
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e37302e302f32342d3234203d3e203137363233.roa
File: 3231382e39362e37302e302f32342d3234203d3e203137363233.roa (raw, json)
Hash identifier: 8muhJgpVsKSTxjGYiDlzSfH7NaK2/b86WuqcYAVOdXo=
Subject key identifier: 28:EB:0E:BD:F1:87:1D:11:3F:64:DB:00:6B:31:6B:88:6F:DF:4D:70
Certificate issuer: /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Certificate serial: 057F4FF9298D9591F9DD03B47F18BEB888734319
Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e37302e302f32342d3234203d3e203137363233.roa
Signing time: Thu 20 Aug 2026 07:51:41 +0000
ROA not before: Thu 20 Aug 2026 07:46:41 +0000
ROA not after: Thu 19 Aug 2027 07:51:41 +0000
asID: 17623
IP address blocks: 218.96.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 15:20:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:7f:4f:f9:29:8d:95:91:f9:dd:03:b4:7f:18:be:b8:88:73:43:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Validity
Not Before: Aug 20 07:46:41 2026 GMT
Not After : Aug 19 07:51:41 2027 GMT
Subject: CN=28EB0EBDF1871D113F64DB006B316B886FDF4D70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:47:c1:d2:af:c1:9d:ab:a9:9f:e3:b8:57:c1:
d5:bf:29:b7:ce:03:4a:3c:e0:88:34:c5:45:0e:f3:
93:02:59:f8:0c:41:9c:50:08:03:05:ef:05:62:ae:
8c:15:a4:a8:ea:5a:79:1f:17:20:7b:5b:27:1a:99:
a8:52:57:b5:9b:ab:33:39:bf:69:73:d2:bf:98:a5:
50:db:54:7b:34:08:2e:31:ed:51:af:da:7a:97:50:
05:c5:58:04:e8:2a:85:c7:87:2c:67:56:7c:b7:ae:
68:27:4c:d7:5b:8e:ef:a0:95:bd:a2:b5:2d:55:b2:
7f:67:22:61:56:60:ff:36:1c:02:60:52:69:61:f9:
14:ed:55:5c:83:2a:a6:13:3f:36:b0:4e:68:db:ee:
0c:60:d7:de:16:3d:05:a3:d1:04:bd:62:08:f8:d9:
45:a8:03:08:e9:9b:56:a0:7e:65:e0:3c:86:54:c6:
bf:14:f2:80:4d:de:43:88:ce:74:d9:d4:7d:ee:95:
2d:74:7c:85:08:49:e6:30:ff:b2:19:56:1e:37:da:
f2:1a:17:07:86:97:25:90:ac:34:d1:b9:6f:13:02:
d1:c5:a3:4a:ee:03:59:9a:c2:e6:fc:a7:07:64:1e:
62:b5:d3:3f:9a:69:4a:1c:a6:48:d6:33:ee:a5:4f:
67:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EB:0E:BD:F1:87:1D:11:3F:64:DB:00:6B:31:6B:88:6F:DF:4D:70
X509v3 Authority Key Identifier:
keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e37302e302f32342d3234203d3e203137363233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.96.70.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:57:ba:80:52:75:49:f6:e3:77:17:5e:1f:59:c7:10:ee:b2:
05:b9:8d:f7:3e:9c:c0:6a:e5:44:1b:c4:04:da:fd:82:84:97:
5b:02:f4:2a:46:db:0a:d3:6f:33:17:ee:81:66:07:e9:eb:f7:
b6:da:f7:9d:46:c3:13:f4:27:c4:5b:75:20:a7:8b:61:b4:a5:
c2:d3:5f:d1:73:a4:a5:e0:da:7d:15:db:01:96:a3:e2:51:dd:
96:95:17:d1:d6:38:04:31:3f:92:8c:68:14:84:2d:c0:73:36:
1d:e1:f5:9e:9f:69:0a:8f:4f:6b:ef:75:ae:8b:8b:74:50:df:
ee:14:44:24:ae:06:95:30:75:f3:fc:14:e2:24:59:55:61:20:
b7:78:e1:b8:d9:82:6a:75:5c:19:44:5c:f6:60:ab:59:f5:a4:
bc:24:3c:4d:4f:4a:74:00:be:5e:81:6d:61:1e:ad:c3:d4:9c:
3d:f9:a9:7d:6b:ba:b0:67:0a:36:c8:a8:94:ff:a3:f7:4f:2f:
8f:64:90:08:95:0d:ab:13:23:fe:d3:84:e4:c3:33:d5:d2:35:
39:bb:aa:48:90:ae:f5:7f:aa:45:a1:75:0c:a9:10:ca:c6:2f:
d8:bb:7d:97:17:8a:72:eb:db:06:38:18:56:f1:04:f6:ef:66:
e7:10:01:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:46:58 2026 by rpki-client