
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e3234312e302f32342d3234203d3e203130323132.roa
File: 3231382e39362e3234312e302f32342d3234203d3e203130323132.roa (raw, json)
Hash identifier: hXUOxx1KcgwPYsSY4RhopykzrMle+hdBfEvHZTrTpHE=
Subject key identifier: 92:D1:11:BB:A7:89:1D:5A:B2:82:38:7D:A8:01:0B:59:F1:1D:99:CE
Certificate issuer: /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Certificate serial: 47321D0AF43845B9B127BE9288F34A71AC74607B
Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e3234312e302f32342d3234203d3e203130323132.roa
Signing time: Mon 27 Apr 2026 02:41:50 +0000
ROA not before: Mon 27 Apr 2026 02:36:50 +0000
ROA not after: Mon 26 Apr 2027 02:41:50 +0000
asID: 10212
IP address blocks: 218.96.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 09:27:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:32:1d:0a:f4:38:45:b9:b1:27:be:92:88:f3:4a:71:ac:74:60:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Validity
Not Before: Apr 27 02:36:50 2026 GMT
Not After : Apr 26 02:41:50 2027 GMT
Subject: CN=92D111BBA7891D5AB282387DA8010B59F11D99CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:df:5a:8c:b9:30:91:fb:52:11:03:92:ff:5d:
66:e4:7d:c2:a9:29:4a:18:8f:22:41:e1:ee:5e:00:
9f:39:4e:2d:b5:1c:f7:35:96:6a:65:ba:b9:b9:e5:
24:9f:f0:b1:6b:d1:9a:e1:e8:d9:ad:3c:f1:8c:46:
2c:00:2a:c7:66:aa:1c:76:a1:41:8c:11:b8:ec:30:
6d:d2:3d:8b:3a:f0:67:7c:42:ab:1f:23:14:40:a8:
06:22:2c:b5:26:cd:6c:b0:7f:85:08:8c:f0:85:88:
1f:f8:55:64:c0:be:a7:41:f8:4a:a8:d7:e3:71:bc:
7e:d1:38:2c:bd:7e:6f:a5:91:1e:5a:16:67:13:70:
98:98:0c:52:a4:bc:aa:5d:e6:07:9e:bd:9a:0d:af:
57:28:ad:05:39:2a:f0:bd:87:98:47:6d:d6:de:8a:
61:b7:3a:30:89:79:de:36:e8:30:bd:99:f3:52:fb:
62:9d:24:84:f2:e3:db:3e:48:a9:f5:75:21:87:2c:
e0:3a:bc:9e:47:d7:79:3e:98:01:33:7b:0e:c8:18:
26:6f:21:02:3f:f8:e6:d6:ca:6f:44:3d:32:30:e3:
3f:c0:e5:04:20:6a:77:bf:55:28:08:3a:bf:78:d0:
6c:a8:7e:23:87:e9:45:6d:94:83:94:d9:d9:f8:9e:
b4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D1:11:BB:A7:89:1D:5A:B2:82:38:7D:A8:01:0B:59:F1:1D:99:CE
X509v3 Authority Key Identifier:
keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e3234312e302f32342d3234203d3e203130323132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.96.241.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:0d:13:f0:64:1f:d2:f1:d3:14:13:90:8a:46:5b:c3:94:ea:
d8:72:95:6a:da:ec:86:4f:6d:a4:47:0a:c5:e9:ec:c4:23:0e:
55:cd:78:e5:35:fa:e7:32:3b:58:6c:79:34:ec:03:df:df:4e:
fc:96:56:fc:5c:97:b2:52:90:b9:7e:85:1e:8f:d2:73:2a:ac:
75:a4:65:88:f8:1b:52:f0:86:75:fe:d6:04:64:f1:76:17:f4:
9d:74:ad:c2:20:14:3b:37:1a:12:11:28:8e:e3:b9:19:91:eb:
47:10:27:99:ab:c6:87:21:72:38:f2:23:3c:39:9f:99:6b:cc:
d7:23:70:3b:f4:d2:0a:4a:ef:c7:cd:7e:db:15:aa:f0:4e:21:
a8:f8:00:84:3e:de:10:cb:d0:90:ef:3d:bc:3e:b7:31:8f:8f:
66:b2:c6:e7:5e:ab:c9:ed:aa:4a:4a:26:bb:c0:bc:a1:4b:f2:
00:c0:7c:f7:a7:90:0d:64:44:71:af:7d:ab:6f:6c:21:c4:cc:
1c:59:56:a8:b4:2c:87:6c:c8:26:62:9e:89:9e:78:45:ce:ed:
fd:2b:a6:cd:68:70:2e:dd:b7:06:d0:7e:5d:bf:0c:56:f7:cc:
72:c3:84:4d:2c:a9:2d:69:ea:39:b4:51:85:86:b2:a9:40:9d:
33:5d:ec:b0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:02:11 2026 by rpki-client