
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098515682171092993/0/3231302e31362e3138302e302f32342d3234203d3e2034383132.roa
File: 3231302e31362e3138302e302f32342d3234203d3e2034383132.roa (raw, json)
Hash identifier: pVbEirpbRHZqbSynsD8vPGMaGo+q4kutYI9/gkSkdY8=
Subject key identifier: 9F:31:17:2C:F1:BF:EF:7F:58:8A:B6:64:66:96:74:82:31:7D:67:FC
Certificate issuer: /CN=B479B9B47F8AFC1062B8D469F62A6689067D35EA
Certificate serial: 369F5B1FC192A551EE137F0B2B1E00AA6D5BEE8C
Authority key identifier: B4:79:B9:B4:7F:8A:FC:10:62:B8:D4:69:F6:2A:66:89:06:7D:35:EA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B479B9B47F8AFC1062B8D469F62A6689067D35EA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/3231302e31362e3138302e302f32342d3234203d3e2034383132.roa
Signing time: Mon 20 Apr 2026 08:16:34 +0000
ROA not before: Mon 20 Apr 2026 08:11:34 +0000
ROA not after: Mon 19 Apr 2027 08:16:34 +0000
asID: 4812
IP address blocks: 210.16.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.crl
rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B479B9B47F8AFC1062B8D469F62A6689067D35EA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 03:56:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:9f:5b:1f:c1:92:a5:51:ee:13:7f:0b:2b:1e:00:aa:6d:5b:ee:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B479B9B47F8AFC1062B8D469F62A6689067D35EA
Validity
Not Before: Apr 20 08:11:34 2026 GMT
Not After : Apr 19 08:16:34 2027 GMT
Subject: CN=9F31172CF1BFEF7F588AB66466967482317D67FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:7d:52:55:9a:1b:1c:f8:4e:60:4d:36:7f:
58:68:21:d8:29:96:f9:e6:6b:e7:22:3b:0d:5b:f2:
0d:e9:36:10:4e:7c:1c:c0:30:3a:5f:4b:b3:53:d0:
91:93:c3:c6:bf:6a:16:e6:6c:23:f3:12:e3:8b:2d:
d5:89:1e:8d:0f:33:0c:93:c1:9e:9a:37:9e:b9:9a:
51:b8:10:70:0c:bb:e5:29:92:80:b7:3d:db:fe:fe:
66:79:a8:8e:73:22:4b:71:7c:12:7e:f0:93:76:df:
e6:14:99:f4:d1:b3:3a:9c:6a:81:a5:5f:83:e4:8f:
39:5b:2c:98:e8:46:4d:e5:af:3c:ba:99:a0:8b:47:
8a:34:e6:f1:af:34:80:8d:f7:55:79:cb:25:db:7e:
0c:b3:91:54:99:e6:d4:cf:d1:ad:9c:80:ff:24:dd:
5f:30:7f:d5:3b:ba:c3:f0:75:53:43:af:ea:25:db:
f6:62:dc:2b:3e:97:ca:92:e8:f5:50:5d:f3:a8:57:
4c:46:a6:d7:72:f7:20:57:4c:82:8e:02:43:7c:de:
b2:67:54:45:16:0b:55:5a:62:0d:c8:7d:b9:98:95:
3f:e5:f0:91:2d:23:03:df:75:3f:45:a5:33:1e:fa:
25:cb:6a:85:38:85:24:2b:3b:ae:62:77:9e:2a:d4:
97:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:31:17:2C:F1:BF:EF:7F:58:8A:B6:64:66:96:74:82:31:7D:67:FC
X509v3 Authority Key Identifier:
keyid:B4:79:B9:B4:7F:8A:FC:10:62:B8:D4:69:F6:2A:66:89:06:7D:35:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B479B9B47F8AFC1062B8D469F62A6689067D35EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/3231302e31362e3138302e302f32342d3234203d3e2034383132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.16.180.0/24
Signature Algorithm: sha256WithRSAEncryption
05:fa:26:64:57:47:62:19:e0:65:29:15:0d:e2:3f:02:fa:5b:
a0:4e:93:c1:18:49:e0:3c:4e:2c:4e:1d:ca:94:b7:d6:32:d9:
1d:07:e6:93:36:e6:de:99:91:47:26:5d:8e:5c:ca:35:d6:3d:
7b:84:85:66:4d:79:ee:18:9b:54:07:29:7e:47:11:51:3a:42:
e8:64:a8:05:f8:ac:ba:38:71:be:16:4f:24:dc:fc:0c:b2:84:
f2:2f:7b:b9:a7:07:4e:81:31:3a:81:70:03:42:00:ed:44:6d:
43:4b:53:b7:65:0c:fe:81:74:48:6a:67:8b:54:79:06:02:2b:
0a:69:0c:c3:e4:14:05:f4:fc:f9:be:6e:16:bc:75:3a:73:18:
ef:8f:cd:7b:d9:cc:59:cf:87:8b:eb:c4:4f:3c:5b:d0:8a:63:
6f:55:e6:01:b6:4a:f0:5b:dd:db:fe:49:7c:d4:d5:d6:3e:d2:
47:65:66:26:2d:cd:89:ae:4d:fa:c4:47:6a:8d:d3:3e:f7:fe:
3e:ea:1d:18:c8:2a:4a:f2:8f:11:2a:3f:fe:a7:2a:6d:fa:7f:
12:d7:21:87:e5:8b:0b:a7:3a:4b:e9:82:50:a2:4d:74:4f:cf:
38:07:12:5a:3a:ea:9d:4f:56:07:7e:b3:84:1b:6d:10:63:0f:
69:50:0c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 08:24:33 2026 by rpki-client