
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101689704551546887/0/3231302e37332e36342e302f31392d3139203d3e203138323339.roa
File: 3231302e37332e36342e302f31392d3139203d3e203138323339.roa (raw, json)
Hash identifier: 1GDwncPlsYPbeW8okel7zSVV3jafsi0ew/0QpyVkPsc=
Subject key identifier: AF:7B:70:C8:69:99:55:CF:FF:32:73:5A:18:E6:6D:C1:A7:D9:CE:AB
Certificate issuer: /CN=95B08F18D0CF8E4AFAD49A08A907521317F19024
Certificate serial: 6B3B77A4EFE4082DA8FFBBD9984021088D07067E
Authority key identifier: 95:B0:8F:18:D0:CF:8E:4A:FA:D4:9A:08:A9:07:52:13:17:F1:90:24
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/3231302e37332e36342e302f31392d3139203d3e203138323339.roa
Signing time: Wed 29 Apr 2026 02:07:55 +0000
ROA not before: Wed 29 Apr 2026 02:02:55 +0000
ROA not after: Wed 28 Apr 2027 02:07:55 +0000
asID: 18239
IP address blocks: 210.73.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.crl
rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:3b:77:a4:ef:e4:08:2d:a8:ff:bb:d9:98:40:21:08:8d:07:06:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95B08F18D0CF8E4AFAD49A08A907521317F19024
Validity
Not Before: Apr 29 02:02:55 2026 GMT
Not After : Apr 28 02:07:55 2027 GMT
Subject: CN=AF7B70C8699955CFFF32735A18E66DC1A7D9CEAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:52:82:b5:53:87:0f:4b:96:0e:60:e1:58:49:
07:9e:b6:4e:e3:d1:cb:05:3a:4d:9b:3b:5c:e7:fd:
4c:b8:a2:78:46:28:a0:2f:4f:a2:65:d7:f9:4b:50:
9d:36:51:0b:e4:54:45:1e:67:a8:8e:2d:02:ea:57:
5a:13:7a:70:75:44:3b:95:12:ed:41:90:b6:63:78:
2a:c1:be:23:46:c4:e7:77:dd:54:84:33:af:7f:fd:
d2:4c:14:4e:94:33:92:32:ee:2a:cf:91:68:83:42:
f1:34:e8:3a:80:d2:b9:4d:8d:15:6e:a2:a4:1e:10:
01:d5:33:46:09:10:b4:bb:df:56:95:da:11:74:d2:
25:f1:47:9d:9c:a9:60:25:da:3c:6b:8c:88:5f:5b:
57:2b:88:2f:5c:b1:00:ae:e4:0e:51:86:af:d4:f4:
8e:eb:11:d4:c5:25:e3:62:d8:af:13:a6:da:de:d4:
80:89:04:24:0b:c1:aa:a7:dc:6b:80:5d:2c:de:8e:
cb:89:91:d5:7c:ed:53:7d:bf:ff:d7:0e:5b:d8:8c:
cb:55:f7:26:5a:bf:10:81:a0:e4:36:8e:b8:1a:cf:
86:97:21:35:99:75:40:bd:a2:b8:21:35:00:b7:c1:
4e:d6:9a:3c:1f:d0:0d:29:b3:23:2d:55:74:cc:93:
bf:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7B:70:C8:69:99:55:CF:FF:32:73:5A:18:E6:6D:C1:A7:D9:CE:AB
X509v3 Authority Key Identifier:
keyid:95:B0:8F:18:D0:CF:8E:4A:FA:D4:9A:08:A9:07:52:13:17:F1:90:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/3231302e37332e36342e302f31392d3139203d3e203138323339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.73.64.0/19
Signature Algorithm: sha256WithRSAEncryption
8f:68:e5:74:63:1e:58:77:d2:d3:f2:f1:03:82:5e:55:e5:d8:
d1:8c:dd:ad:24:98:12:db:3c:26:9d:9a:38:bb:e9:ae:b4:1a:
0e:fc:60:8c:7a:7e:2b:02:3e:1b:b1:00:e4:9f:8c:84:d8:5c:
34:b5:29:1b:bc:84:50:9d:4e:40:ab:37:16:9a:bd:79:40:b0:
5b:4d:fd:72:c9:95:1a:e6:f2:69:56:77:76:51:fd:1f:84:99:
9d:a7:dd:98:f0:49:9c:47:ee:ce:db:5c:0b:b3:f0:e2:da:e8:
c0:ae:06:33:85:23:0d:79:af:25:b1:89:d6:b0:4c:df:00:87:
ae:8d:af:5d:47:66:99:1c:4d:24:ff:4c:e8:23:5b:e6:ec:e2:
43:e1:50:d4:40:32:92:9a:06:6e:c5:87:af:4b:e0:62:62:24:
0f:36:f8:4a:e7:52:e3:5c:db:e6:89:51:86:cf:d8:13:01:59:
66:10:d3:a6:bc:1c:e4:a1:ba:ff:8d:bb:42:61:a0:b4:03:ba:
fa:88:83:3f:ca:7c:1b:96:0d:2f:48:f2:d2:fa:df:5b:79:2b:
40:90:8a:01:8f:83:cb:44:d9:94:4c:44:08:7f:4e:02:4d:76:
03:78:a3:de:ec:78:24:21:bb:54:8f:95:80:4a:47:36:41:5c:
7a:ee:d9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:31:25 2026 by rpki-client