
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39372e302e302f31382d3138203d3e203130323132.roa
File: 3231382e39372e302e302f31382d3138203d3e203130323132.roa (raw, json)
Hash identifier: sp+LihmdUPSFsEikk5sUwp9gh0Vo2y5szpqb9OoYG2c=
Subject key identifier: F2:10:BD:10:B1:6A:9A:6D:66:17:11:9A:32:15:BB:7C:92:9F:46:2F
Certificate issuer: /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Certificate serial: 1F4CED0B901A563732AF3A86B0019B3B4DB43ABF
Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39372e302e302f31382d3138203d3e203130323132.roa
Signing time: Tue 28 Apr 2026 07:50:42 +0000
ROA not before: Tue 28 Apr 2026 07:45:42 +0000
ROA not after: Tue 27 Apr 2027 07:50:42 +0000
asID: 10212
IP address blocks: 218.97.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:4c:ed:0b:90:1a:56:37:32:af:3a:86:b0:01:9b:3b:4d:b4:3a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Validity
Not Before: Apr 28 07:45:42 2026 GMT
Not After : Apr 27 07:50:42 2027 GMT
Subject: CN=F210BD10B16A9A6D6617119A3215BB7C929F462F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:31:7b:58:55:ba:eb:19:ce:b9:7a:d8:3a:93:
31:93:32:5a:aa:af:9e:34:15:7b:e6:c9:27:40:d9:
89:bf:83:bb:5f:3a:bb:e9:51:0a:95:24:7d:43:f4:
f1:93:43:8d:8b:c3:44:30:bf:38:89:e1:15:c8:c1:
fc:55:78:c2:a3:05:a6:51:a4:d4:a7:3b:c2:d9:d4:
b6:83:02:8f:19:bc:08:b8:7d:71:a7:a9:39:f8:37:
e8:09:de:02:e2:2e:aa:15:4c:e4:0f:2a:b5:5d:01:
07:d2:20:93:5c:22:9f:b9:ff:83:d3:d3:fc:b2:fc:
9b:a7:95:be:51:21:0d:df:8d:28:55:0b:7a:39:2c:
93:3d:73:f2:fe:e2:6d:ed:6a:cb:51:dc:08:18:3f:
ec:e9:74:21:b7:4f:b9:2e:31:71:09:48:80:35:f6:
3a:e9:67:d2:cd:2b:49:2c:36:2a:40:c7:e5:4c:e2:
07:d8:04:9d:68:df:22:19:8e:37:5b:5b:6b:a5:26:
4f:5a:30:36:1e:2c:a0:40:cf:18:32:78:13:c1:63:
51:c0:e6:d8:40:4e:a5:d2:99:f6:ea:97:fd:cb:0d:
b1:29:c0:94:9c:b0:25:58:01:45:d8:e0:ab:e7:ff:
02:06:97:78:46:51:4d:50:e3:0f:68:a0:ef:5f:38:
13:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:10:BD:10:B1:6A:9A:6D:66:17:11:9A:32:15:BB:7C:92:9F:46:2F
X509v3 Authority Key Identifier:
keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39372e302e302f31382d3138203d3e203130323132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.97.0.0/18
Signature Algorithm: sha256WithRSAEncryption
0f:84:35:e1:bc:69:e4:ce:5c:9d:81:44:bc:ea:f3:2e:a1:01:
6d:2b:99:45:66:32:15:49:1c:fc:db:a8:15:8d:4a:ca:ae:dd:
