25:d6:29:
60:57:c0:9a:2d:cb:0e:06:74:50:53:85:93:ca:6b:67:35:b9:
70:a3:2f:5d:7d:1f:f9:5a:0d:cf:45:ea:d3:1e:67:c3:a2:35:
f1:f8:f6:86:f9:12:41:3e:49:c8:0c:e9:c5:b4:f5:7f:f6:98:
1f:39:0e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 15:24:39 2026 by rpki-client