
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104968095178424325/0/3130312e39362e3133322e302f32332d3233203d3e2034383437.roa
File: 3130312e39362e3133322e302f32332d3233203d3e2034383437.roa (raw, json)
Hash identifier: pyruQMwauadA5XEUz/CIqNbzDvE1Pt09dSU3KIN64Xo=
Subject key identifier: 42:67:50:A3:43:79:E8:45:AC:6E:74:F9:4A:D2:87:1A:DD:90:C1:D4
Certificate issuer: /CN=921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB
Certificate serial: 4D1FF5295058A0F3CBB66475EE460B95E34ACF9A
Authority key identifier: 92:1E:7C:CE:FA:DC:9A:05:BF:BE:8A:8B:9E:ED:4C:95:D4:BA:75:EB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/3130312e39362e3133322e302f32332d3233203d3e2034383437.roa
Signing time: Wed 20 May 2026 03:53:23 +0000
ROA not before: Wed 20 May 2026 03:48:23 +0000
ROA not after: Wed 19 May 2027 03:53:23 +0000
asID: 4847
IP address blocks: 101.96.132.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.crl
rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 24 May 2026 02:27:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:1f:f5:29:50:58:a0:f3:cb:b6:64:75:ee:46:0b:95:e3:4a:cf:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB
Validity
Not Before: May 20 03:48:23 2026 GMT
Not After : May 19 03:53:23 2027 GMT
Subject: CN=426750A34379E845AC6E74F94AD2871ADD90C1D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f7:2f:55:de:2a:6d:d1:cc:50:b3:9a:9a:04:
91:1c:88:3a:10:f4:00:6d:4a:c4:d9:b2:a4:71:d6:
9d:90:33:5a:bb:0f:01:8f:df:43:57:52:96:2d:85:
93:f6:51:82:8a:bd:12:18:73:53:77:89:5a:ae:6f:
a6:46:86:94:33:d6:b6:46:e6:9d:9d:de:67:d6:92:
44:43:ac:77:a7:b4:94:f1:f5:a3:71:f7:5a:9d:4c:
e0:85:5b:2a:bf:c7:4c:02:19:31:71:2e:be:55:d6:
e7:c6:26:8a:ef:7d:fe:bd:7d:63:01:41:d6:fb:52:
6f:28:10:97:85:fa:a6:26:9c:44:d2:cd:18:59:f6:
59:19:af:48:67:d1:b9:1b:70:1b:cd:0c:17:2e:a1:
a2:b8:7b:0d:05:88:d6:52:fa:ba:dc:c3:d8:86:4b:
42:62:7b:a4:28:13:7a:0c:ae:31:78:16:dc:4b:7f:
20:d8:c4:fa:b8:22:3f:fe:4a:42:6e:3c:3f:10:b3:
6e:3f:e8:f2:30:dc:59:aa:1c:bb:9b:13:ec:f5:6c:
39:ad:23:cd:c5:f3:32:65:17:9e:c1:73:aa:f4:15:
d8:a9:3a:3f:b6:e0:8b:e3:11:b4:bf:5b:9d:da:67:
d5:74:ea:4a:7b:73:ab:0f:bc:07:3d:5d:ca:1f:a3:
75:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:67:50:A3:43:79:E8:45:AC:6E:74:F9:4A:D2:87:1A:DD:90:C1:D4
X509v3 Authority Key Identifier:
keyid:92:1E:7C:CE:FA:DC:9A:05:BF:BE:8A:8B:9E:ED:4C:95:D4:BA:75:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/3130312e39362e3133322e302f32332d3233203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.96.132.0/23