7f:00:bb:29:eb:c0:d5:b4:a2:7c:e2:fc:3f:85:8a:65:34:39:
5f:d8:c0:f2:65:8f:1c:d5:ae:f6:0b:d1:a4:d8:0e:2d:4a:4f:
38:fb:51:68:08:4a:17:6e:9e:5b:03:07:a6:b8:55:91:a3:88:
e3:41:4f:b6:bd:e4:04:76:0c:61:c5:ca:93:ea:54:e7:c6:21:
9f:f6:71:67:85:dc:e7:7b:66:e0:4d:b9:bc:34:6c:0e:e2:4f:
34:0a:1e:91:de:6b:a5:56:2f:81:7e:e4:d6:5c:3e:96:66:86:
d4:ee:de:42:96:30:46:d8:db:c1:bf:5a:64:8f:3a:21:28:bb:
1b:38:c9:ae:f1:61:c3:39:38:ff:02:1d:7e:b2:4c:bd:9d:9d:
de:49:85:7f:11:12:a5:1c:71:01:a0:af:16:49:e5:93:c4:68:
27:d1:c8:7a:af:de:f8:84:41:fb:39:51:61:e2:df:ef:c9:0d:
9e:12:cb:69:86:0f:d0:6b:01:f7:37:cd:61:33:de:bd:a8:47:
e9:f8:fc:ae:a0:ca:c0:8d:f3:e0:2f:c6:2d:ce:aa:82:31:e5:
30:9f:1a:6c
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUH0ztC5AaVjcyrzqGsAGbO020Or8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUx
NkYzQTdFRjAeFw0yNjA0MjgwNzQ1NDJaFw0yNzA0MjcwNzUwNDJaMDMxMTAvBgNV
BAMTKEYyMTBCRDEwQjE2QTlBNkQ2NjE3MTE5QTMyMTVCQjdDOTI5RjQ2MkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsMXtYVbrrGc65etg6kzGTMlqq
r540FXvmySdA2Ym/g7tfOrvpUQqVJH1D9PGTQ42Lw0QwvziJ4RXIwfxVeMKjBaZR
pNSnO8LZ1LaDAo8ZvAi4fXGnqTn4N+gJ3gLiLqoVTOQPKrVdAQfSIJNcIp+5/4PT
0/yy/Junlb5RIQ3fjShVC3o5LJM9c/L+4m3tastR3AgYP+zpdCG3T7kuMXEJSIA1
9jrpZ9LNK0ksNipAx+VM4gfYBJ1o3yIZjjdbW2ulJk9aMDYeLKBAzxgyeBPBY1HA
5thATqXSmfbql/3LDbEpwJScsCVYAUXY4Kvn/wIGl3hGUU1Q4w9ooO9fOBP7AgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQU8hC9ELFqmm1mFxGaMhW7fJKfRi8wHwYDVR0j
BBgwFoAUkxNmUCC9+V36SqwOHkqajhbzp+8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
MDk2ODc1ODUwOTMwNTg1OC8wLzkzMTM2NjUwMjBCREY5NURGQTRBQUMwRTFFNEE5
QThFMTZGM0E3RUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUxNkYzQTdFRi5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTAwOTY4NzU4NTA5MzA1ODU4LzAvMzIzMTM4MmUzOTM3
MmUzMDJlMzAyZjMxMzgyZDMxMzgyMDNkM2UyMDMxMzAzMjMxMzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAbaYQAwDQYJKoZIhvcNAQELBQADggEBAA+ENeG8aeTOXJ2BRLzq8y6hAW0rmUVm
MhVJHPzbqBWNSsqu3X8AuynrwNW0onzi/D+FimU0OV/YwPJljxzVrvYL0aTYDi1K
Tzj7UWgIShdunlsDB6a4VZGjiONBT7a95AR2DGHFypPqVOfGIZ/2cWeF3Od7ZuBN
ubw0bA7iTzQKHpHea6VWL4F+5NZcPpZmhtTu3kKWMEbY28G/WmSPOiEouxs4ya7x
YcM5OP8CHX6yTL2dnd5JhX8REqUccQGgrxZJ5ZPEaCfRyHqv3viEQfs5UWHi3+/J
DZ4Sy2mGD9BrAfc3zWEz3r2oR+n4/K6gysCN8+Avxi3OqoIx5TCfGmw=
-----END CERTIFICATE-----
Generated at Wed May 13 19:36:19 2026 by rpki-client