
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1155077214371315761/0/3231382e3234372e33322e302f31392d3139203d3e203137383136.roa
File: 3231382e3234372e33322e302f31392d3139203d3e203137383136.roa (raw, json)
Hash identifier: M6POzjS5Y8iX9b7vdVefKpmFgOACZsDLIpMy2YnfTeM=
Subject key identifier: 98:09:6A:F3:85:25:CB:A2:6F:4D:10:84:F2:10:34:FB:09:2C:62:C2
Certificate issuer: /CN=E95A4C6575A537BA764908DB55E8E20D56BCCFA4
Certificate serial: 496DF534ABB9B5958E11D84B9576AE07353394E8
Authority key identifier: E9:5A:4C:65:75:A5:37:BA:76:49:08:DB:55:E8:E2:0D:56:BC:CF:A4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E95A4C6575A537BA764908DB55E8E20D56BCCFA4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1155077214371315761/0/3231382e3234372e33322e302f31392d3139203d3e203137383136.roa
Signing time: Wed 23 Sep 2026 09:45:43 +0000
ROA not before: Wed 23 Sep 2026 09:40:43 +0000
ROA not after: Wed 22 Sep 2027 09:45:43 +0000
asID: 17816
IP address blocks: 218.247.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1155077214371315761/0/E95A4C6575A537BA764908DB55E8E20D56BCCFA4.crl
rsync://rpki-rps.cnnic.cn/repo/A1155077214371315761/0/E95A4C6575A537BA764908DB55E8E20D56BCCFA4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E95A4C6575A537BA764908DB55E8E20D56BCCFA4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 04:39:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:6d:f5:34:ab:b9:b5:95:8e:11:d8:4b:95:76:ae:07:35:33:94:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E95A4C6575A537BA764908DB55E8E20D56BCCFA4
Validity
Not Before: Sep 23 09:40:43 2026 GMT
Not After : Sep 22 09:45:43 2027 GMT
Subject: CN=98096AF38525CBA26F4D1084F21034FB092C62C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3d:01:05:75:d2:47:74:4c:aa:2e:fe:c2:38:
da:ec:87:4e:25:3c:46:ee:20:dd:47:25:d3:82:f0:
d9:80:0f:7f:42:3b:b1:9c:54:d0:bf:61:1d:f1:b4:
bc:1e:5d:4a:93:9b:ed:11:56:21:83:23:59:f1:62:
15:9c:c2:b2:08:c3:ba:01:5c:37:fa:ec:93:f4:15:
da:d4:fd:dc:a5:9c:6b:52:23:b0:55:57:27:8e:41:
f3:76:1a:66:14:6f:e2:b8:5b:64:80:4f:a4:ac:b9:
44:9b:22:ba:88:1b:ba:01:89:0b:33:16:8c:29:87:
9b:d4:c3:82:53:57:fe:65:05:7f:5d:58:94:b3:b3:
47:da:d5:6c:dc:23:d4:e8:02:e7:33:cd:7b:8d:ad:
65:ed:d9:10:c5:c0:bc:77:74:fd:f2:a4:ee:b7:0d:
b4:1e:b7:0a:85:71:f5:19:db:42:bd:eb:a5:75:9d:
29:98:72:f8:ae:19:d3:16:d0:fe:07:38:1c:b8:5a:
0c:f9:d2:5f:74:ce:11:7b:75:5e:27:72:b6:5c:c4:
a4:d4:18:cf:f0:5d:8d:5c:f9:69:06:d5:55:05:14:
a3:8c:91:9d:17:2f:da:85:b2:8f:68:9c:83:c5:7c:
75:67:38:50:94:fb:aa:57:d9:54:43:d0:c5:ef:dd:
bd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:09:6A:F3:85:25:CB:A2:6F:4D:10:84:F2:10:34:FB:09:2C:62:C2
X509v3 Authority Key Identifier:
keyid:E9:5A:4C:65:75:A5:37:BA:76:49:08:DB:55:E8:E2:0D:56:BC:CF:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1155077214371315761/0/E95A4C6575A537BA764908DB55E8E20D56BCCFA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E95A4C6575A537BA764908DB55E8E20D56BCCFA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1155077214371315761/0/3231382e3234372e33322e302f31392d3139203d3e203137383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.247.32.0/19
Signature Algorithm: sha256WithRSAEncryption
a3:47:7f:92:12:fd:84:9e:29:bb:e1:53:cd:ef:bf:a2:37:b2:
95:e7:3d:68:c1:a8:21:49:ef:e1:0a:c3:11:66:e4:a2:9f:0b:
0a:75:6c:5f:d3:76:0d:3b:48:27:65:f6:c2:78:67:22:5a:ae:
23:db:46:30:98:e6:00:66:3b:0f:cf:49:6b:62:cf:56:06:79:
f1:6e:bc:54:61:80:5e:f3:03:18:a2:2f:69:2a:5f:ba:dc:83:
2b:22:8d:6c:2d:48:66:34:e7:8a:6a:33:62:65:82:9d:ce:70:
20:29:a8:31:14:98:e2:5a:18:5a:2b:ce:a7:5a:f6:c3:6b:4d:
3a:43:ab:e0:2c:5d:d4:9d:de:1d:49:8b:b4:cc:fc:d3:da:81:
21:fc:60:e1:c3:1d:6f:29:1e:f9:a0:9d:f4:fa:79:fa:86:37:
5c:61:4f:25:cc:dd:b7:7a:72:d7:df:d2:7d:65:fb:51:12:6f:
57:bc:83:45:a2:4f:76:b8:3b:6e:b2:ae:b3:7f:be:ae:a7:a7:
b4:c1:fb:78:c5:1c:a1:2e:f7:4d:9b:da:40:d8:4d:b5:d8:b5:
38:b2:3e:85:f4:d5:6f:91:cd:9c:33:e0:85:a4:13:36:a1:a7:
60:b4:e6:d3:d2:e8:5e:28:60:d2:d7:bb:17:e5:e5:91:d0:6b:
73:12:55:9d
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUSW31NKu5tZWOEdhLlXauBzUzlOgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk1QTRDNjU3NUE1MzdCQTc2NDkwOERCNTVFOEUyMEQ1
NkJDQ0ZBNDAeFw0yNjA5MjMwOTQwNDNaFw0yNzA5MjIwOTQ1NDNaMDMxMTAvBgNV
BAMTKDk4MDk2QUYzODUyNUNCQTI2RjREMTA4NEYyMTAzNEZCMDkyQzYyQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjPQEFddJHdEyqLv7CONrsh04l
PEbuIN1HJdOC8NmAD39CO7GcVNC/YR3xtLweXUqTm+0RViGDI1nxYhWcwrIIw7oB
XDf67JP0FdrU/dylnGtSI7BVVyeOQfN2GmYUb+K4W2SAT6SsuUSbIrqIG7oBiQsz
Fowph5vUw4JTV/5lBX9dWJSzs0fa1WzcI9ToAuczzXuNrWXt2RDFwLx3dP3ypO63
DbQetwqFcfUZ20K966V1nSmYcviuGdMW0P4HOBy4Wgz50l90zhF7dV4ncrZcxKTU
GM/wXY1c+WkG1VUFFKOMkZ0XL9qFso9onIPFfHVnOFCU+6pX2VRD0MXv3b1hAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUmAlq84Uly6JvTRCE8hA0+wksYsIwHwYDVR0j
BBgwFoAU6VpMZXWlN7p2SQjbVejiDVa8z6QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTE1
NTA3NzIxNDM3MTMxNTc2MS8wL0U5NUE0QzY1NzVBNTM3QkE3NjQ5MDhEQjU1RThF
MjBENTZCQ0NGQTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTk1QTRDNjU3NUE1MzdCQTc2NDkwOERCNTVFOEUyMEQ1NkJDQ0ZBNC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTE1NTA3NzIxNDM3MTMxNTc2MS8wLzMyMzEzODJlMzIz
NDM3MmUzMzMyMmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzEzNzM4MzEzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBdr3IDANBgkqhkiG9w0BAQsFAAOCAQEAo0d/khL9hJ4pu+FTze+/ojey
lec9aMGoIUnv4QrDEWbkop8LCnVsX9N2DTtIJ2X2wnhnIlquI9tGMJjmAGY7D89J
a2LPVgZ58W68VGGAXvMDGKIvaSpfutyDKyKNbC1IZjTnimozYmWCnc5wICmoMRSY
4loYWivOp1r2w2tNOkOr4Cxd1J3eHUmLtMz809qBIfxg4cMdbyke+aCd9Pp5+oY3
XGFPJczdt3py19/SfWX7URJvV7yDRaJPdrg7brKus3++rqentMH7eMUcoS73TZva
QNhNtdi1OLI+hfTVb5HNnDPghaQTNqGnYLTm09LoXihg0te7F+XlkdBrcxJVnQ==
-----END CERTIFICATE-----
Generated at Sat Oct 10 13:02:43 2026 by rpki-client