
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3131362e36362e39362e302f32302d3230203d3e2030.roa
File: 3131362e36362e39362e302f32302d3230203d3e2030.roa (raw, json)
Hash identifier: MqrW8ck2y9ByUyAqAmNpkYC3kLSHt1wbYRwpKGGG0Jo=
Subject key identifier: EF:D9:33:CE:69:8A:40:82:C4:A7:2C:F9:8E:A5:EF:63:81:B3:6F:32
Certificate issuer: /CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A
Certificate serial: 4F3EE5C6DC608C7568B4374E79D8027E4DB584B7
Authority key identifier: AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3131362e36362e39362e302f32302d3230203d3e2030.roa
Signing time: Wed 22 Apr 2026 07:51:41 +0000
ROA not before: Wed 22 Apr 2026 07:46:41 +0000
ROA not after: Wed 21 Apr 2027 07:51:41 +0000
asID: 0
IP address blocks: 116.66.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl
rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Apr 2026 23:41:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:3e:e5:c6:dc:60:8c:75:68:b4:37:4e:79:d8:02:7e:4d:b5:84:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A
Validity
Not Before: Apr 22 07:46:41 2026 GMT
Not After : Apr 21 07:51:41 2027 GMT
Subject: CN=EFD933CE698A4082C4A72CF98EA5EF6381B36F32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b1:7c:06:54:d6:ac:c3:f5:71:8a:68:58:57:
a0:9c:e6:d4:e4:44:56:87:ef:2b:7b:40:44:83:6d:
ab:a8:06:44:e6:bb:cd:51:72:48:02:02:18:5f:80:
44:ca:65:9c:3f:a0:64:cd:e8:1e:4a:05:8b:68:50:
19:cd:91:1f:8f:d3:02:6e:e1:1b:a1:fd:2d:f6:62:
7d:65:ca:74:29:23:98:7f:3d:35:0b:40:74:51:4e:
f1:76:20:44:d2:9d:d2:40:ac:9a:bc:3c:80:44:ae:
e1:9e:eb:cb:1b:ea:09:71:56:ca:30:96:12:3d:95:
d9:28:39:ac:db:ab:cd:e2:6a:e7:6b:b6:d0:63:2b:
67:33:01:e1:d4:e2:64:02:d4:10:c4:fd:d8:a2:c7:
be:66:01:13:c2:c3:f6:d8:6c:32:cb:c8:91:8c:eb:
7e:f3:22:b2:23:4e:5b:d3:cd:4f:06:b9:45:5f:e4:
5a:69:7b:ee:ce:ff:f2:58:f7:ed:47:eb:4f:bd:1f:
84:67:dc:0e:22:af:27:aa:2d:de:59:2c:88:4f:96:
d9:7d:60:90:6c:76:32:89:f5:40:ea:51:23:4b:6f:
3a:e1:42:14:72:03:1b:70:b0:4b:c8:45:99:33:15:
72:54:82:a4:75:05:f1:e4:f7:3d:f7:b1:e1:82:0f:
12:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D9:33:CE:69:8A:40:82:C4:A7:2C:F9:8E:A5:EF:63:81:B3:6F:32
X509v3 Authority Key Identifier:
keyid:AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3131362e36362e39362e302f32302d3230203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.66.96.0/20
Signature Algorithm: sha256WithRSAEncryption
9a:54:2d:f2:e7:ba:36:8c:1f:ae:03:43:a7:da:e2:f9:8f:ce:
17:e8:31:f3:d1:fd:eb:16:30:a6:86:10:5b:d3:4a:7b:f6:5e:
05:a2:d7:39:c2:aa:c7:d1:8a:3f:f8:dd:61:67:cf:a5:5a:37:
53:e9:7b:58:b8:dc:32:c6:92:20:d4:c5:ad:82:8d:ee:79:0b:
ef:78:0b:bc:58:b4:81:9b:68:2f:01:75:3e:5c:4e:25:11:ac:
d7:15:23:4e:51:5d:72:5f:f5:ae:0f:18:6a:0b:81:a2:9c:1d:
a8:4d:28:5f:52:c3:51:42:c6:d7:fd:7f:da:bc:8b:39:73:6a:
47:1d:ed:0e:7c:af:00:33:79:f6:2e:1d:c2:e8:a0:6f:4b:51:
69:a4:1a:22:ea:ed:d3:c3:48:2b:ad:5b:d2:4f:76:52:a8:f8:
a1:aa:2f:1c:e7:46:65:26:6d:9b:1c:b8:83:8a:4c:09:4f:5b:
18:5f:06:1a:3a:a0:44:be:5b:8d:2e:5a:c7:5e:21:39:96:4b:
4d:6a:98:90:18:aa:0b:2c:2e:37:9c:e2:f8:53:71:df:87:88:
79:b4:e9:21:2a:3e:2e:80:56:88:27:df:dd:42:c5:3c:fe:95:
fc:67:65:b6:67:03:ba:ef:d9:f7:46:8e:b9:50:97:37:5f:5f:
e2:2f:43:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:59:26 2026 by rpki-client