
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139352e302f32342d3234203d3e203338383134.roa
File: 3132332e34392e3139352e302f32342d3234203d3e203338383134.roa (raw, json)
Hash identifier: 93s3UiCF+Wd5njWRY2drOvKnsHZLCFd+goqTtneNrXk=
Subject key identifier: 90:CC:16:36:09:6D:AF:5F:D0:88:5F:8D:BC:87:F6:AF:52:89:13:61
Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Certificate serial: 0699CDE4EEB62CE5E4207912CC6ECEA5CA925320
Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139352e302f32342d3234203d3e203338383134.roa
Signing time: Tue 31 Mar 2026 09:32:45 +0000
ROA not before: Tue 31 Mar 2026 09:27:45 +0000
ROA not after: Tue 30 Mar 2027 09:32:45 +0000
asID: 38814
IP address blocks: 123.49.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:99:cd:e4:ee:b6:2c:e5:e4:20:79:12:cc:6e:ce:a5:ca:92:53:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Validity
Not Before: Mar 31 09:27:45 2026 GMT
Not After : Mar 30 09:32:45 2027 GMT
Subject: CN=90CC1636096DAF5FD0885F8DBC87F6AF52891361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:33:9f:81:22:e9:b3:00:e2:7c:83:b0:fd:97:
49:d5:3a:34:43:da:46:2b:70:ff:21:fc:2e:fd:78:
ab:3e:86:91:86:fe:65:c4:44:be:4f:1e:5b:5c:d4:
0b:b2:a9:e7:f4:69:13:43:61:34:b6:51:62:da:44:
eb:55:34:d4:5c:7c:aa:5e:2b:71:c0:3a:ad:5a:43:
81:41:33:3d:3d:7a:92:d5:ae:05:b3:46:12:c2:b5:
d8:f3:23:5b:af:02:b0:fe:1d:a9:c9:0c:27:35:d6:
df:3a:61:5b:23:db:c1:03:ff:7c:b5:cb:83:59:66:
8e:84:41:a2:fc:e2:d3:41:fc:e8:ac:7f:59:af:e0:
ca:eb:c3:e7:1b:11:d0:86:80:40:3e:be:82:c3:20:
c4:98:07:11:b5:94:fa:61:5e:be:3d:d5:53:95:9a:
7b:7e:6e:e9:ca:b0:10:68:1c:21:d9:34:ef:32:75:
0e:75:e1:73:65:0b:ac:61:4f:08:5b:3b:66:f4:3e:
73:f4:cb:56:78:34:27:5a:bc:b2:cf:59:0d:f6:9f:
f0:66:59:84:76:b4:e6:03:f9:a3:50:1f:aa:83:a9:
e6:a4:e9:a6:13:3a:8b:1d:e0:b0:9e:b4:25:d5:66:
91:fd:25:09:61:e9:38:1c:32:89:e7:1d:90:52:5b:
07:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CC:16:36:09:6D:AF:5F:D0:88:5F:8D:BC:87:F6:AF:52:89:13:61
X509v3 Authority Key Identifier:
keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139352e302f32342d3234203d3e203338383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.49.195.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:ab:7f:ae:db:68:a2:8b:4f:02:fd:96:8c:e9:b8:ea:de:21:
47:50:30:2f:e5:10:27:91:95:e4:65:f7:5f:ff:b5:f6:b7:3e:
8f:09:fb:f3:c5:98:9c:99:0a:49:3d:d2:b5:8a:65:43:9e:0e:
c1:8e:71:6f:c8:a2:bb:e4:db:61:7d:42:3a:a4:7c:9c:97:c5:
eb:8c:5b:58:5e:d5:bf:04:1a:a0:d4:f5:e8:f3:31:04:a9:e6:
ae:de:ad:95:87:eb:83:4f:e0:d7:de:4f:f5:b0:0d:d3:1c:6c:
cd:a0:e6:86:bd:b5:3a:27:d1:3b:89:4c:1a:cd:bd:ed:6f:76:
55:18:11:bc:c8:e2:66:1d:75:30:cb:6f:70:aa:a0:0c:a3:53:
0c:1b:96:71:5b:61:9e:eb:b3:98:48:da:51:94:3c:d1:dd:5f:
4a:d1:73:c8:90:b3:5b:e7:26:fc:0f:1d:f7:8a:0b:96:31:76:
d0:42:40:ec:23:a7:a3:f6:ac:1e:78:25:f0:00:70:2b:fd:f3:
d2:69:ab:51:52:26:d6:51:d8:75:c6:d0:7d:23:d5:96:58:75:
bd:3f:7d:75:c1:df:d6:bd:7c:3c:fb:67:9e:2e:5c:0d:82:47:
38:2b:6a:24:05:20:03:c6:56:f1:60:c8:0e:d2:5f:ad:f8:6b:
6b:be:c8:5f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:53:05 2026 by rpki-client