
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098988489464086530/0/3131382e3234322e33322e302f32322d3232203d3e2034383132.roa
File: 3131382e3234322e33322e302f32322d3232203d3e2034383132.roa (raw, json)
Hash identifier: eqKYssRjmbT+n2crq/yxbZNVr33UQZ6vHSKYThAYbGw=
Subject key identifier: FD:22:F4:FD:A3:FB:DD:93:5A:56:6E:F8:DD:10:A0:88:31:D3:86:66
Certificate issuer: /CN=A7133A09AC078B101CB7980FE646810280C0D64F
Certificate serial: 1A29FC637DAB661840577BBD496AD83FFA0C49B8
Authority key identifier: A7:13:3A:09:AC:07:8B:10:1C:B7:98:0F:E6:46:81:02:80:C0:D6:4F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A7133A09AC078B101CB7980FE646810280C0D64F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/3131382e3234322e33322e302f32322d3232203d3e2034383132.roa
Signing time: Tue 21 Apr 2026 15:11:25 +0000
ROA not before: Tue 21 Apr 2026 15:06:25 +0000
ROA not after: Tue 20 Apr 2027 15:11:25 +0000
asID: 4812
IP address blocks: 118.242.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.crl
rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A7133A09AC078B101CB7980FE646810280C0D64F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 05:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:29:fc:63:7d:ab:66:18:40:57:7b:bd:49:6a:d8:3f:fa:0c:49:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7133A09AC078B101CB7980FE646810280C0D64F
Validity
Not Before: Apr 21 15:06:25 2026 GMT
Not After : Apr 20 15:11:25 2027 GMT
Subject: CN=FD22F4FDA3FBDD935A566EF8DD10A08831D38666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bd:fb:75:9d:c5:27:ad:cc:15:33:98:72:8e:
ea:be:fc:bb:d3:e6:ba:be:20:84:6c:f9:27:ce:c8:
4b:16:60:14:26:06:0c:c4:a6:85:68:e1:2b:9e:af:
77:e9:c1:5c:be:38:97:96:6e:b1:4c:0a:c9:31:68:
27:0f:75:e5:da:73:81:c3:13:0e:d1:b5:bf:92:a8:
28:6a:c6:33:c2:a8:7e:1c:44:4e:d2:5e:c3:39:cb:
37:b6:c0:0e:38:c4:58:c7:1b:c2:87:25:0c:9b:96:
dc:89:7b:24:8f:22:ec:a3:66:cd:d9:cc:b4:7e:7b:
82:ad:9f:9e:ee:fd:77:1d:81:94:a0:2f:3b:c6:14:
ae:75:49:17:0d:e6:9c:58:4d:41:5f:44:36:e2:2d:
44:cd:bd:3e:6f:2e:05:69:65:c3:d5:cc:04:b1:a5:
3d:8d:5f:dc:94:e1:90:b8:6c:34:32:de:0e:ba:8c:
a8:82:e5:ef:ea:1e:3b:21:23:1d:aa:9b:64:51:b9:
94:1d:09:82:3d:0d:01:3a:44:f9:5b:18:e0:bd:42:
a8:14:bc:54:81:cc:5f:ea:97:41:f8:51:06:28:7d:
fc:4b:1a:70:87:d0:3f:1e:ed:cb:e0:1d:c2:ea:bb:
24:95:d4:98:17:3d:7b:f1:df:90:f1:23:57:aa:29:
fc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:22:F4:FD:A3:FB:DD:93:5A:56:6E:F8:DD:10:A0:88:31:D3:86:66
X509v3 Authority Key Identifier:
keyid:A7:13:3A:09:AC:07:8B:10:1C:B7:98:0F:E6:46:81:02:80:C0:D6:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A7133A09AC078B101CB7980FE646810280C0D64F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/3131382e3234322e33322e302f32322d3232203d3e2034383132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.242.32.0/22
