
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131352e3138322e33322e302f32302d3230203d3e2034383437.roa
File: 3131352e3138322e33322e302f32302d3230203d3e2034383437.roa (raw, json)
Hash identifier: tKJSKJqY+QGfxO7KBBXkz9adJeqQaIzD9aPe+NUG0nQ=
Subject key identifier: 33:24:4A:12:5B:47:F2:38:5D:8C:7F:7B:56:45:3D:A7:17:4F:A0:72
Certificate issuer: /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Certificate serial: 7A09F5BF2AD2199C02A486BF628674653077A3CE
Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131352e3138322e33322e302f32302d3230203d3e2034383437.roa
Signing time: Wed 15 Apr 2026 04:02:13 +0000
ROA not before: Wed 15 Apr 2026 03:57:13 +0000
ROA not after: Wed 14 Apr 2027 04:02:13 +0000
asID: 4847
IP address blocks: 115.182.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 12:18:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:09:f5:bf:2a:d2:19:9c:02:a4:86:bf:62:86:74:65:30:77:a3:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Validity
Not Before: Apr 15 03:57:13 2026 GMT
Not After : Apr 14 04:02:13 2027 GMT
Subject: CN=33244A125B47F2385D8C7F7B56453DA7174FA072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:61:45:57:b2:87:14:d9:f0:89:f4:c0:8f:55:
c7:2f:70:a5:01:4c:b3:bb:0d:84:91:3e:2e:ec:a5:
27:a2:46:fd:17:45:db:04:d3:90:c4:86:73:a2:8c:
e8:4b:6d:3c:10:80:b0:c1:4d:c0:a6:40:90:dc:43:
78:cd:f2:9d:4b:67:ff:a4:0f:57:2d:94:43:a9:e3:
bd:74:df:57:67:3e:67:88:b8:ea:fd:1a:1c:fa:32:
50:63:20:b5:18:c9:47:cd:d4:9b:4d:48:9e:ed:5b:
28:a3:e1:59:94:6b:80:40:5a:bd:22:a2:5f:9b:a8:
95:6f:95:54:7b:7a:24:b1:68:da:6f:cf:02:24:38:
69:4e:09:ce:2f:24:ed:9c:c9:75:ef:66:1d:9c:10:
d6:1a:51:96:50:c4:01:6a:59:59:c5:e7:be:99:90:
cc:5b:b1:28:a6:54:0b:44:12:12:9d:ff:c2:5e:91:
4b:29:78:85:12:36:fb:a8:b7:6a:d5:22:69:2c:d5:
ce:52:8a:2e:0f:e7:bc:77:cd:9d:5d:8f:6e:1c:27:
f9:90:55:16:cb:74:d6:8b:02:f0:35:bc:f3:3a:d2:
80:a6:98:2c:57:f2:05:b4:54:cb:eb:39:f4:d4:6f:
71:6d:ae:c0:29:a3:f0:7a:f5:bc:80:b3:37:1e:65:
22:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:24:4A:12:5B:47:F2:38:5D:8C:7F:7B:56:45:3D:A7:17:4F:A0:72
X509v3 Authority Key Identifier:
keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131352e3138322e33322e302f32302d3230203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.182.32.0/20
Signature Algorithm: sha256WithRSAEncryption
59:5f:d0:fc:d5:9e:ac:9b:7e:b3:be:6a:17:50:86:cb:0e:0a:
75:40:75:c2:8e:1a:49:ca:ac:d4:67:d8:40:c8:ae:29:af:39:
65:f3:fc:f0:83:50:d8:ce:f3:ba:dd:b6:55:2f:4f:12:77:1f:
d6:84:43:5d:1a:5f:6e:c0:f8:64:f0:59:27:68:ca:00:fa:cf:
bf:96:d2:c9:03:55:05:9d:08:85:03:64:e0:64:84:2d:8d:73:
79:fc:09:c4:73:4b:b3:70:2f:70:c0:c4:cc:77:c9:30:a2:2c:
43:b1:85:61:eb:06:68:12:5b:8d:4d:c0:39:a0:b1:f9:c7:e9:
a1:4f:f7:70:b8:04:af:66:e7:e2:08:ae:d9:72:40:d0:e7:29:
f2:3b:e8:fb:19:b2:4f:e9:25:68:4e:2d:38:d0:ea:2d:4f:93:
04:a7:91:cd:57:eb:b5:b9:23:93:b0:ea:e1:1e:75:0a:f2:27:
c4:45:52:38:b9:bc:4a:cc:b5:c1:ec:bb:8c:4e:ab:e8:66:8d:
83:09:49:76:9f:89:d5:c0:fd:53:a7:03:2a:83:aa:a6:e0:81:
e4:d1:b1:20:d9:58:7f:f4:97:cb:4c:1b:1f:57:1f:40:5d:e5:
ee:2d:40:4e:e2:59:83:24:0a:e6:19:69:48:d7:1e:a4:5b:75:
24:a2:9c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:47:54 2026 by rpki-client