
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131352e3138322e302e302f32302d3230203d3e2034383437.roa
File: 3131352e3138322e302e302f32302d3230203d3e2034383437.roa (raw, json)
Hash identifier: H2NF0ZCGg8F4Qez4J59Te6xk4l9715440z4gbrP/9wg=
Subject key identifier: 9B:70:94:97:D3:38:3F:D6:6F:E3:A3:60:63:9E:EC:4C:E0:7E:7E:92
Certificate issuer: /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Certificate serial: 2D1C72DADC39381C0DEE2EC225C9BECAB17AC0AD
Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131352e3138322e302e302f32302d3230203d3e2034383437.roa
Signing time: Wed 15 Apr 2026 04:02:13 +0000
ROA not before: Wed 15 Apr 2026 03:57:13 +0000
ROA not after: Wed 14 Apr 2027 04:02:13 +0000
asID: 4847
IP address blocks: 115.182.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 09:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:1c:72:da:dc:39:38:1c:0d:ee:2e:c2:25:c9:be:ca:b1:7a:c0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Validity
Not Before: Apr 15 03:57:13 2026 GMT
Not After : Apr 14 04:02:13 2027 GMT
Subject: CN=9B709497D3383FD66FE3A360639EEC4CE07E7E92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e0:85:da:54:bf:6f:c9:52:e4:61:cb:13:de:
f8:ed:c5:d5:32:a6:d4:f6:b3:9d:b2:40:72:3b:b2:
d2:38:93:01:42:5d:5e:13:08:10:e6:98:53:1a:31:
63:03:69:f9:45:f8:a6:a9:38:0f:66:a6:6c:c8:13:
aa:a1:55:61:a6:82:c3:d4:4d:6d:19:8f:2e:55:63:
f5:58:18:a5:2c:9a:55:4b:f2:23:9d:30:97:63:15:
3c:85:71:46:8c:56:40:ca:52:fa:53:0c:52:9a:dd:
be:69:6b:af:4c:0a:53:9c:72:5b:39:b2:f0:bd:f7:
af:c1:22:7b:03:89:5e:3e:85:c9:83:94:86:5f:3f:
cb:e3:2b:12:e7:0a:7e:9c:a4:fd:01:2c:fe:66:69:
62:5b:6f:31:17:d3:a7:ab:72:a3:70:e3:25:16:02:
c5:30:56:07:30:de:1c:10:c4:9c:42:39:68:81:62:
cf:66:9d:ac:a0:04:29:45:f4:a1:09:7c:4d:ec:4f:
1a:4b:b9:61:76:be:34:b2:1c:06:9f:83:20:1a:56:
62:11:91:ac:c7:09:d5:c1:14:b8:e3:b4:8e:06:1f:
8f:fa:5a:29:d8:65:60:fc:e0:6a:1c:ea:81:14:72:
b1:a4:2b:16:f2:fa:0d:63:90:32:0c:03:d3:e1:59:
b2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:70:94:97:D3:38:3F:D6:6F:E3:A3:60:63:9E:EC:4C:E0:7E:7E:92
X509v3 Authority Key Identifier:
keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131352e3138322e302e302f32302d3230203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.182.0.0/20
Signature Algorithm: sha256WithRSAEncryption
be:54:60:1d:b1:fd:b7:e5:7b:71:5c:1e:b6:5a:a1:bb:f9:6a:
8d:db:59:9a:a2:2c:aa:8d:33:2a:6b:f9:95:e7:1a:37:f9:20:
ff:0f:be:19:c6:15:6e:c6:f5:74:25:0a:7e:a8:de:9d:de:e4:
9c:20:c3:bd:ed:38:c9:a4:ee:16:8c:dd:c6:70:f3:cb:ec:5d:
7e:a7:44:f4:75:b9:b3:c4:0a:cb:6c:b3:ef:d8:66:65:52:aa:
af:fa:c7:5a:32:d0:6c:53:6e:0f:7a:9e:1b:74:3f:0d:e8:cc:
c4:5d:d3:41:8c:56:a9:40:fe:d4:69:a5:3f:80:05:61:09:f0:
f7:5c:11:5e:03:08:53:fd:c5:d2:50:d3:68:65:c0:71:f2:16:
90:49:eb:27:84:7c:ba:fb:72:db:bd:57:41:a0:b6:78:ec:e7:
10:13:77:08:83:b0:69:a0:59:66:ca:2f:ec:50:6b:68:8e:04:
d0:1d:6d:28:fd:67:6c:ed:b9:51:ef:75:0c:40:02:c7:5d:4e:
94:18:98:a9:1e:05:14:52:84:c4:ba:33:26:ec:65:5d:c5:bc:
c9:06:2a:be:ee:cb:74:5d:3b:44:c3:64:34:a3:ec:7d:5d:62:
50:8c:aa:52:ca:15:a6:4c:54:53:eb:31:68:d9:77:df:49:e0:
ce:ea:05:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:31:11 2026 by rpki-client