Signature Algorithm: sha256WithRSAEncryption
83:29:de:9c:97:29:58:2d:98:b3:34:0f:45:42:2c:a2:69:47:
96:03:c8:c5:60:b7:09:b4:0d:f4:2a:48:57:ca:e7:25:bf:2e:
25:bb:a7:70:0b:c5:a5:f5:8c:5e:88:ad:0c:00:4d:49:3b:a1:
1e:33:b5:46:05:40:24:ac:b1:1f:03:9b:e1:f8:42:3b:56:54:
6d:71:b8:b0:6e:d9:57:d4:86:7e:3a:96:60:6a:be:98:af:9d:
91:58:0d:6b:20:3f:ca:58:40:b7:04:80:02:df:67:76:6c:9c:
23:3d:e2:f1:81:bd:76:e3:91:13:44:41:e8:35:fe:b8:de:3f:
74:e9:6e:fa:95:8e:e3:dd:ab:4d:5e:45:9a:82:50:58:ed:17:
99:3f:c4:7e:34:23:55:d4:14:6f:9f:85:55:d9:9b:65:42:84:
24:0b:12:b4:e3:13:5f:8a:98:21:61:b6:dd:d6:d0:37:14:6f:
39:e9:ce:c0:cf:9b:58:65:8f:0e:b6:b1:11:3d:24:96:34:2d:
e2:e7:8c:0f:ef:60:d0:cd:9a:8a:58:c9:65:15:a0:dd:ba:b7:
61:58:75:86:73:b8:34:7f:8a:ac:d5:a3:4e:43:7f:c8:ce:5a:
43:59:9b:b2:3c:5a:18:a4:cb:ab:33:ca:9e:2a:cc:24:29:df:
0b:ad:8c:b7
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUGin8Y32rZhhAV3u9SWrYP/oMSbgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTcxMzNBMDlBQzA3OEIxMDFDQjc5ODBGRTY0NjgxMDI4
MEMwRDY0RjAeFw0yNjA0MjExNTA2MjVaFw0yNzA0MjAxNTExMjVaMDMxMTAvBgNV
BAMTKEZEMjJGNEZEQTNGQkREOTM1QTU2NkVGOEREMTBBMDg4MzFEMzg2NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+vft1ncUnrcwVM5hyjuq+/LvT
5rq+IIRs+SfOyEsWYBQmBgzEpoVo4Suer3fpwVy+OJeWbrFMCskxaCcPdeXac4HD
Ew7Rtb+SqChqxjPCqH4cRE7SXsM5yze2wA44xFjHG8KHJQybltyJeySPIuyjZs3Z
zLR+e4Ktn57u/XcdgZSgLzvGFK51SRcN5pxYTUFfRDbiLUTNvT5vLgVpZcPVzASx
pT2NX9yU4ZC4bDQy3g66jKiC5e/qHjshIx2qm2RRuZQdCYI9DQE6RPlbGOC9QqgU
vFSBzF/ql0H4UQYoffxLGnCH0D8e7cvgHcLquySV1JgXPXvx35DxI1eqKfw7AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU/SL0/aP73ZNaVm743RCgiDHThmYwHwYDVR0j
BBgwFoAUpxM6CawHixAct5gP5kaBAoDA1k8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
ODk4ODQ4OTQ2NDA4NjUzMC8wL0E3MTMzQTA5QUMwNzhCMTAxQ0I3OTgwRkU2NDY4
MTAyODBDMEQ2NEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTcxMzNBMDlBQzA3OEIxMDFDQjc5ODBGRTY0NjgxMDI4MEMwRDY0Ri5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk4OTg4NDg5NDY0MDg2NTMwLzAvMzEzMTM4MmUzMjM0
MzIyZTMzMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzEzMi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAnbyIDANBgkqhkiG9w0BAQsFAAOCAQEAgynenJcpWC2YszQPRUIsomlHlgPI
xWC3CbQN9CpIV8rnJb8uJbuncAvFpfWMXoitDABNSTuhHjO1RgVAJKyxHwOb4fhC
O1ZUbXG4sG7ZV9SGfjqWYGq+mK+dkVgNayA/ylhAtwSAAt9ndmycIz3i8YG9duOR
E0RB6DX+uN4/dOlu+pWO492rTV5FmoJQWO0XmT/EfjQjVdQUb5+FVdmbZUKEJAsS
tOMTX4qYIWG23dbQNxRvOenOwM+bWGWPDraxET0kljQt4ueMD+9g0M2ailjJZRWg
3bq3YVh1hnO4NH+KrNWjTkN/yM5aQ1mbsjxaGKTLqzPKnirMJCnfC62Mtw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 08:25:07 2026 by rpki-client