
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e37312e302f32342d3234203d3e203130323132.roa
File: 3231382e39362e37312e302f32342d3234203d3e203130323132.roa (raw, json)
Hash identifier: 91zSHy2GJJEvKtRXcbt3ViJMMUW2C0Xfrmbd3Ap8a50=
Subject key identifier: 9D:83:98:0A:DB:A5:57:08:09:7F:48:31:46:7C:CD:76:E2:08:94:3F
Certificate issuer: /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Certificate serial: 489B5F16A7B088F6CB7DB2D68479548FD37E94EF
Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e37312e302f32342d3234203d3e203130323132.roa
Signing time: Tue 27 Oct 2026 07:45:49 +0000
ROA not before: Tue 27 Oct 2026 07:40:49 +0000
ROA not after: Tue 26 Oct 2027 07:45:49 +0000
asID: 10212
IP address blocks: 218.96.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 00:06:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:9b:5f:16:a7:b0:88:f6:cb:7d:b2:d6:84:79:54:8f:d3:7e:94:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Validity
Not Before: Oct 27 07:40:49 2026 GMT
Not After : Oct 26 07:45:49 2027 GMT
Subject: CN=9D83980ADBA55708097F4831467CCD76E208943F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6b:37:27:9a:da:af:92:fc:ca:37:fa:3b:fa:
70:12:73:97:8a:5d:d4:56:97:58:ea:cb:d7:de:fb:
0c:e0:b8:96:1f:c8:b0:0c:5e:47:bb:0e:43:11:ad:
eb:e2:fe:4a:09:af:01:c1:e5:ed:9d:f4:ab:55:90:
07:7c:26:c8:94:69:3f:0c:08:d7:43:cc:c8:f9:dc:
46:da:c9:50:8c:0b:e8:36:04:21:47:b5:a5:0c:48:
04:d5:ca:2e:4c:f9:cf:13:34:85:ae:85:8e:db:90:
27:3f:7f:fa:fd:62:d3:d5:ad:66:85:be:86:18:ba:
6f:0a:c1:8f:08:48:48:7f:69:f3:95:9c:08:24:16:
af:eb:52:4c:b9:fb:3c:c7:63:57:6a:3d:f5:a9:41:
90:ce:cd:56:4b:d3:4a:98:91:ca:c7:59:0d:90:d2:
d3:95:cd:2d:2f:b5:37:6a:29:ff:ba:f7:70:4e:e9:
a8:b0:f8:f0:c9:29:ea:dc:e3:49:81:2c:dd:34:4e:
ad:93:ba:a5:63:55:bf:b9:e3:d0:3f:eb:f4:51:3c:
4a:76:29:b4:13:fd:47:3b:26:ea:bb:22:75:46:35:
a4:fa:c8:24:17:88:20:5a:c3:39:01:b7:50:a5:65:
70:ef:30:4d:cf:2f:f9:3f:de:18:83:65:55:6c:eb:
c9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:83:98:0A:DB:A5:57:08:09:7F:48:31:46:7C:CD:76:E2:08:94:3F
X509v3 Authority Key Identifier:
keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e37312e302f32342d3234203d3e203130323132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.96.71.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:be:11:4b:b2:3b:0c:8f:e1:a3:0c:e6:6d:a6:7a:b6:42:dd:
05:f8:70:a1:0f:71:80:60:63:c0:89:d0:ce:7f:5b:fc:c9:ee:
2d:90:96:6f:38:83:3d:04:cc:52:16:1e:fd:09:35:2f:31:6f:
cb:b0:18:09:0f:b1:1a:11:75:80:68:06:35:1e:f7:30:d4:48:
4c:94:2f:83:89:ca:e6:48:4e:21:27:af:e7:64:aa:b1:2e:82:
8c:70:34:50:32:b3:6b:7d:47:6c:fd:98:c6:df:21:b1:ea:8e:
e1:26:1f:73:bf:22:b4:20:11:f5:16:ab:d8:14:1f:52:b2:30:
8d:32:74:b8:a1:9c:86:56:1b:63:f3:29:f4:98:48:87:b6:f1:
36:c4:fb:55:d4:37:fb:e4:60:c7:cc:b6:54:90:1d:a6:a7:ac:
f9:67:7b:b4:20:be:0f:5d:10:cb:49:25:e7:7a:d1:9f:85:68:
3c:5c:1a:c4:e4:fc:d5:77:39:e3:20:eb:4e:d4:63:d0:90:08:
f1:89:11:e3:93:62:70:ab:37:2d:b6:e9:19:18:ec:e6:36:57:
b5:1b:6a:e1:1c:cd:14:9a:74:92:55:50:ce:08:1f:ae:0f:d4:
cb:18:b1:af:29:69:34:b5:98:41:db:8d:5f:8d:b3:26:56:13:
c8:b4:e5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:20:31 2026 by rpki-client