
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3131362e36362e33362e302f32342d3234203d3e2034383132.roa
File: 3131362e36362e33362e302f32342d3234203d3e2034383132.roa (raw, json)
Hash identifier: 9PZcNDwOFM1W+HqkIe4mT1Xoe9v6VAm30cLnLhC5Dxg=
Subject key identifier: BB:82:14:1B:8D:FD:AD:4D:8B:B8:42:7D:41:88:61:62:63:38:98:50
Certificate issuer: /CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A
Certificate serial: 1759EFD2CDC9E7E3583F1896E6D88B64E1C9FD6B
Authority key identifier: AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3131362e36362e33362e302f32342d3234203d3e2034383132.roa
Signing time: Wed 22 Apr 2026 04:53:59 +0000
ROA not before: Wed 22 Apr 2026 04:48:59 +0000
ROA not after: Wed 21 Apr 2027 04:53:59 +0000
asID: 4812
IP address blocks: 116.66.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl
rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Apr 2026 23:41:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:59:ef:d2:cd:c9:e7:e3:58:3f:18:96:e6:d8:8b:64:e1:c9:fd:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A
Validity
Not Before: Apr 22 04:48:59 2026 GMT
Not After : Apr 21 04:53:59 2027 GMT
Subject: CN=BB82141B8DFDAD4D8BB8427D4188616263389850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f7:b2:f5:2e:20:01:86:d7:c9:58:0e:0f:23:
e8:26:4c:52:ed:73:20:ab:48:3e:35:54:9d:f0:04:
a3:4d:aa:f2:57:27:b9:0c:0c:08:b1:3b:8c:c8:4d:
ca:7f:af:3a:aa:e1:9f:48:15:01:0d:81:4a:45:28:
58:bb:eb:bd:b2:8c:41:df:88:e6:f3:7b:50:69:65:
d2:f1:2e:be:94:70:6e:3d:bd:91:15:73:2c:22:26:
bf:3e:6e:3a:2a:71:38:3c:df:4f:49:18:4e:93:be:
66:28:19:7b:af:df:af:a8:69:c3:2d:b2:2b:2d:f0:
35:87:14:75:ee:fb:68:23:9d:93:dc:5d:dd:9d:f5:
e8:95:e9:1b:59:51:17:52:1c:c8:65:6d:93:b4:e3:
31:6f:70:d6:28:e5:62:83:a8:7f:7a:d9:3f:4b:b4:
6e:15:53:59:f9:15:9a:f6:59:b0:d1:5d:9f:88:1f:
c4:89:93:a0:e7:31:e4:ac:9c:08:24:8d:c1:d6:cb:
db:2b:f2:cc:c5:50:71:dd:1c:37:b0:48:82:74:1c:
e5:8d:8b:71:c8:73:d8:fe:56:6d:88:0d:28:a5:47:
cf:d0:ad:d5:e2:77:fa:48:45:a9:8f:89:b1:13:92:
3f:da:77:84:63:ed:28:77:c5:51:c6:92:da:74:a8:
d3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:82:14:1B:8D:FD:AD:4D:8B:B8:42:7D:41:88:61:62:63:38:98:50
X509v3 Authority Key Identifier:
keyid:AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3131362e36362e33362e302f32342d3234203d3e2034383132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.66.36.0/24
Signature Algorithm: sha256WithRSAEncryption
65:6e:47:27:0c:a8:a8:7a:55:53:5b:71:28:6e:5f:d7:5b:7b:
