
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097031725546012673/0/3231312e3135382e32352e302f32342d3234203d3e2034383337.roa
File: 3231312e3135382e32352e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier: XBntutEvCNeXCggvauZz+rp2o18De8TFbKQWAGRJfMk=
Subject key identifier: E3:0E:35:DF:C2:DE:70:98:41:77:F9:74:7D:B5:66:FA:E9:F7:28:0D
Certificate issuer: /CN=E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0
Certificate serial: 74AC41CFC23E63CC6B01CBD7B7D7A5C136A9FDD6
Authority key identifier: E9:A7:D9:B6:8F:F0:40:B5:CE:E2:C4:F6:56:99:74:2E:4B:D0:ED:E0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/3231312e3135382e32352e302f32342d3234203d3e2034383337.roa
Signing time: Wed 06 May 2026 08:48:02 +0000
ROA not before: Wed 06 May 2026 08:43:02 +0000
ROA not after: Wed 05 May 2027 08:48:02 +0000
asID: 4837
IP address blocks: 211.158.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.crl
rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:ac:41:cf:c2:3e:63:cc:6b:01:cb:d7:b7:d7:a5:c1:36:a9:fd:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0
Validity
Not Before: May 6 08:43:02 2026 GMT
Not After : May 5 08:48:02 2027 GMT
Subject: CN=E30E35DFC2DE70984177F9747DB566FAE9F7280D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:94:9b:c5:81:1f:45:6e:d0:d0:91:fa:a6:47:
a8:7b:30:88:f7:c7:db:60:ff:1a:5c:f9:90:5c:59:
11:22:ab:22:be:20:a1:b9:38:2d:ae:35:bc:b7:27:
ed:03:f4:49:8f:b4:cc:5f:62:54:d3:2b:e1:c1:24:
9b:b2:71:d3:1e:a7:2d:62:29:bb:96:89:11:14:1b:
07:1d:45:09:81:62:ee:c7:06:d1:dc:0e:b1:25:af:
e0:52:d8:b2:15:66:13:1a:25:14:eb:9b:14:a9:35:
ac:81:ff:c4:f8:46:72:60:00:7d:3e:be:a6:70:84:
7c:2a:2c:47:43:df:4e:75:64:54:92:28:72:96:db:
17:cb:6a:64:3d:d7:cc:e4:b1:29:0f:d1:d9:ef:84:
b2:f4:9c:50:cd:59:28:ca:a0:ce:8a:f6:49:06:f5:
9f:6f:97:fb:4f:06:58:76:80:4c:9d:6d:68:47:10:
a9:78:12:98:05:0b:0e:4f:f9:47:fb:2d:52:04:83:
72:65:79:f7:ed:26:77:f4:ad:d6:54:5b:25:b0:fe:
77:5a:f9:99:8f:c4:1b:7e:02:19:5f:fb:4b:58:6c:
2c:15:73:e0:75:fd:c3:87:be:2a:e3:5e:a1:02:6e:
f7:dc:d5:cb:68:df:20:9d:30:b7:c2:a5:ca:4d:ff:
89:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0E:35:DF:C2:DE:70:98:41:77:F9:74:7D:B5:66:FA:E9:F7:28:0D
X509v3 Authority Key Identifier:
keyid:E9:A7:D9:B6:8F:F0:40:B5:CE:E2:C4:F6:56:99:74:2E:4B:D0:ED:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/3231312e3135382e32352e302f32342d3234203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.158.25.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:c2:3f:62:2e:e5:60:80:3a:78:3c:15:70:81:ca:21:d3:90:
48:1d:44:49:c1:75:33:10:a6:5c:5b:65:da:b3:5b:b0:57:1a:
68:ce:56:85:01:f4:a0:09:c3:cb:2c:33:92:7f:c4:13:f9:f5:
80:f8:5b:47:16:8a:42:61:73:d7:2f:b7:a5:26:2a:d4:58:ba:
81:17:5f:34:b5:52:48:b7:0d:12:6a:1b:3e:3b:7a:87:9d:59:
46:f2:30:5e:25:28:43:8e:74:05:58:5f:bc:ae:0a:b2:45:be:
ec:72:1b:c0:17:8f:45:11:11:c3:ee:db:19:d6:23:34:22:c0:
d3:d7:1b:af:cd:9c:81:10:47:a1:e2:e2:d7:da:d7:cc:af:4f:
d3:09:7f:f0:6d:5d:c3:16:f5:62:a4:a6:04:d3:ce:b7:43:da:
2a:0a:d3:60:72:c1:56:43:41:0d:b8:f9:7d:af:c8:d4:f7:ae:
6b:14:9e:40:5b:4a:e4:de:60:04:1d:8c:f9:35:b2:87:1e:e1:
53:ac:1f:6a:79:b3:7f:50:21:7e:57:ec:0e:1a:15:f8:fc:d4:
9e:a1:c3:84:3a:5d:32:1c:73:6f:fa:ec:57:dc:71:a8:94:23:
44:ac:7c:53:a0:43:10:ed:c5:7e:98:45:a5:07:96:e0:1f:25:
91:c8:6d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:48:46 2026 by rpki-client