
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3131362e36362e33322e302f32302d3230203d3e2030.roa
File: 3131362e36362e33322e302f32302d3230203d3e2030.roa (raw, json)
Hash identifier: wNT1DQAFsp8Zs52N3h30+NLAy/kRLoWVPBBLRjJSqcQ=
Subject key identifier: B6:4E:B1:50:69:FA:F6:A0:4E:9B:F2:D2:2C:0E:8B:25:2B:9C:60:D3
Certificate issuer: /CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A
Certificate serial: 68ACE06FAC04BC1500F907C2DBC741E3D17F7E20
Authority key identifier: AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3131362e36362e33322e302f32302d3230203d3e2030.roa
Signing time: Wed 22 Apr 2026 04:53:59 +0000
ROA not before: Wed 22 Apr 2026 04:48:59 +0000
ROA not after: Wed 21 Apr 2027 04:53:59 +0000
asID: 0
IP address blocks: 116.66.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl
rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Apr 2026 23:41:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:ac:e0:6f:ac:04:bc:15:00:f9:07:c2:db:c7:41:e3:d1:7f:7e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A
Validity
Not Before: Apr 22 04:48:59 2026 GMT
Not After : Apr 21 04:53:59 2027 GMT
Subject: CN=B64EB15069FAF6A04E9BF2D22C0E8B252B9C60D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bf:5f:0d:2b:86:8c:a9:a6:1f:5a:df:ca:5c:
a3:5e:1a:05:a4:f9:eb:bc:88:9c:af:eb:2a:29:f5:
52:7b:ad:f1:9a:6c:bb:8b:3d:0a:58:21:d0:78:ae:
1e:47:2a:b2:29:2f:1d:ff:7c:3c:a0:eb:e0:7e:ff:
48:d5:e8:74:1d:69:66:ec:f7:e0:c1:e4:68:3c:18:
53:da:22:25:a9:61:fb:f3:e4:9f:99:a5:1e:01:4e:
b7:b4:d0:a0:56:97:ae:b0:86:ab:75:28:21:07:df:
07:c9:c3:15:22:89:6e:70:be:16:b4:44:54:75:f5:
05:94:15:f2:b2:1d:a9:42:1f:c5:8e:8f:0b:c5:11:
1a:b1:14:39:b3:f7:be:91:31:00:19:f0:61:8b:51:
51:ec:77:d0:c4:b2:69:78:d7:72:66:5d:b6:23:73:
c0:f0:8e:8d:4f:08:24:0f:d7:a2:8f:26:05:21:5c:
14:19:ee:ff:2a:b5:41:8c:b7:72:c5:6f:cc:6e:57:
03:79:f9:45:99:2f:db:03:3f:aa:e3:23:d4:d6:6b:
69:f2:b9:35:a1:60:27:f2:c8:bc:6d:a7:99:98:5d:
2d:9a:41:23:ac:33:7e:35:9b:1f:c4:07:0b:58:4a:
76:df:14:d2:d9:62:44:d6:e1:f2:26:58:8a:19:18:
29:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4E:B1:50:69:FA:F6:A0:4E:9B:F2:D2:2C:0E:8B:25:2B:9C:60:D3
X509v3 Authority Key Identifier:
keyid:AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3131362e36362e33322e302f32302d3230203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.66.32.0/20
Signature Algorithm: sha256WithRSAEncryption
d1:9c:f6:1c:e3:97:a2:5a:03:ad:11:5f:b0:7b:fe:26:d9:98:
6d:e9:2b:3a:61:a5:a5:be:3d:7b:d2:cd:a8:45:bd:89:ee:11:
8d:bc:c4:94:fe:c9:00:1f:bc:03:8c:12:36:9d:8f:75:3a:62:
87:92:46:82:87:7f:e7:94:de:a5:ea:3a:85:a2:7b:78:1c:89:
8e:6e:37:d6:42:d0:25:a6:97:41:0d:12:7d:c5:c5:f3:a5:d7:
36:2a:36:c5:8a:c3:65:d7:8d:02:12:3c:0f:b0:38:27:ce:92:
7a:6e:52:1a:35:9b:cd:d6:1c:c9:20:db:a0:8e:16:22:1f:f7:
ce:1d:3f:55:5c:2b:7d:63:dc:49:fc:c5:71:ef:ef:75:e0:01:
80:5e:02:99:91:1b:0c:94:e5:4e:4b:0a:22:0a:d0:5b:c9:01:
35:67:22:68:19:79:5e:3c:23:62:2a:d5:19:f3:4a:e0:c0:19:
1e:76:5c:e6:74:db:66:55:d5:0e:09:b5:01:24:ca:5e:3d:a2:
1e:77:b6:e5:93:cb:8d:55:65:76:cb:3a:cb:bd:34:c3:c2:72:
b4:46:c9:c5:f3:5e:8d:40:09:78:99:13:ac:a6:a9:5a:48:78:
f5:f8:40:14:d7:68:c5:6e:5d:24:b2:43:94:15:23:9d:c6:e4:
2f:13:b2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:59:26 2026 by rpki-client