
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3132342e3234332e3139322e302f31382d3138203d3e2039383038.roa
File: 3132342e3234332e3139322e302f31382d3138203d3e2039383038.roa (raw, json)
Hash identifier: oEYkte2q1UL5O9qRDj8q2H9F5CfUuU4HU8YxurAtgeE=
Subject key identifier: F3:66:40:8F:43:66:84:54:A5:0C:12:80:CC:9E:B2:33:FA:39:7E:05
Certificate issuer: /CN=51110140697A5E791546E594A2208042F4C4C6DB
Certificate serial: 2F2917120BFD02FC844A8176E4382B4863D5B384
Authority key identifier: 51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3132342e3234332e3139322e302f31382d3138203d3e2039383038.roa
Signing time: Mon 20 Apr 2026 07:21:10 +0000
ROA not before: Mon 20 Apr 2026 07:16:10 +0000
ROA not after: Mon 19 Apr 2027 07:21:10 +0000
asID: 9808
IP address blocks: 124.243.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl
rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:58:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:29:17:12:0b:fd:02:fc:84:4a:81:76:e4:38:2b:48:63:d5:b3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51110140697A5E791546E594A2208042F4C4C6DB
Validity
Not Before: Apr 20 07:16:10 2026 GMT
Not After : Apr 19 07:21:10 2027 GMT
Subject: CN=F366408F43668454A50C1280CC9EB233FA397E05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:03:b0:2a:09:f6:35:1c:a9:ea:9f:72:56:b0:
2f:69:91:f7:1d:75:77:94:c1:15:e4:10:ed:95:37:
72:27:6a:76:65:d3:fd:68:bb:3d:d9:6d:36:69:ea:
aa:fb:f0:3a:b0:57:68:e0:cf:23:8d:ff:80:17:09:
0b:74:48:1b:de:e9:b3:a2:08:99:9f:50:51:d2:8c:
6b:cd:ea:84:10:6b:7d:74:e4:cd:c5:8f:8a:c9:b7:
df:16:ac:8d:8f:3b:f4:54:49:3d:0a:2b:be:89:6f:
1a:e2:aa:87:d7:c4:2a:fa:09:d1:7b:89:96:3a:7e:
a3:ad:a6:39:46:1e:52:6c:1d:28:ef:2f:eb:99:b1:
e0:7a:a1:dc:d9:a2:b9:e0:d0:cf:c5:c7:7f:45:15:
34:03:77:7b:63:1c:d7:31:dd:06:65:2d:9c:fe:2a:
82:be:85:9d:1f:50:df:77:70:b2:5d:28:9d:34:fc:
f8:a9:10:94:2c:76:d4:d6:75:d1:0b:33:b3:65:50:
e7:cf:9b:ea:00:2e:8e:39:af:60:24:0d:4b:ed:87:
ac:dd:22:00:6a:77:20:3c:b8:f6:2e:04:ab:71:6d:
22:be:bc:4b:3d:e8:e2:5e:17:5f:11:d5:5d:f3:01:
c6:22:46:31:5b:5a:0b:f1:2c:9a:c1:ad:81:ca:27:
89:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:66:40:8F:43:66:84:54:A5:0C:12:80:CC:9E:B2:33:FA:39:7E:05
X509v3 Authority Key Identifier:
keyid:51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3132342e3234332e3139322e302f31382d3138203d3e2039383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.243.192.0/18
Signature Algorithm: sha256WithRSAEncryption
4f:53:7a:fc:93:f0:3b:0a:69:88:b3:65:65:b4:19:31:48:06:
da:8b:ab:a5:f9:bf:08:c5:3a:17:e9:51:b3:23:48:a1:3f:a0:
4d:67:5f:89:cf:29:42:db:0d:da:f7:13:8d:da:a7:6d:54:8a:
00:f1:98:68:42:ed:b4:fc:3f:99:ad:aa:84:c5:55:4e:78:ea:
ac:30:0a:d8:27:57:da:02:75:a2:07:76:c7:03:2c:23:45:ba:
27:ac:65:5d:42:c9:72:c2:c7:fa:a6:1c:a1:cd:98:2c:f9:42:
b1:c0:dc:15:a0:a8:3d:6e:0b:de:d2:95:cd:14:61:9e:fd:91:
a6:fc:a4:78:ae:f1:30:d3:b4:58:63:2f:bb:7c:3c:76:10:23:
9b:9d:bf:e4:48:53:c8:58:90:77:73:bc:33:ef:42:d5:8a:4f:
13:21:34:54:19:4c:f6:f9:74:1f:35:89:df:aa:f4:12:d2:ed:
56:01:0b:4a:95:1d:9d:59:05:24:f0:2b:e8:d1:44:c5:fc:59:
6e:58:c9:0a:62:c2:92:d9:87:db:dd:d3:bf:26:fc:37:a5:a5:
e1:73:10:9f:24:cb:fd:78:ec:2a:25:ca:ee:db:28:81:51:ef:
93:24:4c:db:44:2d:13:0e:4c:2c:e4:fa:4a:90:f6:c0:71:b8:
43:87:52:c2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 10:04:07 2026 by rpki-client