
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e3132382e302f32342d3234203d3e2034383132.roa
File: 3231382e39362e3132382e302f32342d3234203d3e2034383132.roa (raw, json)
Hash identifier: EbnHaihjg2vzx/NHz9WMjp3V4qXrron7efsVdPo2p/8=
Subject key identifier: F9:49:39:48:97:E9:19:DA:25:E2:7D:78:E1:01:34:6F:A3:3E:A2:84
Certificate issuer: /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Certificate serial: 0F90345596FA056F2DF90028C4B681C46E7D830F
Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e3132382e302f32342d3234203d3e2034383132.roa
Signing time: Tue 28 Apr 2026 07:14:41 +0000
ROA not before: Tue 28 Apr 2026 07:09:41 +0000
ROA not after: Tue 27 Apr 2027 07:14:41 +0000
asID: 4812
IP address blocks: 218.96.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:54:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:90:34:55:96:fa:05:6f:2d:f9:00:28:c4:b6:81:c4:6e:7d:83:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Validity
Not Before: Apr 28 07:09:41 2026 GMT
Not After : Apr 27 07:14:41 2027 GMT
Subject: CN=F949394897E919DA25E27D78E101346FA33EA284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:79:e7:62:f0:5e:4f:68:2f:3e:96:00:2c:7a:
37:79:55:41:61:a4:0b:db:e2:01:1d:11:f8:08:a7:
a9:a1:7f:b4:c5:69:f9:7a:64:be:e3:f8:8c:e7:e8:
1c:4e:f0:04:a0:96:18:6b:eb:73:38:d4:f4:a8:2e:
d3:ad:24:6e:b2:18:ee:26:46:75:0c:77:70:45:27:
28:75:56:b1:49:7a:d2:c2:b4:a8:89:ea:f4:5e:e9:
6e:d6:9c:ed:31:40:44:5e:61:df:c2:5c:ce:6a:1d:
77:fc:4a:37:15:02:31:e0:88:94:19:05:aa:4b:7c:
1e:8c:ec:44:8d:c9:33:d8:33:3e:71:24:74:b4:6c:
c4:9e:e3:99:fd:3a:d2:08:a3:84:73:d8:3a:3e:04:
1e:29:9b:55:36:c5:14:aa:d6:be:06:01:6a:b9:4b:
9d:db:bb:d3:0f:d5:5a:a8:b9:99:22:d9:66:3a:4c:
3e:24:24:89:54:d0:b2:f9:42:43:db:42:ac:3b:cf:
1f:28:80:e2:4b:cf:04:38:92:44:01:31:b1:38:1f:
c5:71:ed:7a:1d:cd:e0:60:0c:57:62:79:36:79:dc:
d9:ae:9b:46:68:1e:d0:86:fb:f9:84:c5:1b:f3:48:
28:c2:55:1a:85:35:62:bd:df:72:32:15:02:53:5d:
82:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:49:39:48:97:E9:19:DA:25:E2:7D:78:E1:01:34:6F:A3:3E:A2:84
X509v3 Authority Key Identifier:
keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e3132382e302f32342d3234203d3e2034383132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.96.128.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:e0:36:73:22:c9:9c:d3:13:67:22:15:2e:cd:0b:1f:e0:bf:
a1:5e:f8:c3:83:0d:c1:24:89:91:bc:00:c6:eb:4d:3f:b8:fa:
25:87:58:7f:7c:45:23:1e:3b:12:e8:7d:a1:0a:7b:93:57:ed:
d9:20:ef:3d:16:4e:5d:4c:c1:0c:ae:6c:7c:05:a1:9d:d5:ee:
bc:e0:c7:e1:e1:94:e9:bf:2c:52:08:28:e9:d2:74:ef:19:ee:
c9:6b:6f:e5:50:04:a4:75:76:8b:f3:07:6b:49:bb:f0:cd:8e:
66:75:fd:07:c2:a2:69:1e:f6:42:4f:7c:20:87:4f:0a:c3:3a:
bb:a5:b9:91:9d:fe:1d:47:4d:9f:4f:90:e0:af:c5:bd:05:c9:
1a:1c:ca:39:92:a6:95:0b:b4:9c:84:e6:6a:75:cb:ec:ec:db:
cb:95:8e:d5:c5:58:4b:6a:ea:6e:ed:c4:5f:1c:2c:c3:7a:09:
4b:52:f3:82:bf:6b:2b:0f:b4:63:42:25:56:1d:8a:d7:e7:18:
78:ec:b6:ce:08:f6:32:51:4e:4a:bd:f6:9d:05:55:b8:d3:3e:
f8:59:bc:82:13:08:3d:2a:ab:96:56:73:3f:a5:60:fb:e4:58:
8e:ed:9e:f0:12:d4:55:5b:0c:36:2d:79:0c:c0:a7:76:93:b2:
d4:9f:35:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:58:34 2026 by rpki-client