
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/31342e3230342e36302e302f32322d3232203d3e2034383337.roa
File: 31342e3230342e36302e302f32322d3232203d3e2034383337.roa (raw, json)
Hash identifier: 3T/BTG1bFAX91P3Dsqu7hf0JKTi7AO/X45BaJH1oplw=
Subject key identifier: 4F:D1:96:B2:DE:DD:F5:81:13:60:7A:98:2F:35:F9:2B:53:4D:9B:83
Certificate issuer: /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Certificate serial: 1BAB31A31E04EA49F8B4D0B5D2D9C07007C54749
Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/31342e3230342e36302e302f32322d3232203d3e2034383337.roa
Signing time: Wed 13 May 2026 02:50:08 +0000
ROA not before: Wed 13 May 2026 02:45:08 +0000
ROA not after: Wed 12 May 2027 02:50:08 +0000
asID: 4837
IP address blocks: 14.204.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:ab:31:a3:1e:04:ea:49:f8:b4:d0:b5:d2:d9:c0:70:07:c5:47:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Validity
Not Before: May 13 02:45:08 2026 GMT
Not After : May 12 02:50:08 2027 GMT
Subject: CN=4FD196B2DEDDF58113607A982F35F92B534D9B83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6a:e6:35:09:af:98:0a:16:40:68:45:89:da:
98:63:03:e7:28:b0:bd:85:ae:ae:bd:bc:46:ed:46:
1e:70:d1:47:b8:27:e1:63:29:af:e0:f5:3d:cf:74:
e8:07:55:22:f6:9e:2a:5f:b9:04:90:93:7d:43:75:
33:ad:44:a4:35:a8:4e:bc:47:bd:20:3e:37:1e:45:
8d:b0:1a:b4:f1:d9:d3:80:b4:42:61:ab:4e:1e:57:
28:10:59:eb:9f:81:7b:0e:31:80:7b:83:fc:31:f9:
f4:b4:c8:c3:0d:ea:9f:a9:4e:b6:04:46:d0:34:78:
6e:40:48:41:19:c7:97:a8:87:e7:1e:d8:f7:cf:5c:
8a:29:0d:0b:fe:6a:c4:6c:cc:a3:25:b4:ea:04:27:
9d:b4:d6:bc:43:b1:c9:06:27:e5:43:53:8d:5e:63:
2f:d0:63:06:49:bb:db:d2:17:26:41:3a:d0:62:22:
a4:e0:34:0d:91:ab:02:99:8f:49:c3:e3:f7:b0:3a:
87:bb:ab:d9:3c:48:8a:39:97:78:61:78:2c:a5:23:
c8:13:c3:77:be:7f:ad:fe:1c:09:c3:6b:9d:29:0d:
70:d4:0f:2d:67:d4:c5:62:58:dc:1b:5d:f0:e4:b4:
7d:d2:da:28:58:ab:0a:9f:36:40:48:f9:70:2a:f4:
b2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D1:96:B2:DE:DD:F5:81:13:60:7A:98:2F:35:F9:2B:53:4D:9B:83
X509v3 Authority Key Identifier:
keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/31342e3230342e36302e302f32322d3232203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.204.60.0/22
Signature Algorithm: sha256WithRSAEncryption
40:c7:a0:81:ef:e4:96:e5:cd:f2:ee:6e:c5:fd:00:c3:43:1b:
6a:81:66:b7:91:19:19:b9:72:c9:ab:3e:86:7c:c2:78:5f:a1:
cf:7e:91:b7:42:a2:ee:41:bc:34:56:cc:be:54:d6:32:b6:9e:
5a:75:bd:1b:ec:4b:fe:8a:7c:f0:4a:d3:e0:af:61:78:26:d5:
b3:44:6d:98:5f:25:1d:41:c2:5f:7e:84:a0:5d:39:4e:cd:58:
86:75:0d:41:34:3b:48:e8:fa:01:89:14:a9:42:d4:ea:a8:b0:
e7:21:95:67:7d:f0:a5:21:a6:0f:1a:a3:24:67:50:79:96:a9:
2a:2d:54:82:3e:88:40:42:d8:86:83:c0:6d:19:65:e5:2a:0c:
4c:ec:fa:6d:7f:59:cf:d3:5e:a1:9f:35:b1:88:cd:4d:7f:0e:
ea:d1:ae:e1:8f:cd:b7:3b:75:f4:b3:70:74:ba:ac:33:b0:04:
79:a8:9f:f3:81:28:13:9d:2d:9c:be:3e:62:a1:1f:ae:30:57:
21:41:8d:97:5a:88:0f:f1:e5:be:88:42:bb:99:83:3f:ad:de:
d0:fe:42:a3:08:76:18:11:cb:03:b1:aa:08:ab:08:39:d4:98:
7e:33:5c:28:26:bd:6a:56:ed:39:c9:f1:1e:65:87:ff:93:fe:
9a:f0:e4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:46:38 2026 by rpki-client