
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3232312e3133332e3233302e302f32332d3233203d3e2034383132.roa
File: 3232312e3133332e3233302e302f32332d3233203d3e2034383132.roa (raw, json)
Hash identifier: d98CvU56OAX7rtIY8aOAQjNFJ5nL1C3K1MePIYbNFnA=
Subject key identifier: 62:8F:8F:B6:34:C1:8C:79:38:30:E9:A2:86:FC:11:84:4D:64:65:1C
Certificate issuer: /CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A
Certificate serial: 24498238D31A1CC558CFFB2D42A6D439A212FEB1
Authority key identifier: AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3232312e3133332e3233302e302f32332d3233203d3e2034383132.roa
Signing time: Wed 22 Apr 2026 07:51:42 +0000
ROA not before: Wed 22 Apr 2026 07:46:42 +0000
ROA not after: Wed 21 Apr 2027 07:51:42 +0000
asID: 4812
IP address blocks: 221.133.230.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl
rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Apr 2026 23:41:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:49:82:38:d3:1a:1c:c5:58:cf:fb:2d:42:a6:d4:39:a2:12:fe:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A
Validity
Not Before: Apr 22 07:46:42 2026 GMT
Not After : Apr 21 07:51:42 2027 GMT
Subject: CN=628F8FB634C18C793830E9A286FC11844D64651C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a2:ed:73:1a:e6:b0:bc:42:79:aa:4e:4c:3c:
ce:ef:60:35:ce:b4:60:a3:36:f9:54:c3:fc:0c:f0:
71:04:74:90:5e:19:0f:9e:44:7c:5d:f7:88:5f:a1:
a8:27:f5:48:bd:96:5f:0f:5d:5e:04:14:04:9a:ea:
9a:a1:98:a5:21:ed:4e:ad:f2:90:a0:ff:5b:93:5b:
c1:11:b2:eb:1f:48:dc:eb:15:8e:43:7d:d8:76:49:
24:42:8f:47:d4:6e:08:3a:12:cb:2e:f6:8f:23:36:
46:86:5a:0f:fc:ca:89:49:2e:e4:41:61:76:2f:b4:
b2:e3:4b:4d:e4:cf:35:58:53:57:aa:ed:cc:59:c7:
91:f8:50:e6:e2:c5:ba:91:f4:f8:e7:a5:93:6e:f1:
ac:92:ca:9f:73:0d:aa:0a:aa:ad:17:c6:14:2d:3b:
06:c5:4b:4b:c8:51:90:93:2d:17:42:90:4c:24:b0:
82:a0:f5:75:ef:c8:ee:19:e9:3d:58:af:ac:f5:90:
2b:65:1d:79:6c:9a:ec:24:68:f4:a8:74:a6:d5:62:
5f:0e:4a:df:ea:3a:b9:bb:e9:29:0b:3e:92:f2:80:
10:48:89:35:45:70:91:55:c1:06:c7:56:ec:b6:bc:
0b:f9:8f:c8:f7:ab:bc:07:15:98:d3:fc:ad:cd:8a:
ab:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8F:8F:B6:34:C1:8C:79:38:30:E9:A2:86:FC:11:84:4D:64:65:1C
X509v3 Authority Key Identifier:
keyid:AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3232312e3133332e3233302e302f32332d3233203d3e2034383132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
221.133.230.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:b7:34:b2:5b:c9:60:40:4f:00:31:cc:4b:49:85:49:a1:ce:
86:76:01:3f:69:0d:b7:eb:f5:dd:4d:f8:67:a1:2d:e7:ec:21:
89:f0:f9:24:ce:4e:4f:ff:20:44:db:d8:a0:f9:d1:e9:65:3d:
ee:ad:89:87:10:99:e4:5a:ea:da:be:39:9d:43:71:9f:d9:c8:
87:e8:39:c0:07:36:33:41:67:a6:95:a3:6f:da:6b:49:74:f9:
18:cf:b2:10:7c:cc:87:1d:89:92:69:02:d3:e6:43:07:cf:48:
10:a9:21:93:4e:34:56:d0:28:8b:a3:76:65:66:4e:59:53:21:
de:c8:63:30:90:b7:7f:cd:a6:23:aa:45:3c:15:ac:09:23:60:
c2:f3:da:16:08:25:de:40:c2:45:34:1f:f7:09:18:a4:7c:7b:
97:e9:8d:49:05:39:2c:64:c5:1d:5f:a1:96:80:7e:95:64:5f:
06:69:09:5b:b6:cc:35:66:9a:ec:de:88:dd:40:b1:6e:68:e2:
90:4c:76:44:6e:5c:5a:55:66:79:e8:c1:32:95:e1:7d:56:b6:
44:ca:e3:74:79:7f:cd:a9:16:8a:1b:b4:f2:8c:a0:ca:49:36:
c4:77:50:8a:b1:51:84:39:ab:c3:c3:40:d0:7e:95:29:a1:b5:
12:97:a9:7f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 08:24:33 2026 by rpki-client