e4:92:9b:07:77:f0:08:f2:99:7c:02:3c:72:0b:f4:51:73:3b:
1c:f9:80:37:44:a9:15:53:ac:d8:9f:e6:e8:5e:b2:5e:62:8d:
b4:a4:9f:b7:72:38:2f:60:36:ea:62:3d:39:f8:7c:f9:0f:25:
35:67:6f:9f:7a:b5:95:c9:34:f9:34:79:09:47:15:d6:14:66:
18:8f:b6:e0:82:03:ba:da:90:f4:64:7f:87:a2:0a:c5:61:6b:
65:a2:48:93:71:84:99:d2:66:3d:38:95:76:58:28:57:86:94:
8c:08:61:07:da:6d:3c:ad:15:12:4e:ae:c0:aa:ed:5f:9f:9e:
67:9f:aa:1a:76:21:6c:e3:07:6e:bd:23:da:2c:06:2c:09:d2:
90:9c:fe:38:34:74:62:23:66:b8:d9:83:5f:8f:1d:a1:33:fa:
58:86:af:26:51:b5:5c:d0:21:6d:12:97:35:39:37:e8:b6:e9:
9b:75:18:03:59:d1:9e:57:70:cd:ae:e4:96:7a:1e:87:2b:14:
e0:94:6d:94:31:89:2f:c3:cd:90:79:11:22:82:ff:c4:f1:2f:
cd:12:48:a6:67:c4:5d:57:be:25:fb:c3:9a:d7:c1:16:b7:24:
ea:03:64:ee
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUF1nv0s3J5+NYPxiW5tiLZOHJ/WswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVCNjE0QzI0RkZDMkE2QkUwRTJEQjFDN0EzRTBBQUY2
NDFFNkE4QTAeFw0yNjA0MjIwNDQ4NTlaFw0yNzA0MjEwNDUzNTlaMDMxMTAvBgNV
BAMTKEJCODIxNDFCOERGREFENEQ4QkI4NDI3RDQxODg2MTYyNjMzODk4NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC597L1LiABhtfJWA4PI+gmTFLt
cyCrSD41VJ3wBKNNqvJXJ7kMDAixO4zITcp/rzqq4Z9IFQENgUpFKFi7672yjEHf
iObze1BpZdLxLr6UcG49vZEVcywiJr8+bjoqcTg8309JGE6TvmYoGXuv36+oacMt
sist8DWHFHXu+2gjnZPcXd2d9eiV6RtZURdSHMhlbZO04zFvcNYo5WKDqH962T9L
tG4VU1n5FZr2WbDRXZ+IH8SJk6DnMeSsnAgkjcHWy9sr8szFUHHdHDewSIJ0HOWN
i3HIc9j+Vm2IDSilR8/QrdXid/pIRamPibETkj/ad4Rj7Sh3xVHGktp0qNO7AgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUu4IUG439rU2LuEJ9QYhhYmM4mFAwHwYDVR0j
BBgwFoAUrrYUwk/8Kmvg4tscej4Kr2QeaoowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
OTE5MjU1MjM5NDg1MDMwNy8wL0FFQjYxNEMyNEZGQzJBNkJFMEUyREIxQzdBM0Uw
QUFGNjQxRTZBOEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUVCNjE0QzI0RkZDMkE2QkUwRTJEQjFDN0EzRTBBQUY2NDFFNkE4QS5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk5MTkyNTUyMzk0ODUwMzA3LzAvMzEzMTM2MmUzNjM2
MmUzMzM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODMxMzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAB0QiQwDQYJKoZIhvcNAQELBQADggEBAGVuRycMqKh6VVNbcShuX9dbe+SSmwd3
8AjymXwCPHIL9FFzOxz5gDdEqRVTrNif5uhesl5ijbSkn7dyOC9gNupiPTn4fPkP
JTVnb596tZXJNPk0eQlHFdYUZhiPtuCCA7rakPRkf4eiCsVha2WiSJNxhJnSZj04
lXZYKFeGlIwIYQfabTytFRJOrsCq7V+fnmefqhp2IWzjB269I9osBiwJ0pCc/jg0
dGIjZrjZg1+PHaEz+liGryZRtVzQIW0SlzU5N+i26Zt1GANZ0Z5XcM2u5JZ6Hocr
FOCUbZQxiS/DzZB5ESKC/8TxL80SSKZnxF1XviX7w5rXwRa3JOoDZO4=
-----END CERTIFICATE-----
Generated at Mon Apr 27 08:24:36 2026 by rpki-client