Signature Algorithm: sha256WithRSAEncryption
93:52:67:d3:b0:47:61:f3:ef:1f:8a:8d:97:0c:b0:a8:c0:e2:
cf:68:2f:6d:91:03:95:a2:47:57:7f:34:a0:b7:c9:bc:87:a5:
6f:eb:d0:53:92:e9:34:3e:65:f5:a6:a4:dc:bd:33:15:5d:0b:
85:67:04:6e:a4:d4:83:37:25:5f:38:ac:c0:98:63:66:47:22:
f2:1f:c8:50:23:e5:6c:bb:ab:ac:23:fa:45:c3:5d:e1:ca:3a:
6a:82:ef:27:62:34:66:35:a3:d8:25:a6:39:5d:e8:f4:ba:53:
b6:c5:c2:e2:a1:de:ef:8f:c6:7d:2e:9a:b6:24:ac:af:84:a2:
4f:79:f6:71:c8:d7:48:90:54:30:4d:79:a4:f8:ce:aa:e5:3d:
df:81:9c:70:d5:5f:de:bd:de:2e:fd:38:69:ae:d5:72:2a:9c:
12:f7:5e:7b:67:dc:ca:37:f6:cb:8d:19:14:63:7b:2f:f2:98:
fc:24:9b:dc:88:14:ba:58:be:62:8b:af:94:1d:46:d6:0d:e3:
a7:8c:30:28:99:01:09:e7:9d:4a:fb:83:59:96:ca:2a:da:7e:
10:8d:34:99:5b:ac:2f:dd:85:62:a9:c6:57:cc:d0:95:ac:05:
be:a6:f9:d5:94:ae:14:3f:2f:82:bc:1f:5b:c9:a0:9a:5c:d2:
e2:f0:0e:ac
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUTR/1KVBYoPPLtmR17kYLleNKz5owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTIxRTdDQ0VGQURDOUEwNUJGQkU4QThCOUVFRDRDOTVE
NEJBNzVFQjAeFw0yNjA1MjAwMzQ4MjNaFw0yNzA1MTkwMzUzMjNaMDMxMTAvBgNV
BAMTKDQyNjc1MEEzNDM3OUU4NDVBQzZFNzRGOTRBRDI4NzFBREQ5MEMxRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb9y9V3ipt0cxQs5qaBJEciDoQ
9ABtSsTZsqRx1p2QM1q7DwGP30NXUpYthZP2UYKKvRIYc1N3iVqub6ZGhpQz1rZG
5p2d3mfWkkRDrHentJTx9aNx91qdTOCFWyq/x0wCGTFxLr5V1ufGJorvff69fWMB
Qdb7Um8oEJeF+qYmnETSzRhZ9lkZr0hn0bkbcBvNDBcuoaK4ew0FiNZS+rrcw9iG
S0Jie6QoE3oMrjF4FtxLfyDYxPq4Ij/+SkJuPD8Qs24/6PIw3FmqHLubE+z1bDmt
I83F8zJlF57Bc6r0FdipOj+24IvjEbS/W53aZ9V06kp7c6sPvAc9Xcofo3VVAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUQmdQo0N56EWsbnT5StKHGt2QwdQwHwYDVR0j
BBgwFoAUkh58zvrcmgW/voqLnu1MldS6deswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NDk2ODA5NTE3ODQyNDMyNS8wLzkyMUU3Q0NFRkFEQzlBMDVCRkJFOEE4QjlFRUQ0
Qzk1RDRCQTc1RUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTIxRTdDQ0VGQURDOUEwNUJGQkU4QThCOUVFRDRDOTVENEJBNzVFQi5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA0OTY4MDk1MTc4NDI0MzI1LzAvMzEzMDMxMmUzOTM2
MmUzMTMzMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAWVghDANBgkqhkiG9w0BAQsFAAOCAQEAk1Jn07BHYfPvH4qNlwywqMDiz2gv
bZEDlaJHV380oLfJvIelb+vQU5LpND5l9aak3L0zFV0LhWcEbqTUgzclXziswJhj
Zkci8h/IUCPlbLurrCP6RcNd4co6aoLvJ2I0ZjWj2CWmOV3o9LpTtsXC4qHe74/G
fS6atiSsr4SiT3n2ccjXSJBUME15pPjOquU934GccNVf3r3eLv04aa7VciqcEvde
e2fcyjf2y40ZFGN7L/KY/CSb3IgUuli+YouvlB1G1g3jp4wwKJkBCeedSvuDWZbK
Ktp+EI00mVusL92FYqnGV8zQlawFvqb51ZSuFD8vgrwfW8mgmlzS4vAOrA==
-----END CERTIFICATE-----
Generated at Sat May 23 04:26:04 2026 by rpki-client