
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231302e352e302e302f31392d3139203d3e203130323132.roa
File: 3231302e352e302e302f31392d3139203d3e203130323132.roa (raw, json)
Hash identifier: JvpKEbAeXygpqY9OwvcLj2Hi9B68NFmOly4j/0JgcNM=
Subject key identifier: 9D:B1:85:9A:D7:89:78:6D:C4:2E:CF:F9:6A:0F:6B:F5:EC:0F:1A:7E
Certificate issuer: /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Certificate serial: 20B4FDE1D21E163950A0762078FCCEB579DD088C
Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231302e352e302e302f31392d3139203d3e203130323132.roa
Signing time: Tue 28 Apr 2026 07:28:27 +0000
ROA not before: Tue 28 Apr 2026 07:23:27 +0000
ROA not after: Tue 27 Apr 2027 07:28:27 +0000
asID: 10212
IP address blocks: 210.5.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:b4:fd:e1:d2:1e:16:39:50:a0:76:20:78:fc:ce:b5:79:dd:08:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Validity
Not Before: Apr 28 07:23:27 2026 GMT
Not After : Apr 27 07:28:27 2027 GMT
Subject: CN=9DB1859AD789786DC42ECFF96A0F6BF5EC0F1A7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:48:59:da:67:30:b8:df:fe:80:4a:2a:34:
c9:d8:2f:c6:70:8c:ca:17:96:aa:40:cf:1e:ab:57:
e6:ed:dc:87:32:87:96:b5:a9:03:a1:76:7d:f8:b3:
1e:ae:8a:0d:e3:8c:53:d3:00:e4:94:94:d5:f4:8a:
fc:d4:35:e4:1f:ea:6f:bd:c7:3f:c7:db:51:7e:86:
65:7b:4c:a8:6a:eb:78:26:bb:fc:81:26:18:a7:43:
a4:a2:e3:e0:d8:09:ee:bc:94:c6:42:d7:cf:54:9b:
0b:f5:46:04:9e:48:dc:42:43:fa:b3:92:2a:ed:49:
3e:65:20:bb:d3:3a:c1:8c:8f:cd:1c:af:c5:05:a0:
e5:e0:19:aa:12:0a:b3:c5:f7:b7:20:fa:ef:c6:c5:
b1:eb:e0:00:57:52:b3:84:a8:69:b2:2a:b1:d7:04:
f9:bb:65:a0:25:ac:a7:ee:b2:6c:86:db:c1:78:d4:
9d:97:b0:98:8e:fc:fc:fb:6d:a3:3b:bc:44:fd:a7:
54:98:1e:42:84:d0:80:f8:0c:d0:62:b5:89:71:b1:
88:fd:b3:bf:45:42:09:18:0e:78:b5:66:a9:4b:42:
68:e1:28:aa:00:c8:df:ab:58:d8:97:37:77:99:39:
2f:51:35:6a:e6:09:99:3e:d8:84:30:5f:ca:41:e4:
70:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B1:85:9A:D7:89:78:6D:C4:2E:CF:F9:6A:0F:6B:F5:EC:0F:1A:7E
X509v3 Authority Key Identifier:
keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231302e352e302e302f31392d3139203d3e203130323132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.5.0.0/19
Signature Algorithm: sha256WithRSAEncryption
91:35:c4:e4:2a:11:b6:79:60:a3:9e:85:97:9e:b4:5e:be:d0:
1a:4a:15:5c:80:ef:06:4e:d2:3d:3a:63:18:dc:51:43:d9:dd:
d0:d1:30:45:83:2f:a6:68:54:55:ce:e7:b3:10:3a:5b:29:e3:
e1:6d:2e:96:1d:94:1e:a1:19:0e:ac:bf:57:bf:20:30:be:05:
a9:bd:91:ee:bf:bb:1b:30:a1:d7:ce:14:60:5b:ec:f7:b2:b1:
7a:87:a8:d1:f8:8e:95:31:d6:a1:58:ab:32:dc:90:9d:ad:cc:
e4:01:b3:67:23:f4:b6:8c:e0:a6:06:91:10:83:12:06:b7:f7:
64:1b:8d:2f:12:27:79:9f:1d:a3:4a:d5:4d:47:17:c3:36:b6:
59:6e:da:d1:82:dc:e2:88:2f:60:38:d4:8e:b2:65:d5:27:0a:
5f:42:5e:68:41:fc:8d:d2:24:71:b4:f3:06:57:c8:03:f2:9b:
1a:0b:b0:94:42:8a:b3:6c:8c:9c:58:eb:59:50:95:d9:9a:63:
44:24:92:95:b5:a0:91:42:72:dd:b1:4f:2e:2a:87:e0:e4:d8:
b5:fc:b0:42:53:af:cf:7d:3e:42:e6:58:aa:4b:cf:21:2d:5e:
cd:14:5d:01:c8:bd:91:ec:db:b3:5d:54:a7:ed:0d:d4:48:2c:
29:9b:ef:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:36:24 2026 by rpki-client