
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3232312e3133332e3233322e302f32332d3233203d3e2034383132.roa
File: 3232312e3133332e3233322e302f32332d3233203d3e2034383132.roa (raw, json)
Hash identifier: QqHw6UnjAmZaF6ZKGYjDcxL5eEwCirmJLq8wCW5ccfU=
Subject key identifier: C0:E0:30:CE:D0:10:92:10:80:7B:2D:4B:3D:64:6A:26:F1:AD:D1:42
Certificate issuer: /CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A
Certificate serial: 7C845CCAC343390611AEEEC13F632E5E60BE158C
Authority key identifier: AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3232312e3133332e3233322e302f32332d3233203d3e2034383132.roa
Signing time: Wed 22 Apr 2026 07:51:42 +0000
ROA not before: Wed 22 Apr 2026 07:46:42 +0000
ROA not after: Wed 21 Apr 2027 07:51:42 +0000
asID: 4812
IP address blocks: 221.133.232.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl
rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Apr 2026 23:41:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:84:5c:ca:c3:43:39:06:11:ae:ee:c1:3f:63:2e:5e:60:be:15:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A
Validity
Not Before: Apr 22 07:46:42 2026 GMT
Not After : Apr 21 07:51:42 2027 GMT
Subject: CN=C0E030CED0109210807B2D4B3D646A26F1ADD142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:bb:b6:12:45:62:0a:40:fa:97:e1:5c:ab:b9:
4e:88:6e:77:b8:44:00:eb:58:39:58:7b:be:19:3c:
53:3f:4a:45:b0:46:e7:53:59:8e:b9:7b:64:82:99:
e1:c8:03:17:4a:3a:49:11:40:1d:25:1a:fd:fb:66:
05:80:26:37:f6:18:05:9c:c1:31:d8:f9:23:59:c7:
94:b5:60:0b:f5:37:f7:de:d9:d0:e5:6c:1e:3f:7b:
68:9e:1b:45:92:8b:70:06:3a:41:0c:0c:08:62:ff:
65:ea:d1:ce:3d:c4:57:36:fb:79:0d:b5:11:d2:66:
69:0f:44:24:e7:95:d0:97:ca:71:27:d7:49:41:e6:
c5:ab:ea:03:e0:91:8f:98:b5:92:e6:a0:1e:2f:fc:
e8:68:4f:3f:96:9a:e1:81:60:61:01:73:1b:81:68:
07:6f:89:ce:1b:b2:45:10:4c:32:9a:39:3c:60:86:
03:b9:46:bb:57:a0:97:dd:2d:55:26:7b:d3:b0:e4:
fb:02:61:00:82:ec:7d:b4:cf:fd:99:28:ee:c5:a1:
2e:df:25:21:18:d6:17:87:4b:8d:d4:0e:47:bf:dd:
fe:f6:49:a2:39:65:53:6b:86:07:02:28:5a:5a:67:
30:65:26:68:f7:74:5e:a4:32:c1:1e:be:f4:4d:06:
e9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E0:30:CE:D0:10:92:10:80:7B:2D:4B:3D:64:6A:26:F1:AD:D1:42
X509v3 Authority Key Identifier:
keyid:AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3232312e3133332e3233322e302f32332d3233203d3e2034383132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
221.133.232.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:8a:db:e2:f2:44:bc:06:3f:7d:2e:b6:67:47:47:44:52:8f:
29:66:2a:8b:4b:74:73:03:fb:b2:1f:ed:82:48:8e:2f:1f:92:
c6:0f:fa:a4:7e:80:36:32:e3:60:7f:bd:46:0f:f5:b2:ef:bc:
83:f2:10:8e:ee:4f:09:79:73:04:24:8e:c3:7c:24:a3:9b:0c:
54:3e:51:07:0e:b5:57:14:32:d7:67:f9:da:30:e9:dc:43:c6:
22:1d:9e:b3:62:5f:64:6a:d6:77:ac:de:c5:c6:12:3a:7f:db:
c7:82:40:d2:c7:db:69:77:ed:f8:ea:1b:3b:55:04:1e:a0:d7:
16:12:16:62:df:6d:92:b6:24:85:5f:c4:cf:47:d8:01:ec:35:
84:cc:2a:88:e8:dc:6d:ca:80:2e:f2:42:da:31:96:8d:f7:cd:
ba:38:f7:c7:a1:f2:c5:c7:30:e0:e9:e0:27:06:93:69:00:9f:
5f:ec:7f:c7:b4:bc:5c:ce:bb:f6:64:15:c0:bd:05:11:a5:69:
6b:a8:7e:28:48:51:1b:10:b7:66:98:58:99:70:86:6f:a3:6f:
38:3a:83:f3:b7:8c:df:ef:96:f8:89:d5:35:76:42:d0:3a:aa:
e6:9d:88:59:67:e1:e6:3b:6a:30:14:7c:b8:cd:f9:96:84:a2:
ea:89:50:d5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 08:24:33 2026 by rpki-client