
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3131362e36362e39382e302f32342d3234203d3e2034383132.roa
File: 3131362e36362e39382e302f32342d3234203d3e2034383132.roa (raw, json)
Hash identifier: 0WcQhOacv893u6+dnq1uiCvKvpO1wG8GhBFYPj0MqeM=
Subject key identifier: FF:29:6C:CA:96:01:0A:19:2C:63:5D:4E:8D:65:4B:36:DF:1D:16:C9
Certificate issuer: /CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A
Certificate serial: 2E67C2C7E22AC6CDCF2FD5947E7A432F2B5683C1
Authority key identifier: AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3131362e36362e39382e302f32342d3234203d3e2034383132.roa
Signing time: Wed 22 Apr 2026 07:51:41 +0000
ROA not before: Wed 22 Apr 2026 07:46:41 +0000
ROA not after: Wed 21 Apr 2027 07:51:41 +0000
asID: 4812
IP address blocks: 116.66.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl
rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Apr 2026 23:41:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:67:c2:c7:e2:2a:c6:cd:cf:2f:d5:94:7e:7a:43:2f:2b:56:83:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A
Validity
Not Before: Apr 22 07:46:41 2026 GMT
Not After : Apr 21 07:51:41 2027 GMT
Subject: CN=FF296CCA96010A192C635D4E8D654B36DF1D16C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4b:ab:a6:51:9c:c8:f7:6d:6d:35:43:4d:d7:
ab:3a:62:cc:34:c7:b5:53:b5:53:df:66:66:18:2f:
47:24:a5:a0:62:57:99:b8:c0:e0:65:3f:3f:83:be:
74:8a:d0:50:4b:bf:07:24:a2:65:34:a9:46:ab:da:
59:a8:5b:ff:03:46:c1:1a:66:90:ee:32:82:76:2c:
1a:43:22:7a:1c:70:8a:30:f5:76:49:07:f5:00:10:
8c:c9:da:c5:de:d9:fc:98:fb:0f:bd:4a:60:c1:f0:
f1:2c:01:1c:c9:50:32:42:ab:60:7f:cd:cd:8e:e1:
ba:71:44:58:14:00:41:7c:d5:22:ea:c5:6d:e7:c1:
8c:22:01:9e:3f:eb:9c:9a:cc:96:aa:f3:71:71:a7:
18:22:d7:94:6a:ae:c3:6f:86:ee:41:60:b7:d7:cf:
82:94:8e:8a:7c:fa:2c:6c:70:4f:e5:53:c5:b2:4a:
48:34:c5:b7:e4:2e:e1:c8:8b:f2:1d:7c:1a:28:2a:
87:7a:0d:2d:d2:cd:1a:6d:03:6b:d4:ad:b7:86:4c:
fe:f0:16:cb:88:2a:bc:16:fc:3c:fa:35:b9:2f:62:
3c:76:3f:d7:a5:43:1e:c8:c2:ba:b2:60:79:ba:68:
f8:b2:1b:b1:6a:f4:c2:11:5a:fb:5a:da:fa:10:30:
bc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:29:6C:CA:96:01:0A:19:2C:63:5D:4E:8D:65:4B:36:DF:1D:16:C9
X509v3 Authority Key Identifier:
keyid:AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3131362e36362e39382e302f32342d3234203d3e2034383132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.66.98.0/24
Signature Algorithm: sha256WithRSAEncryption
05:35:fa:27:b8:fb:23:4b:df:d7:72:02:46:98:c0:30:7d:67:
