
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096740874986979330/0/3231392e3233352e302e302f32302d3230203d3e20313339313534.roa
File: 3231392e3233352e302e302f32302d3230203d3e20313339313534.roa (raw, json)
Hash identifier: huRlYO+09FxgnCnNVPyqhV/uiBFlNuHHw2ZsrH3jefA=
Subject key identifier: 4B:86:11:60:91:14:47:9B:C1:18:05:F7:59:2D:EF:CA:93:09:71:9A
Certificate issuer: /CN=48394F266C145173319F25807E0F7F0C02A6894A
Certificate serial: 22AB1A77CC8799EA07961F0C6DAB9F19F0DBDB11
Authority key identifier: 48:39:4F:26:6C:14:51:73:31:9F:25:80:7E:0F:7F:0C:02:A6:89:4A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48394F266C145173319F25807E0F7F0C02A6894A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096740874986979330/0/3231392e3233352e302e302f32302d3230203d3e20313339313534.roa
Signing time: Fri 24 Apr 2026 06:38:43 +0000
ROA not before: Fri 24 Apr 2026 06:33:43 +0000
ROA not after: Fri 23 Apr 2027 06:38:43 +0000
asID: 139154
IP address blocks: 219.235.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096740874986979330/0/48394F266C145173319F25807E0F7F0C02A6894A.crl
rsync://rpki-rps.cnnic.cn/repo/A1096740874986979330/0/48394F266C145173319F25807E0F7F0C02A6894A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48394F266C145173319F25807E0F7F0C02A6894A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:ab:1a:77:cc:87:99:ea:07:96:1f:0c:6d:ab:9f:19:f0:db:db:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48394F266C145173319F25807E0F7F0C02A6894A
Validity
Not Before: Apr 24 06:33:43 2026 GMT
Not After : Apr 23 06:38:43 2027 GMT
Subject: CN=4B8611609114479BC11805F7592DEFCA9309719A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ab:fb:6e:22:af:9c:cc:a4:97:23:92:db:d5:
93:2c:99:b6:3d:49:60:b7:d4:fe:34:80:2f:6d:73:
41:6f:42:2d:3c:68:db:ac:94:49:bd:dc:b0:cc:d5:
96:85:23:e2:d6:d7:73:0d:fb:70:58:dc:4b:ad:53:
45:2d:78:82:53:5f:37:41:8b:0e:44:b8:1a:ca:33:
3d:7d:90:03:56:d5:d4:df:08:88:5d:e2:01:1b:69:
ac:23:e4:85:09:66:74:2e:08:3a:3c:a3:c9:80:dd:
78:5b:e1:45:a9:5a:73:5e:d0:81:f6:ac:d7:e8:18:
5d:0b:75:2c:94:49:a5:00:23:29:c5:b3:be:1e:09:
8a:b9:26:a5:a9:2f:80:4b:5f:7c:a3:c8:47:41:e4:
4a:50:d3:ac:db:ea:9c:1b:f1:b0:97:c6:f3:bc:63:
e6:cb:ca:34:d0:49:75:ff:9b:8e:93:3b:36:e3:2c:
76:f8:a1:30:30:34:55:cc:1b:86:d4:b9:4f:92:5b:
78:4d:1c:60:c5:8c:aa:d2:f8:5b:06:2c:3f:cb:84:
ec:c6:8b:2e:91:04:90:d3:68:a6:4c:6b:91:91:75:
98:6c:75:bc:b1:12:e7:23:85:a6:e0:c6:83:6f:49:
cc:a2:ec:4e:6c:ed:57:f2:68:9b:a5:e0:a7:15:8d:
87:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:86:11:60:91:14:47:9B:C1:18:05:F7:59:2D:EF:CA:93:09:71:9A
X509v3 Authority Key Identifier:
keyid:48:39:4F:26:6C:14:51:73:31:9F:25:80:7E:0F:7F:0C:02:A6:89:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096740874986979330/0/48394F266C145173319F25807E0F7F0C02A6894A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48394F266C145173319F25807E0F7F0C02A6894A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096740874986979330/0/3231392e3233352e302e302f32302d3230203d3e20313339313534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
219.235.0.0/20
Signature Algorithm: sha256WithRSAEncryption
2c:19:33:8a:27:b8:f4:c6:7a:10:71:43:b9:f9:58:7e:63:15:
c7:5b:8e:17:28:84:03:e7:f4:e7:cf:98:be:25:ec:28:0b:87:
4d:14:19:fc:84:d0:c5:76:44:c1:b4:9d:db:11:2a:2a:34:c4:
5d:ca:11:bf:b3:51:02:d3:ba:c5:0c:bf:0e:2a:d7:de:bc:11:
49:f6:cc:68:78:51:e7:b7:53:4d:3c:2f:5d:b5:73:6c:10:1a:
7a:0d:aa:0c:18:12:c2:b7:7b:ba:86:18:cb:b3:38:83:48:20:
8e:7a:14:7c:26:b2:ef:dd:30:ea:d2:f3:a0:71:d8:e6:f8:c5:
87:70:20:3f:9b:c2:bf:41:11:12:d0:b4:9c:99:4f:0e:c4:e0:
f8:e6:3b:5f:08:92:3f:f7:b1:1c:44:50:75:6e:0b:92:be:f4:
c8:32:e0:2b:a6:0a:3a:e6:bf:05:b1:ae:6d:b8:52:a2:d7:65:
24:ce:f1:ed:9c:22:fb:0d:ae:39:c6:86:91:31:e6:62:52:99:
45:1c:c9:ee:5d:4e:76:67:84:41:35:ea:ed:a3:8d:a7:8d:e3:
45:35:cb:d5:c1:2d:85:a3:71:6a:70:89:92:82:21:da:a5:ed:
de:bc:23:1d:5b:3f:6d:4d:42:b9:1e:f4:3c:8e:7f:88:2f:e7:
0d:c2:a3:20
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 21:31:29 2026 by rpki-client