
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/31342e3230342e382e302f32322d3232203d3e2034383337.roa
File: 31342e3230342e382e302f32322d3232203d3e2034383337.roa (raw, json)
Hash identifier: Wsu5XMNs74EY7OYoF+oKMJNW4hsft4jUck8YegIpPso=
Subject key identifier: E3:D7:C2:4D:BF:B2:EE:62:5F:52:82:50:A4:4E:DD:21:A4:26:74:23
Certificate issuer: /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Certificate serial: 46E2BD231E374D32DB3F9A6B3BF7453539F97F4D
Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/31342e3230342e382e302f32322d3232203d3e2034383337.roa
Signing time: Wed 13 May 2026 02:19:07 +0000
ROA not before: Wed 13 May 2026 02:14:07 +0000
ROA not after: Wed 12 May 2027 02:19:07 +0000
asID: 4837
IP address blocks: 14.204.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:e2:bd:23:1e:37:4d:32:db:3f:9a:6b:3b:f7:45:35:39:f9:7f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Validity
Not Before: May 13 02:14:07 2026 GMT
Not After : May 12 02:19:07 2027 GMT
Subject: CN=E3D7C24DBFB2EE625F528250A44EDD21A4267423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b0:f5:28:4b:1c:79:59:8e:75:78:19:08:3d:
da:38:c0:10:09:86:5f:a0:d1:85:83:94:61:7c:7a:
ed:1b:bd:c3:86:a6:a7:45:00:a5:cc:9f:b1:0e:ac:
1e:a8:f1:76:23:9b:73:0d:1d:05:c9:5a:85:7b:a3:
a2:3e:e4:33:0f:4a:6a:cd:80:df:63:45:0e:6b:ef:
54:e1:8a:e5:0e:3f:5b:22:41:07:70:82:ef:9b:fd:
16:b6:48:ce:a5:56:00:a9:81:b5:c0:01:41:f5:e3:
60:6b:2a:fe:88:58:24:39:06:7d:ea:83:6c:3a:3c:
d8:33:98:2d:ad:9c:55:4d:3c:2c:df:5f:17:68:bc:
b2:b4:bd:0c:d5:24:34:e4:35:4c:c2:e9:3e:bc:1d:
8a:c0:95:a9:95:3a:72:b8:e8:12:29:11:5a:fc:6a:
41:f4:fc:0a:d8:1d:46:1c:7f:06:bb:25:62:09:15:
80:06:32:48:42:e4:86:55:9f:d1:dc:e3:59:e9:72:
2b:74:07:50:b1:64:be:14:aa:f9:44:26:d1:2b:d1:
97:2e:6f:36:55:9f:81:4d:f1:81:4d:6d:e5:0e:9f:
15:3a:7b:b0:0e:b2:72:a1:5a:91:07:dd:bf:de:eb:
9d:a4:51:70:cb:40:92:65:c0:aa:b0:3d:e8:39:ca:
35:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D7:C2:4D:BF:B2:EE:62:5F:52:82:50:A4:4E:DD:21:A4:26:74:23
X509v3 Authority Key Identifier:
keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/31342e3230342e382e302f32322d3232203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.204.8.0/22
Signature Algorithm: sha256WithRSAEncryption
81:87:57:bc:89:ed:84:bc:a0:c9:29:b6:a5:cf:69:0f:48:2e:
29:c3:99:7f:3a:7a:4f:62:08:df:37:16:96:9d:bc:bc:dc:41:
8b:95:51:23:6a:25:18:ba:7c:8e:fe:3e:c9:6e:9b:20:bb:d8:
6a:66:1d:a3:21:0e:fb:1d:09:fe:ff:61:74:a9:59:a9:5b:2e:
2d:f3:d9:6b:70:b8:12:53:9e:e6:90:77:73:5a:ea:fd:91:c3:
97:ba:67:9e:a6:6c:18:5f:25:44:42:e5:83:89:16:c3:63:a8:
44:fc:05:f1:b7:57:36:1a:1f:d4:c6:4e:17:51:5e:20:ca:4a:
f6:d8:f8:6c:c3:fc:60:71:ac:81:e2:ad:40:61:ba:c0:05:be:
f4:5e:90:46:a9:bf:b1:e5:b1:6f:00:de:72:ef:1f:38:20:e8:
8c:4b:ea:ad:80:e2:02:44:19:9e:bb:5e:f1:18:16:bd:4d:4d:
cf:2b:1f:12:f9:58:6d:76:68:49:ba:fc:9f:7f:2f:38:ec:78:
e8:83:2f:e7:2f:78:63:71:99:04:fe:97:ab:40:8d:3c:70:3a:
2b:a6:d3:4f:a6:a7:80:f0:c2:67:b6:91:99:8b:8d:9b:a6:ea:
15:c0:8f:16:e9:ff:ee:33:7d:fa:93:a9:02:ba:34:31:29:ac:
4e:b8:cc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:46:38 2026 by rpki-client