
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e38342e302f32342d3234203d3e203233383438.roa
File: 3132342e3139362e38342e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier: iOAQTfTjvOWzddmjAQ5ET/CStaheNlvOZamexCsZKyc=
Subject key identifier: 27:2C:1D:2C:46:04:10:F6:0C:18:AB:B8:CA:4B:09:C8:C6:DE:58:F4
Certificate issuer: /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial: 2063C284A02E0A93C674F3C4F0EE756CC0B7D0FF
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e38342e302f32342d3234203d3e203233383438.roa
Signing time: Thu 30 Apr 2026 06:44:53 +0000
ROA not before: Thu 30 Apr 2026 06:39:53 +0000
ROA not after: Thu 29 Apr 2027 06:44:53 +0000
asID: 23848
IP address blocks: 124.196.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:41:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:63:c2:84:a0:2e:0a:93:c6:74:f3:c4:f0:ee:75:6c:c0:b7:d0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
Validity
Not Before: Apr 30 06:39:53 2026 GMT
Not After : Apr 29 06:44:53 2027 GMT
Subject: CN=272C1D2C460410F60C18ABB8CA4B09C8C6DE58F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ef:fe:0c:da:ba:80:e1:b6:ca:33:72:33:56:
74:e9:0b:cf:43:30:69:b9:20:03:47:70:c1:4a:47:
12:6d:0f:18:71:d4:17:ea:44:9b:92:bc:78:07:f6:
ed:48:b9:d4:b2:90:ed:3a:e8:7c:3f:bc:24:ba:1e:
67:bc:5a:77:4f:b1:1f:d7:2a:1c:bb:f2:c3:51:01:
da:fd:34:14:f0:25:17:3f:60:cc:80:44:6c:b8:88:
3f:74:ce:47:74:d6:63:e2:26:07:45:cd:65:78:52:
ab:af:58:83:23:65:b7:4b:c7:74:da:ee:cb:1e:43:
7c:03:25:c8:8a:85:51:ef:e4:b8:a7:ab:0f:c8:ac:
59:b8:c9:fc:40:6e:53:5e:a5:2a:5a:e0:f3:82:a7:
53:cd:2a:a2:62:24:08:5c:49:90:28:8a:06:b4:96:
b4:2f:56:41:cf:51:0f:68:ee:76:cc:57:be:ca:9f:
81:03:15:22:8c:9c:bd:84:92:43:56:a6:94:21:2f:
90:cc:c9:4f:54:0c:f8:7b:0c:c7:4d:82:c1:7e:ea:
81:6b:45:f1:98:0a:9c:cd:71:11:99:78:6f:88:e4:
70:e8:ba:3c:f9:d3:b5:51:8e:78:1c:61:ad:7d:34:
3b:6c:81:db:e7:69:38:48:f4:bb:e5:93:04:a5:dc:
56:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2C:1D:2C:46:04:10:F6:0C:18:AB:B8:CA:4B:09:C8:C6:DE:58:F4
X509v3 Authority Key Identifier:
keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e38342e302f32342d3234203d3e203233383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.196.84.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:28:74:70:08:66:ed:9e:e7:8d:dc:62:4d:11:04:ce:10:fd:
38:db:95:73:67:b0:8c:e9:30:9e:73:cf:02:8c:5c:82:a7:88:
62:ba:bc:ff:4c:b4:86:3e:4e:90:55:4f:93:63:42:fc:bc:bb:
af:98:6a:df:43:fa:85:da:19:3e:a3:86:3c:48:d0:76:6b:9a:
75:77:2d:81:62:3e:e3:12:bd:a6:b1:b5:99:e8:93:69:19:72:
56:1d:81:95:3a:1f:47:45:55:d0:20:4e:dc:29:32:ef:41:fc:
c2:66:51:7f:3f:be:77:06:3d:4b:89:d9:bc:0e:51:91:bc:6a:
cb:9e:63:63:9a:ed:2b:15:6c:c2:8b:21:9d:43:a2:93:d4:51:
65:2f:ca:83:c6:d4:90:7b:28:2d:c1:0d:96:49:b2:a3:aa:4d:
b1:7c:67:a6:bd:af:f7:b6:0b:60:ca:5b:50:ef:a2:3e:ee:b3:
3e:65:13:4e:4c:b7:51:b4:e1:84:a1:43:92:20:86:d8:23:f0:
eb:20:b3:54:9b:3b:de:13:cd:07:2a:5f:58:89:dc:1f:5a:aa:
bf:0b:05:aa:76:f6:15:74:28:4d:cf:49:73:1f:7e:9f:c3:74:
7a:3f:1b:d4:5a:c2:c4:e1:bf:ae:c7:87:19:29:cb:38:9c:9d:
66:88:8e:52
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 21:31:09 2026 by rpki-client