
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e36342e302f32322d3232203d3e203130323132.roa
File: 3231382e39362e36342e302f32322d3232203d3e203130323132.roa (raw, json)
Hash identifier: fkoLwqEj3uFzNxAIdo08LYmkxpQv1OrvimOaXtvU8j0=
Subject key identifier: F9:05:C3:AE:F0:85:AE:F6:0A:53:0A:DA:5B:40:8B:1B:E2:6C:FD:80
Certificate issuer: /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Certificate serial: 32CC90B9FA92A786D29A9AAA806C698F0F88D654
Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e36342e302f32322d3232203d3e203130323132.roa
Signing time: Tue 28 Apr 2026 07:14:41 +0000
ROA not before: Tue 28 Apr 2026 07:09:41 +0000
ROA not after: Tue 27 Apr 2027 07:14:41 +0000
asID: 10212
IP address blocks: 218.96.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:cc:90:b9:fa:92:a7:86:d2:9a:9a:aa:80:6c:69:8f:0f:88:d6:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Validity
Not Before: Apr 28 07:09:41 2026 GMT
Not After : Apr 27 07:14:41 2027 GMT
Subject: CN=F905C3AEF085AEF60A530ADA5B408B1BE26CFD80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:04:e2:35:0a:e9:66:d7:9e:4f:b2:9c:e3:17:
ba:89:22:dd:9e:4f:6e:2e:9a:70:51:33:ac:a2:0b:
f2:e1:5e:67:e9:db:72:c0:0a:ef:2e:0b:b3:aa:1f:
f5:8e:39:c5:6c:d0:64:d0:0f:e7:40:93:2f:42:1b:
d5:b7:fa:c8:e2:24:df:1c:16:ac:1f:63:05:57:52:
21:05:21:6d:d5:d1:37:c1:c4:99:11:0d:71:4f:a5:
12:fd:86:f2:0c:be:cb:ed:8a:71:42:76:68:df:50:
db:54:5a:0a:9e:14:6d:e3:ab:b4:aa:e5:42:a0:e7:
87:95:96:9b:e3:e2:32:51:1b:f2:e1:ff:4c:0a:08:
ee:92:f8:21:1f:27:f0:59:74:8c:d1:1b:8f:f0:cd:
02:44:28:88:c4:49:14:34:d9:4e:c0:64:3c:ee:0b:
63:00:13:14:7c:ca:8b:75:3a:50:7f:90:aa:78:c4:
c1:97:ab:69:b9:ed:e6:27:24:11:a1:d4:b8:04:94:
0d:36:5f:2e:de:6a:87:84:d0:25:e7:e8:fb:98:df:
77:ea:cb:4a:59:c7:68:fa:c0:32:40:d2:f0:9a:33:
a6:fe:22:18:88:d0:3e:67:f5:cd:a5:b5:c5:0a:f4:
32:07:0e:92:f8:33:d8:2d:11:f3:7c:50:75:f1:eb:
ed:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:05:C3:AE:F0:85:AE:F6:0A:53:0A:DA:5B:40:8B:1B:E2:6C:FD:80
X509v3 Authority Key Identifier:
keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e36342e302f32322d3232203d3e203130323132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.96.64.0/22
Signature Algorithm: sha256WithRSAEncryption
55:2f:a8:a1:20:0c:91:40:ad:34:50:de:46:df:be:92:91:7a:
40:60:ca:c4:44:f4:8c:6f:6c:68:9c:69:5a:84:27:01:40:14:
68:4f:3e:a8:ae:b1:ba:a3:f0:04:b5:f8:bb:45:43:9f:d6:31:
66:dd:eb:77:d4:52:3e:49:49:fa:20:83:9d:32:bc:c6:b5:86:
28:5b:50:36:48:d8:c6:76:22:4b:4f:55:9f:3c:b2:9d:87:7a:
11:e9:21:47:99:be:a8:10:39:db:49:5f:e3:30:fc:27:63:59:
fc:78:2d:80:4c:01:32:cb:e3:28:93:15:52:c7:33:cf:2d:f1:
70:94:5e:c0:37:cc:9c:b1:55:61:33:07:bd:cd:d5:ed:de:e0:
93:4e:7a:6f:2f:54:78:93:0c:ef:74:2e:5d:cd:e4:7f:de:ba:
d2:13:d9:01:0c:29:73:1c:42:e5:5b:1d:a8:fc:6a:0e:92:37:
2a:5b:54:1c:04:34:13:42:f4:3a:f7:0c:76:53:25:4c:c5:ff:
de:6d:d4:6b:4f:1a:bf:b0:b5:67:2e:f2:8e:fa:4b:44:89:68:
d9:e7:21:c3:45:09:ce:66:f0:0e:12:53:e8:b6:5f:16:49:77:
e6:a1:37:ee:eb:2c:98:6f:5d:2d:44:1e:47:ac:ca:2d:37:2b:
f7:92:56:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:36:10 2026 by rpki-client