
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e38302e302f32342d3234203d3e203233383438.roa
File: 3132342e3139362e38302e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier: lcA57cFFCExBZmKuI9rjz5jawmIrDiF9X64Fn5OwYPY=
Subject key identifier: 52:58:55:74:7D:66:49:C7:49:1E:52:0E:A6:43:5B:A4:25:E9:1F:01
Certificate issuer: /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial: 5516E5616BC4A4EB564A1853751E5C74D8DDE371
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e38302e302f32342d3234203d3e203233383438.roa
Signing time: Thu 30 Apr 2026 06:44:53 +0000
ROA not before: Thu 30 Apr 2026 06:39:53 +0000
ROA not after: Thu 29 Apr 2027 06:44:53 +0000
asID: 23848
IP address blocks: 124.196.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:41:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:16:e5:61:6b:c4:a4:eb:56:4a:18:53:75:1e:5c:74:d8:dd:e3:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
Validity
Not Before: Apr 30 06:39:53 2026 GMT
Not After : Apr 29 06:44:53 2027 GMT
Subject: CN=525855747D6649C7491E520EA6435BA425E91F01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4a:ab:71:db:fb:1b:f5:bf:17:39:90:8e:6b:
62:34:09:6d:22:0f:ad:66:fc:38:cb:1d:22:35:a1:
14:8c:5f:85:cc:45:a6:11:17:7c:05:dc:bd:71:4a:
b1:08:a7:2c:12:d5:76:93:0c:36:4f:73:12:ee:83:
11:34:ca:f3:df:8b:f1:63:93:86:2d:d7:4a:b2:66:
d4:c2:af:af:4a:d8:00:b6:4d:89:24:66:5e:63:fd:
76:3a:f3:02:8b:a9:b6:b8:3e:92:47:30:62:33:07:
15:1f:88:8e:fa:af:66:63:c0:c7:9c:2d:d9:18:c0:
b6:de:ea:77:c4:73:84:e9:15:73:15:16:b3:fa:5a:
e3:66:bb:f8:f2:49:cc:17:4b:78:5f:9c:69:14:57:
cf:1c:93:39:c8:c2:eb:67:7a:5d:d9:b9:1a:30:41:
6c:9b:b4:62:f4:c0:aa:0f:f2:b3:55:39:44:b3:98:
cb:38:db:e1:80:6c:09:b2:2a:90:b3:35:c8:44:f7:
d4:c8:16:16:92:88:da:e1:1d:20:6f:e6:22:bc:19:
f9:ea:97:c0:44:73:13:e2:06:18:3d:d4:1c:9f:43:
ad:2b:9e:1c:89:37:06:a6:a4:4a:bc:8e:9d:a4:b4:
ae:5a:b7:e3:3b:d7:ab:d0:17:12:5f:d3:d2:38:23:
21:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:58:55:74:7D:66:49:C7:49:1E:52:0E:A6:43:5B:A4:25:E9:1F:01
X509v3 Authority Key Identifier:
keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e38302e302f32342d3234203d3e203233383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.196.80.0/24
Signature Algorithm: sha256WithRSAEncryption
60:47:88:80:77:f5:21:22:36:93:60:a6:20:a2:7b:e1:2f:08:
74:33:24:a2:1f:0e:aa:5d:1d:cc:2d:59:c3:b9:6d:ff:5d:fe:
ef:d8:ea:41:24:7b:2f:5c:95:82:0d:01:47:ea:58:64:9c:65:
ab:da:4a:a9:d0:d0:cc:02:02:b3:1e:c3:70:7a:77:59:bc:b3:
41:10:01:8c:9d:b6:85:98:77:35:2a:95:80:21:27:e7:e3:cb:
ec:8b:7a:61:5b:b3:55:99:a7:34:2d:bc:7f:74:d6:30:ff:75:
e6:5c:d6:80:08:19:b5:54:70:30:6f:e5:4a:67:2a:40:66:4b:
b9:fe:31:64:b2:17:fa:9b:af:03:8b:e8:c5:34:10:b4:88:c7:
f6:98:50:76:02:6e:bc:80:e8:fa:4f:86:2e:fa:41:ca:18:55:
92:07:a7:0a:fd:b9:38:e0:bf:42:0a:be:cb:df:b8:40:cb:5b:
2f:44:ac:de:92:6a:26:1b:e8:35:d3:da:0c:de:3e:a1:01:9a:
ed:7b:68:e2:f4:73:10:4e:6e:bf:5f:2d:5c:8e:f9:73:ba:48:
0b:6d:36:57:7a:18:ab:a7:bd:8d:d2:56:b4:04:be:96:06:ae:
0e:4a:95:36:b7:30:2f:49:18:9c:ac:ff:52:24:e9:fd:6d:ba:
b2:97:9f:4b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 21:31:10 2026 by rpki-client