
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097412865305870337/0/3136302e3235302e31342e302f32332d3233203d3e203233383430.roa
File: 3136302e3235302e31342e302f32332d3233203d3e203233383430.roa (raw, json)
Hash identifier: fKSczNccDUKIQy/8S0odbvgqqmyXGLwFDG576iUJ3sk=
Subject key identifier: 97:39:AD:B4:1B:5A:B6:BD:D0:F0:CF:A7:C2:A2:13:FB:9F:49:B7:7D
Certificate issuer: /CN=4E7B315B0F1461798439074524DE185E057B324F
Certificate serial: 021262DEF1946FC7518B5BEFF8089E37F16C8508
Authority key identifier: 4E:7B:31:5B:0F:14:61:79:84:39:07:45:24:DE:18:5E:05:7B:32:4F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4E7B315B0F1461798439074524DE185E057B324F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/3136302e3235302e31342e302f32332d3233203d3e203233383430.roa
Signing time: Fri 17 Apr 2026 06:50:19 +0000
ROA not before: Fri 17 Apr 2026 06:45:19 +0000
ROA not after: Fri 16 Apr 2027 06:50:19 +0000
asID: 23840
IP address blocks: 160.250.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.crl
rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4E7B315B0F1461798439074524DE185E057B324F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 10:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:12:62:de:f1:94:6f:c7:51:8b:5b:ef:f8:08:9e:37:f1:6c:85:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E7B315B0F1461798439074524DE185E057B324F
Validity
Not Before: Apr 17 06:45:19 2026 GMT
Not After : Apr 16 06:50:19 2027 GMT
Subject: CN=9739ADB41B5AB6BDD0F0CFA7C2A213FB9F49B77D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:56:c0:19:ae:06:8d:f4:16:49:d5:41:f2:a7:
c2:48:0f:0a:72:d6:73:69:dd:f4:2b:2d:2e:ae:01:
7b:d4:3b:69:6d:98:fd:ad:b8:76:08:64:7a:ab:55:
a4:12:15:9f:ed:e8:da:44:79:e9:de:40:57:bd:fa:
4a:88:bc:fe:11:2c:74:19:e0:cb:37:fd:4d:03:6a:
f2:d5:ad:98:ec:29:3f:7d:88:3d:33:b2:e7:e1:74:
2c:fa:38:42:93:24:c9:95:86:a3:cc:e8:b5:e0:f8:
1d:f3:7f:c0:3d:14:0f:b5:37:de:16:aa:1c:c5:80:
45:1c:f5:e1:4a:c2:51:90:e4:af:ab:19:6e:73:cc:
c6:b0:97:f9:5a:64:78:aa:f5:b9:38:47:82:79:08:
e5:ad:60:85:5d:4f:3b:01:29:db:34:f3:92:d3:5c:
33:00:a8:09:26:fc:e8:2f:31:38:1b:54:f4:30:55:
d3:1c:6a:15:a4:52:0f:9e:5e:ff:b9:2e:44:8e:cf:
94:e0:ab:59:62:ad:bc:38:a7:f5:a8:86:3b:7d:72:
d4:ea:e5:49:f7:22:aa:94:22:ff:57:8e:43:14:b8:
26:4e:54:39:95:4c:f8:e0:c7:a7:a2:7f:89:50:b5:
b6:30:d8:84:54:db:5c:58:fc:08:0f:be:94:bf:3b:
7a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:39:AD:B4:1B:5A:B6:BD:D0:F0:CF:A7:C2:A2:13:FB:9F:49:B7:7D
X509v3 Authority Key Identifier:
keyid:4E:7B:31:5B:0F:14:61:79:84:39:07:45:24:DE:18:5E:05:7B:32:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4E7B315B0F1461798439074524DE185E057B324F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/3136302e3235302e31342e302f32332d3233203d3e203233383430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.250.14.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:40:6d:d2:7c:f7:1d:09:bc:f1:7e:b8:49:73:b6:2f:6f:7f:
cf:6f:06:3a:47:92:6a:66:78:0e:38:95:d9:d1:35:a0:fa:6a:
91:c3:e7:e5:0b:14:f2:11:dc:04:a4:fc:8d:91:c4:07:94:f7:
d7:d1:97:d8:a0:4d:7c:de:ff:fb:11:87:3f:9e:c7:e1:9a:80:
d9:76:4d:62:f3:51:0a:89:63:27:a3:58:a1:24:00:d7:82:f1:
46:81:31:74:f2:50:ab:68:c2:b4:3b:f6:6f:a2:63:ed:68:74:
6b:19:77:cc:04:a8:8a:e0:11:98:ca:fc:bd:b4:77:73:a6:0e:
15:c5:65:7b:9d:c1:28:f1:36:4e:a0:f4:1d:29:d7:31:f5:a8:
e9:ee:c4:cf:ca:6f:a5:6e:4e:1d:5b:f3:7b:1d:2a:5a:ab:66:
2c:00:9e:e4:bf:83:28:c2:7c:59:86:63:7d:c9:75:c5:dd:11:
4d:b9:26:51:9c:24:d6:eb:d4:5e:a6:d0:87:c9:fe:81:29:bf:
b7:f9:eb:0c:52:10:86:74:66:29:7d:64:1d:9a:7e:bc:ff:b5:
36:ea:82:89:84:68:2f:53:b4:b9:ed:dc:6f:58:e3:86:a2:22:
c3:e4:54:b6:07:7b:f7:8a:f1:65:76:41:d4:30:3f:68:45:39:
d0:7a:ad:3b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 19 02:19:38 2026 by rpki-client