71:3a:31:9d:33:a7:ee:72:e7:e0:1a:80:67:ec:ab:97:cc:18:
6c:60:90:d0:99:16:a8:ef:f6:f8:f3:0a:0d:ea:5a:ea:e9:eb:
9e:30:69:41:c8:6a:52:5d:ca:52:60:df:85:2b:39:06:88:d5:
15:2c:fd:66:57:6a:2e:cd:cf:e6:b8:2b:f6:09:38:58:24:dc:
83:16:ce:f5:b7:6b:74:0c:e8:94:61:42:0c:0c:0a:b2:8f:69:
bc:83:5c:ed:6b:49:8c:4f:19:7a:df:39:37:2a:84:65:05:a5:
90:a5:fa:bd:92:0c:80:28:fa:82:ca:91:a5:e1:e8:91:d6:46:
a0:58:98:04:f6:6e:4b:5a:11:a5:d4:45:00:05:20:88:6e:91:
fe:0a:77:b6:d9:ba:91:b6:f4:c4:bf:91:a5:ab:66:4a:0a:cb:
df:1c:38:c6:41:5d:c4:f8:3b:ef:cb:e4:97:aa:da:68:be:e4:
f9:50:46:92:cd:5b:ac:cf:7e:40:15:70:ae:ea:bc:39:49:43:
51:68:bd:34:47:92:a9:a0:bb:09:7f:18:13:d4:87:2c:67:c2:
03:32:12:28:1e:20:83:89:8b:29:a7:a4:4b:d7:48:a5:0c:50:
50:86:d2:4e
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIULmfCx+Iqxs3PL9WUfnpDLytWg8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVCNjE0QzI0RkZDMkE2QkUwRTJEQjFDN0EzRTBBQUY2
NDFFNkE4QTAeFw0yNjA0MjIwNzQ2NDFaFw0yNzA0MjEwNzUxNDFaMDMxMTAvBgNV
BAMTKEZGMjk2Q0NBOTYwMTBBMTkyQzYzNUQ0RThENjU0QjM2REYxRDE2QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVS6umUZzI921tNUNN16s6Ysw0
x7VTtVPfZmYYL0ckpaBiV5m4wOBlPz+DvnSK0FBLvwckomU0qUar2lmoW/8DRsEa
ZpDuMoJ2LBpDInoccIow9XZJB/UAEIzJ2sXe2fyY+w+9SmDB8PEsARzJUDJCq2B/
zc2O4bpxRFgUAEF81SLqxW3nwYwiAZ4/65yazJaq83Fxpxgi15RqrsNvhu5BYLfX
z4KUjop8+ixscE/lU8WySkg0xbfkLuHIi/IdfBooKod6DS3SzRptA2vUrbeGTP7w
FsuIKrwW/Dz6NbkvYjx2P9elQx7IwrqyYHm6aPiyG7Fq9MIRWvta2voQMLxhAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQU/ylsypYBChksY11OjWVLNt8dFskwHwYDVR0j
BBgwFoAUrrYUwk/8Kmvg4tscej4Kr2QeaoowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
OTE5MjU1MjM5NDg1MDMwNy8wL0FFQjYxNEMyNEZGQzJBNkJFMEUyREIxQzdBM0Uw
QUFGNjQxRTZBOEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUVCNjE0QzI0RkZDMkE2QkUwRTJEQjFDN0EzRTBBQUY2NDFFNkE4QS5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk5MTkyNTUyMzk0ODUwMzA3LzAvMzEzMTM2MmUzNjM2
MmUzOTM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODMxMzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAB0QmIwDQYJKoZIhvcNAQELBQADggEBAAU1+ie4+yNL39dyAkaYwDB9Z3E6MZ0z
p+5y5+AagGfsq5fMGGxgkNCZFqjv9vjzCg3qWurp654waUHIalJdylJg34UrOQaI
1RUs/WZXai7Nz+a4K/YJOFgk3IMWzvW3a3QM6JRhQgwMCrKPabyDXO1rSYxPGXrf
OTcqhGUFpZCl+r2SDIAo+oLKkaXh6JHWRqBYmAT2bktaEaXURQAFIIhukf4Kd7bZ
upG29MS/kaWrZkoKy98cOMZBXcT4O+/L5Jeq2mi+5PlQRpLNW6zPfkAVcK7qvDlJ
Q1FovTRHkqmguwl/GBPUhyxnwgMyEigeIIOJiymnpEvXSKUMUFCG0k4=
-----END CERTIFICATE-----
Generated at Mon Apr 27 08:24:35 2026 by rpki-client