
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098515682171092993/0/3231302e31362e3138352e302f32342d3234203d3e2034383132.roa
File: 3231302e31362e3138352e302f32342d3234203d3e2034383132.roa (raw, json)
Hash identifier: bXqNYBH6dqp3XhjyABQOELGhYbAAx/VDEKU/yFMCeZM=
Subject key identifier: 05:C6:38:1A:29:D3:82:6D:6A:62:BE:40:01:75:07:2E:AB:5C:E6:65
Certificate issuer: /CN=B479B9B47F8AFC1062B8D469F62A6689067D35EA
Certificate serial: 7843007BBE76937E819DCC3C3EB2F8C90AE6D6D6
Authority key identifier: B4:79:B9:B4:7F:8A:FC:10:62:B8:D4:69:F6:2A:66:89:06:7D:35:EA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B479B9B47F8AFC1062B8D469F62A6689067D35EA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/3231302e31362e3138352e302f32342d3234203d3e2034383132.roa
Signing time: Mon 20 Apr 2026 08:16:34 +0000
ROA not before: Mon 20 Apr 2026 08:11:34 +0000
ROA not after: Mon 19 Apr 2027 08:16:34 +0000
asID: 4812
IP address blocks: 210.16.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.crl
rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B479B9B47F8AFC1062B8D469F62A6689067D35EA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 03:56:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:43:00:7b:be:76:93:7e:81:9d:cc:3c:3e:b2:f8:c9:0a:e6:d6:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B479B9B47F8AFC1062B8D469F62A6689067D35EA
Validity
Not Before: Apr 20 08:11:34 2026 GMT
Not After : Apr 19 08:16:34 2027 GMT
Subject: CN=05C6381A29D3826D6A62BE400175072EAB5CE665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a9:cc:5b:87:26:7a:5c:ac:cf:e2:b4:ae:75:
74:12:a8:01:0a:63:60:99:43:9a:18:1c:eb:79:83:
f7:b8:73:7c:9f:5d:be:23:a3:72:2f:33:99:8c:f2:
08:59:9a:03:cb:85:20:71:42:c5:6f:d3:b9:f8:14:
b4:3c:70:83:3e:b6:40:60:ed:5b:91:17:e2:c5:02:
4e:e5:dc:4b:54:06:46:b4:74:5a:11:ce:81:49:d7:
2b:de:2c:d1:0f:a1:07:97:43:29:5a:fb:5c:5e:47:
30:96:08:23:dc:84:68:60:2a:3a:6b:a1:f0:f7:bb:
b4:e1:54:e9:74:bc:6f:00:3c:d8:c1:c7:24:aa:c6:
5e:19:96:9b:10:6d:26:a2:3a:e8:b5:59:52:c1:0f:
22:ee:bd:f1:4d:6b:9f:0c:b8:d2:a2:15:23:dc:05:
7d:7f:ce:97:4a:45:01:70:b4:1c:15:43:0c:a4:99:
7a:8c:4d:6e:f1:9f:83:03:70:08:82:7c:2a:de:63:
1d:39:8d:92:1d:7e:f7:f1:33:3e:d7:7c:0d:df:7c:
99:74:df:30:73:ab:25:2f:c9:9e:27:e9:69:4d:87:
0d:e9:52:40:6a:0b:ff:ad:3a:f8:65:9d:d6:5c:0a:
76:87:82:aa:57:3e:34:de:f8:26:3f:c1:d8:a2:d5:
ca:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C6:38:1A:29:D3:82:6D:6A:62:BE:40:01:75:07:2E:AB:5C:E6:65
X509v3 Authority Key Identifier:
keyid:B4:79:B9:B4:7F:8A:FC:10:62:B8:D4:69:F6:2A:66:89:06:7D:35:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B479B9B47F8AFC1062B8D469F62A6689067D35EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/3231302e31362e3138352e302f32342d3234203d3e2034383132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.16.185.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:e2:c8:b9:30:f5:22:3a:2f:f4:ac:3e:ba:c8:0a:5d:39:93:
48:4e:6b:78:c9:41:0b:9d:3a:06:fa:4b:fc:24:5c:9d:5e:3e:
d8:07:43:97:e7:be:28:e6:37:15:2e:d7:7d:d0:30:85:8a:a0:
4e:99:7a:a9:4a:31:4d:51:b0:71:2b:02:ac:11:73:4c:b3:f6:
c1:be:70:7c:2b:9c:ad:c7:18:7e:08:37:a2:11:a1:7f:e8:78:
14:27:e2:d3:70:cc:c2:e0:10:8b:87:3a:ac:ae:48:35:66:d5:
49:de:2e:63:41:db:87:80:0b:dc:46:12:0a:78:9c:82:48:e1:
c0:2d:81:47:3e:97:e3:0f:5a:f5:a3:2d:e9:0b:44:d1:f5:1c:
cc:3c:f0:be:a4:c1:bd:7c:70:98:fe:c2:9b:28:f8:45:84:78:
b5:81:89:12:ed:f0:6b:e0:08:b6:ec:c1:92:a6:9e:99:c7:c5:
c6:0f:e3:6f:a9:46:17:ac:13:51:19:8c:d8:70:07:f4:ee:4a:
b5:6b:ba:23:a8:0f:96:dd:64:6e:99:3c:ed:c2:8e:8d:73:28:
eb:4a:a7:d6:91:06:5c:9d:b8:6f:88:a8:33:29:50:2d:e5:50:
47:42:d6:1b:98:37:d7:65:96:86:fc:b3:94:22:8a:74:24:57:
ff:d9:70:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 08:24:33 2026 by rpki-client