
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3232312e3133332e3233352e302f32342d3234203d3e2034383132.roa
File: 3232312e3133332e3233352e302f32342d3234203d3e2034383132.roa (raw, json)
Hash identifier: a2VfsMsZhsvGAUUY1Ndu97RvKL9qo+FoR0ehHhF29YY=
Subject key identifier: E8:7E:1F:03:47:3E:C5:3C:B3:5F:CA:59:33:1E:54:09:89:46:5B:3E
Certificate issuer: /CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A
Certificate serial: 1AD19C50C75D8ECEB84FD519D998C5168543CFB7
Authority key identifier: AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3232312e3133332e3233352e302f32342d3234203d3e2034383132.roa
Signing time: Wed 22 Apr 2026 07:51:41 +0000
ROA not before: Wed 22 Apr 2026 07:46:41 +0000
ROA not after: Wed 21 Apr 2027 07:51:41 +0000
asID: 4812
IP address blocks: 221.133.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl
rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Apr 2026 23:41:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:d1:9c:50:c7:5d:8e:ce:b8:4f:d5:19:d9:98:c5:16:85:43:cf:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A
Validity
Not Before: Apr 22 07:46:41 2026 GMT
Not After : Apr 21 07:51:41 2027 GMT
Subject: CN=E87E1F03473EC53CB35FCA59331E540989465B3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f5:a1:f4:fa:6b:5b:14:9f:f3:3d:9d:26:47:
0b:42:76:0b:60:2d:b8:24:b8:cf:b6:b9:82:21:a8:
0c:ab:79:dc:07:ec:6c:82:fa:d8:57:9c:94:c7:a0:
a6:8b:91:70:f4:5a:25:67:09:a6:61:a9:d6:49:47:
7b:a9:60:f4:c5:74:7c:10:1c:40:c9:5f:07:b6:4a:
5f:27:82:06:9f:38:ac:55:1b:0b:cb:74:3a:f0:1f:
5e:17:cb:48:9d:03:43:38:d4:35:0b:7c:71:f0:73:
bd:b9:0a:d1:79:54:47:4f:26:73:b8:c1:f7:46:e0:
ea:fb:fe:c4:50:bd:36:b6:40:d4:5d:1f:5b:c8:44:
a1:ba:b0:e3:25:33:a7:26:b2:f5:6a:e6:b6:b0:2b:
27:75:d3:60:ca:e3:94:66:fe:3b:9f:8f:2c:f2:ec:
af:b3:9b:1b:70:be:fd:d3:99:6d:21:da:1d:9f:81:
22:d2:4a:89:92:76:65:5e:6f:7e:4d:07:2a:2f:c9:
ba:62:9f:69:4e:53:6d:2d:ac:5d:30:00:d0:0e:6c:
de:3e:b5:7e:4a:89:ee:de:f2:ba:1e:db:34:79:d5:
6b:6b:0a:db:75:8d:5a:ec:7a:2b:b6:79:af:b8:c8:
52:61:87:bf:d9:a2:3b:be:3f:3b:8b:97:41:ab:aa:
d1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7E:1F:03:47:3E:C5:3C:B3:5F:CA:59:33:1E:54:09:89:46:5B:3E
X509v3 Authority Key Identifier:
keyid:AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3232312e3133332e3233352e302f32342d3234203d3e2034383132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
221.133.235.0/24
Signature Algorithm: sha256WithRSAEncryption
42:d9:94:5c:8a:0b:a3:74:7b:c3:26:74:65:86:88:2d:18:fa:
e8:b4:b5:d7:55:a7:68:e9:6b:f0:0b:b7:13:6f:f8:dc:18:e4:
46:5b:7a:d1:a6:a8:dc:54:04:69:c2:f9:96:f0:a8:06:b3:c7:
e9:86:63:73:6a:9a:a8:b7:09:82:6c:7b:de:23:5e:01:ae:40:
5c:9b:55:3f:06:23:35:af:fe:14:97:ee:74:38:8e:6c:3a:9b:
23:ff:80:3c:5c:28:74:73:af:a4:45:26:aa:d9:e8:af:35:db:
59:b8:09:96:f5:00:17:77:90:dd:7f:ab:8e:56:7a:0e:65:87:
59:20:cc:d8:a7:92:4d:fd:2b:49:fd:d2:e1:cb:7b:a9:b7:1e:
36:47:a4:40:48:cf:29:91:3c:5e:e8:f6:c3:92:58:05:62:0d:
4b:53:00:64:51:ef:38:7e:fe:41:38:4b:09:f4:5c:70:2d:07:
82:63:6e:4c:85:b8:e2:74:9e:d0:c4:92:89:c8:bc:d8:0e:7e:
e8:54:53:4d:fe:b1:8d:75:2a:a0:a0:5e:38:e6:a9:66:9c:48:
65:1a:7c:a3:c9:7a:e3:98:b2:a5:55:04:82:24:64:6e:d8:e5:
a3:cf:fc:2c:a5:3f:9b:9d:8c:2f:f2:33:a3:6e:6f:a4:95:12:
0a:03:4b:ed
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 08:25:07 2026 by rpki-client