
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231302e352e31362e302f32342d3234203d3e203130323132.roa
File: 3231302e352e31362e302f32342d3234203d3e203130323132.roa (raw, json)
Hash identifier: GXUOiL5Umn+5yRoDev3i/P7TShybk3wwG5r00IRy5w0=
Subject key identifier: F0:AC:71:61:79:75:AB:D4:97:51:CF:6A:D4:DA:B7:4A:76:FD:72:17
Certificate issuer: /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Certificate serial: 78593567ED3D1090AD68047CD0D6107A2B1B82E7
Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231302e352e31362e302f32342d3234203d3e203130323132.roa
Signing time: Mon 27 Apr 2026 08:55:31 +0000
ROA not before: Mon 27 Apr 2026 08:50:31 +0000
ROA not after: Mon 26 Apr 2027 08:55:31 +0000
asID: 10212
IP address blocks: 210.5.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 09:27:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:59:35:67:ed:3d:10:90:ad:68:04:7c:d0:d6:10:7a:2b:1b:82:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Validity
Not Before: Apr 27 08:50:31 2026 GMT
Not After : Apr 26 08:55:31 2027 GMT
Subject: CN=F0AC71617975ABD49751CF6AD4DAB74A76FD7217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c1:a6:e7:5b:3d:4c:5b:98:1e:53:04:8a:89:
a0:e1:ea:d6:f5:60:1a:00:dc:68:71:cf:d7:d4:84:
73:d6:7c:c4:b6:d6:3b:a3:80:e8:af:1d:b9:6e:90:
9e:4e:13:f7:55:c4:29:01:7d:a5:90:55:4f:24:6c:
04:71:ee:10:35:a2:d9:16:c3:a5:e5:93:0d:a0:30:
e0:e5:ba:49:c7:06:0c:44:03:4d:fd:15:29:01:4b:
8f:41:e8:3f:38:bf:a5:ad:e9:70:eb:16:ea:ec:13:
a5:cb:79:53:1e:83:0b:35:28:a0:23:1f:44:f9:83:
7b:b7:e5:70:7f:55:45:13:49:17:de:5e:1e:b8:9e:
23:ce:8a:de:4e:c2:56:cc:42:d7:c0:f7:0b:a5:31:
31:df:6b:1b:0d:b6:99:aa:49:7f:a7:86:9f:9e:1f:
72:d2:99:4b:0c:9e:85:61:ee:93:4e:f6:82:75:e2:
2f:e1:c3:ea:bd:91:23:95:01:48:5a:bb:72:da:62:
8f:11:9b:6a:6b:fd:b8:61:9b:32:ca:23:64:e5:17:
b0:72:ff:82:27:57:ef:ea:11:fb:bf:a4:49:13:cd:
bd:aa:a1:d2:c7:f5:95:6d:06:b3:df:16:18:e3:8c:
1c:1d:f3:bf:f6:42:52:d8:59:57:fb:1c:b8:7d:71:
7e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AC:71:61:79:75:AB:D4:97:51:CF:6A:D4:DA:B7:4A:76:FD:72:17
X509v3 Authority Key Identifier:
keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231302e352e31362e302f32342d3234203d3e203130323132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.5.16.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:90:b1:74:e8:f2:94:72:54:9f:3a:e4:5e:14:9e:9c:9f:2f:
7a:dd:ad:76:35:56:73:ce:66:ed:81:b8:42:29:bd:40:f1:6b:
7a:7f:28:2c:01:ce:26:73:5c:dc:92:26:4b:06:cd:17:3f:c5:
b1:57:d6:b5:f7:b6:1a:ac:c0:ed:3f:dd:b6:0e:c0:40:d5:94:
df:cb:45:8b:32:96:59:e7:cb:f0:01:a1:a3:84:c5:42:7a:26:
45:a2:59:ef:5a:2a:45:c0:3e:01:37:b9:29:14:6b:8c:2b:ed:
a8:70:a7:d6:81:1a:ce:35:9b:8a:a3:18:50:a0:c5:ea:59:4f:
02:71:de:c7:a2:3a:af:43:e3:8f:ed:b5:38:bf:e7:56:61:fe:
9c:49:93:2d:19:65:3b:71:26:8e:b4:26:ca:b2:13:83:4c:c8:
d1:36:ed:ba:18:90:c0:cc:43:a3:47:64:b2:8a:7d:fb:5c:5a:
da:22:6b:80:d7:58:41:45:ef:70:12:ce:fa:3b:a7:a1:e2:14:
9b:35:82:1d:1f:9b:6a:5a:ae:20:4c:b4:83:6e:18:d4:47:fc:
bf:7c:22:70:a7:b9:74:31:f9:cb:b5:74:eb:12:b5:2d:f8:b5:
e9:05:ac:a6:9e:23:99:f5:7e:d6:8f:7b:e5:6d:e6:9d:c5:5c:
df:22:a2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:23:10 2026 by rpki-client