
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3231302e37362e37372e302f32342d3234203d3e20313337373938.roa
File: 3231302e37362e37372e302f32342d3234203d3e20313337373938.roa (raw, json)
Hash identifier: VcJRj2qDC4dJVO9GS/bULKUc3EJf+3o1NsQxWHUg/mw=
Subject key identifier: 7D:94:06:40:FB:55:12:0A:DE:E9:AB:75:06:DA:0A:5D:0F:61:5A:E8
Certificate issuer: /CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6
Certificate serial: 3736B9901879D856E3593B9ED0BC7146BD144B64
Authority key identifier: 45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3231302e37362e37372e302f32342d3234203d3e20313337373938.roa
Signing time: Thu 16 Apr 2026 08:44:48 +0000
ROA not before: Thu 16 Apr 2026 08:39:48 +0000
ROA not after: Thu 15 Apr 2027 08:44:48 +0000
asID: 137798
IP address blocks: 210.76.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 07:27:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:36:b9:90:18:79:d8:56:e3:59:3b:9e:d0:bc:71:46:bd:14:4b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6
Validity
Not Before: Apr 16 08:39:48 2026 GMT
Not After : Apr 15 08:44:48 2027 GMT
Subject: CN=7D940640FB55120ADEE9AB7506DA0A5D0F615AE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f6:62:eb:34:68:0e:3c:39:66:69:9c:39:0e:
b2:26:7c:fb:74:2e:25:54:60:1e:73:27:ec:ef:85:
50:2c:0c:1e:6f:22:55:7f:b1:fc:22:60:e8:44:9a:
42:28:82:f7:0b:52:4e:21:40:09:90:bb:33:71:9c:
bc:97:12:e7:c0:d7:dd:df:fb:01:ae:00:96:3d:79:
11:c0:d0:2f:bf:19:49:ac:bf:9b:0f:01:03:98:92:
34:6c:a1:fc:c3:7a:ac:8d:84:e2:7f:32:a4:be:de:
76:38:a1:31:c4:e4:f5:c4:f6:b5:2f:eb:b5:5f:e9:
19:b4:7d:e2:2c:98:24:39:29:25:2e:dd:90:97:57:
ea:82:da:c5:5d:c1:5a:5d:fb:59:48:76:81:ff:1e:
65:f2:e8:d7:99:86:20:76:02:d5:91:60:85:5d:32:
b3:a9:d8:dc:73:a6:8c:95:bc:36:a6:88:f8:c1:ea:
db:28:98:dd:c3:d2:ef:98:fc:a4:4d:2d:07:45:20:
f4:ee:34:9e:bf:26:79:15:8c:0d:28:d4:0b:cf:56:
f9:a8:78:5e:c0:68:94:64:69:b4:bf:4f:cc:7c:8c:
41:f1:5c:30:28:9e:e5:a0:07:9f:d4:8b:1b:7e:da:
8f:13:ca:dd:27:94:37:79:31:1c:42:c6:3e:71:99:
08:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:94:06:40:FB:55:12:0A:DE:E9:AB:75:06:DA:0A:5D:0F:61:5A:E8
X509v3 Authority Key Identifier:
keyid:45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3231302e37362e37372e302f32342d3234203d3e20313337373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.76.77.0/24
Signature Algorithm: sha256WithRSAEncryption
93:eb:b8:ad:dc:03:a0:96:67:7b:85:cc:fb:aa:a5:06:dd:08:
6f:80:5d:c9:36:33:5e:81:0d:e0:ea:5a:5b:6a:a3:d9:f4:ff:
65:22:29:59:35:70:e0:21:46:be:4d:de:03:d8:7d:0c:59:87:
f5:76:8a:60:c3:51:1a:b7:ca:48:a2:41:45:bc:ed:5e:8f:cf:
95:33:eb:f8:dc:87:60:e9:e4:50:e2:9a:a9:d8:03:de:f8:21:
23:1e:fa:bf:39:51:9c:53:f9:d4:5a:81:e3:7d:08:17:e1:ca:
c9:15:fe:25:e2:00:ae:31:48:90:cc:e7:8c:03:66:bd:49:27:
a6:b4:a4:55:b6:69:b7:43:fb:33:4d:90:35:7c:10:f6:d4:15:
ff:56:40:07:4c:84:72:a3:a0:c7:7a:ea:94:c3:b8:85:f3:4a:
fe:bf:bf:24:c9:31:35:5f:70:29:e8:8b:af:ab:46:80:18:b5:
d4:4a:5a:49:71:17:f9:7a:cc:69:38:26:46:7b:77:11:81:05:
ee:86:c1:53:9f:f9:83:86:b7:d3:1f:65:c2:3a:a0:14:61:77:
ab:f5:1a:24:f2:30:5d:e6:e8:0a:14:d2:eb:12:d2:1a:02:dd:
22:61:9f:5f:21:f7:a8:69:cb:23:da:ee:c3:68:96:ac:cc:d9:
04:d5:90:d9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:54:29 2026 by rpki-client