
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139352e302f32342d3234203d3e2034383437.roa
File: 3132332e34392e3139352e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier: Yg0y/kjaU1E9s1efHgu0y0Maw7LAQyDEJRNVBDMRsEA=
Subject key identifier: 55:27:35:EA:59:81:99:65:4C:9D:29:1C:96:B0:75:AA:65:D8:78:9C
Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Certificate serial: 264ED053F7517C307148333A146F377565E84213
Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139352e302f32342d3234203d3e2034383437.roa
Signing time: Wed 01 Jul 2026 07:27:02 +0000
ROA not before: Wed 01 Jul 2026 07:22:02 +0000
ROA not after: Wed 30 Jun 2027 07:27:02 +0000
asID: 4847
IP address blocks: 123.49.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:4e:d0:53:f7:51:7c:30:71:48:33:3a:14:6f:37:75:65:e8:42:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Validity
Not Before: Jul 1 07:22:02 2026 GMT
Not After : Jun 30 07:27:02 2027 GMT
Subject: CN=552735EA598199654C9D291C96B075AA65D8789C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bc:cb:75:50:08:1b:28:28:f7:18:53:47:f5:
0e:b8:32:b8:ed:4a:77:f5:ef:f2:6e:01:ec:77:0b:
7f:5d:1e:c9:b9:14:80:55:dc:9b:01:90:a1:59:7f:
4a:65:8f:cd:86:53:04:c2:8b:e7:eb:bc:7d:17:58:
f7:a2:37:25:b7:47:e3:e0:7b:e5:c7:45:2c:cc:90:
4b:d0:36:af:28:0d:34:a6:8c:b7:48:7b:b7:c1:c1:
d1:60:4d:24:53:4e:9b:80:61:0c:43:48:4e:a9:3a:
4b:95:62:3a:7d:d2:41:41:46:51:33:e3:48:5b:eb:
0a:34:d4:72:30:33:ec:7a:50:d8:56:66:95:95:27:
5c:a6:58:46:b2:4c:7d:8a:6f:87:71:d4:5d:af:08:
5b:53:0a:95:3e:0b:36:29:06:f2:d8:b9:3f:22:dd:
cf:9e:49:16:ce:78:54:06:cd:d3:69:14:57:8a:22:
e0:a6:5a:dd:ab:2a:87:eb:ac:20:2f:9c:ae:52:9e:
b7:d1:9a:65:85:ee:dd:12:11:da:f9:bc:21:07:fb:
34:18:43:87:53:4e:6c:52:17:e3:0a:ef:25:d9:1c:
ce:d5:1b:1f:b6:5a:72:a1:b3:e5:64:fc:73:2f:cd:
81:6b:16:5c:ba:48:49:a0:1c:d8:6c:8d:48:61:45:
f2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:27:35:EA:59:81:99:65:4C:9D:29:1C:96:B0:75:AA:65:D8:78:9C
X509v3 Authority Key Identifier:
keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139352e302f32342d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.49.195.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:08:4c:95:b1:74:a9:cc:95:29:b5:23:10:68:82:ab:2a:45:
9f:2b:97:99:59:a8:98:60:bd:35:00:ec:21:9b:11:2e:0d:0e:
56:91:05:e1:1b:0a:46:a2:ae:8e:ca:be:38:64:b3:c5:49:da:
b7:9e:5b:8d:17:1c:89:bc:07:8c:26:39:b1:3e:f7:d7:1a:b0:
4c:b7:35:1f:54:2b:9b:78:aa:1c:a3:30:31:f3:bc:43:7b:39:
07:7f:9b:0b:48:c3:fa:9a:5a:4b:89:3d:1c:72:2d:de:08:9a:
de:2c:f0:10:a6:bf:93:1e:64:07:84:d0:1d:0e:18:a5:33:17:
f6:40:f8:db:f9:bc:7f:cd:75:ea:d3:8a:8d:fd:b6:e8:bf:e5:
bb:79:09:79:83:ff:ef:1d:b6:bc:c2:11:f2:ad:02:07:03:d5:
9c:a0:b4:20:56:02:46:7a:5b:4f:9f:12:6e:df:a4:97:f3:be:
e8:bd:fd:25:bd:d0:d3:fb:ab:2b:ad:c6:5c:0e:1b:1c:39:8a:
c6:92:94:f8:f8:e8:39:e8:96:38:11:f7:20:dc:fd:bb:07:6d:
ba:64:2b:87:91:f9:0a:e0:9b:11:67:6b:74:6a:44:09:a3:bc:
2a:0b:90:c5:1e:8d:6c:ea:92:c8:a3:f9:1b:f8:33:15:72:30:
20:05:97:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:26:25 2026 by rpki-client