
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e3234342e302f32342d3234203d3e203130323132.roa
File: 3231382e39362e3234342e302f32342d3234203d3e203130323132.roa (raw, json)
Hash identifier: Nd/l5Ot82li0qNAAXGDXo1p5hxh0AwuOnrevLjCIpMI=
Subject key identifier: 26:15:45:39:2F:42:6B:66:09:41:7E:D0:CE:AE:EB:E9:2C:50:E2:25
Certificate issuer: /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Certificate serial: 28C88D55C4B310C5F13A08502D435C6D039871C8
Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e3234342e302f32342d3234203d3e203130323132.roa
Signing time: Mon 27 Apr 2026 02:41:50 +0000
ROA not before: Mon 27 Apr 2026 02:36:50 +0000
ROA not after: Mon 26 Apr 2027 02:41:50 +0000
asID: 10212
IP address blocks: 218.96.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 09:27:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:c8:8d:55:c4:b3:10:c5:f1:3a:08:50:2d:43:5c:6d:03:98:71:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Validity
Not Before: Apr 27 02:36:50 2026 GMT
Not After : Apr 26 02:41:50 2027 GMT
Subject: CN=261545392F426B6609417ED0CEAEEBE92C50E225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c6:d4:47:d3:3d:6f:3f:da:cc:83:31:85:88:
54:3c:9c:a9:89:79:df:c5:41:ba:cf:fd:d7:31:3d:
ce:61:2c:55:1e:9e:82:61:cf:9e:59:dc:f8:00:52:
36:31:ed:39:f4:8b:66:7b:6a:20:f1:23:2b:20:aa:
38:ed:bc:da:c7:00:d0:b7:0c:f0:7b:07:25:25:e9:
a3:4d:6d:2a:59:7e:c1:f8:1f:c3:65:a2:6f:f9:c7:
8f:9f:4e:72:96:9f:71:7e:1a:0b:1f:a2:57:3d:47:
1a:38:27:df:86:7f:f6:69:33:45:0d:f8:99:20:bc:
a6:7f:72:c9:9e:e8:91:17:6c:a0:ab:6a:32:15:d7:
b2:8b:8e:00:48:be:bf:db:cb:aa:a8:fb:a0:43:c3:
3f:cd:6f:98:90:ea:2c:fc:15:d4:3f:29:59:ea:a3:
62:0d:12:39:2b:10:8c:37:9d:0a:4e:24:a2:a0:ec:
44:b0:76:40:d7:c0:58:c2:e7:58:32:fb:65:92:62:
33:18:0e:3b:e3:f7:9a:17:17:6c:aa:ad:93:a8:48:
a3:96:b3:8a:5c:bf:fa:a1:8e:05:12:f0:8f:fb:b2:
9c:aa:d0:1f:ca:6a:4f:00:cc:84:02:6f:b5:45:00:
58:33:04:44:da:9d:b9:05:af:8a:89:08:4e:e3:42:
cc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:15:45:39:2F:42:6B:66:09:41:7E:D0:CE:AE:EB:E9:2C:50:E2:25
X509v3 Authority Key Identifier:
keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e3234342e302f32342d3234203d3e203130323132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.96.244.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:c2:33:54:cf:c5:ed:29:f6:75:8c:23:24:5c:7d:2d:01:7c:
33:9a:69:cc:c3:8f:1b:86:c3:a3:48:c7:c9:16:11:f7:53:ae:
29:69:b2:4d:dc:f9:87:e0:66:90:e1:59:68:c5:22:f9:b2:95:
4d:2e:d0:d3:5b:01:e7:6d:15:23:88:70:a6:ce:81:ed:64:44:
0b:6d:f7:9b:0b:0d:65:6b:38:93:4b:cd:37:ef:c5:48:13:53:
5b:8c:a7:38:72:4c:99:59:a0:42:d8:ac:40:f5:bc:bb:c9:de:
76:27:2d:ad:3d:44:a1:2d:df:c5:96:91:9e:84:ec:5d:6d:af:
4d:f0:61:f6:7c:61:6d:d1:69:7e:59:f4:6e:30:5a:d2:3a:30:
8b:bf:37:64:35:dc:2d:76:d0:37:95:51:c9:d9:7b:6e:40:25:
9d:39:ac:fa:18:0c:22:74:69:f9:75:cd:fc:c9:b6:68:5e:d1:
d0:be:5b:a0:52:12:da:b6:6e:81:ab:4e:52:49:23:f3:67:f2:
83:ae:8c:2b:90:25:60:bc:6f:a1:a1:87:59:04:21:fb:ab:8d:
bf:1d:ed:54:ca:a4:b3:f6:f5:5e:75:4e:00:6f:fb:c7:04:26:
bd:30:30:6e:12:b8:07:9b:6a:52:1e:13:09:33:0c:a6:aa:ce:
50:b3:68:66
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:02:10 2026 by rpki-client