
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131352e3138322e36342e302f32302d3230203d3e2034383437.roa
File: 3131352e3138322e36342e302f32302d3230203d3e2034383437.roa (raw, json)
Hash identifier: ZGRwUtJLix9kzVxNjC3YQJRkZRNLNpNgzi8oKXTZ9Y4=
Subject key identifier: 77:06:FB:2C:89:A4:2E:C9:C3:2E:C5:E5:A2:ED:73:17:08:E4:85:3A
Certificate issuer: /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Certificate serial: 3BF7A960AB332A3C87CF3D428C7B500A30A117B9
Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131352e3138322e36342e302f32302d3230203d3e2034383437.roa
Signing time: Wed 15 Apr 2026 04:02:12 +0000
ROA not before: Wed 15 Apr 2026 03:57:12 +0000
ROA not after: Wed 14 Apr 2027 04:02:12 +0000
asID: 4847
IP address blocks: 115.182.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 19:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:f7:a9:60:ab:33:2a:3c:87:cf:3d:42:8c:7b:50:0a:30:a1:17:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Validity
Not Before: Apr 15 03:57:12 2026 GMT
Not After : Apr 14 04:02:12 2027 GMT
Subject: CN=7706FB2C89A42EC9C32EC5E5A2ED731708E4853A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:56:25:a2:00:24:61:8a:4f:2f:45:6b:80:45:
7f:b9:63:82:28:68:7b:9e:bd:b2:49:2a:88:bf:7e:
14:1b:fa:ba:57:90:31:c7:fe:63:98:27:b4:e6:5c:
7e:ac:97:ad:b9:bf:e5:57:77:a4:2b:e9:bb:96:df:
7c:79:f9:71:0d:db:8c:4c:c6:85:09:1b:1a:f9:a0:
9b:01:43:cf:05:30:14:6d:9b:0d:36:64:ab:ae:a8:
a8:cc:83:2a:31:5a:41:b1:6b:3f:1c:be:b9:7c:0a:
e7:6d:e4:ac:6a:5d:19:d4:b4:7a:7d:25:75:9f:21:
c8:e1:8f:1f:c4:c4:4a:49:8a:e9:e4:3b:c8:5a:c5:
cd:12:7e:2d:8d:75:31:11:2e:8a:00:f0:70:c3:09:
e9:82:e2:26:11:49:18:ac:d1:2e:d9:c7:76:9a:3a:
47:d0:35:98:43:7d:7e:3b:0d:69:8d:e5:0b:2a:19:
49:68:df:89:bd:be:f5:a2:b2:39:51:ac:1a:43:8c:
7c:11:03:3a:91:1d:9b:87:b0:09:0e:0b:80:15:27:
99:4d:d5:a0:c2:ee:6d:92:d4:69:72:95:62:e0:b2:
a7:0e:cd:6f:14:9b:36:60:a9:13:a5:0c:6b:f2:95:
6a:6a:40:64:ee:31:bd:30:3b:4a:90:a6:b5:40:df:
e7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:06:FB:2C:89:A4:2E:C9:C3:2E:C5:E5:A2:ED:73:17:08:E4:85:3A
X509v3 Authority Key Identifier:
keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131352e3138322e36342e302f32302d3230203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.182.64.0/20
Signature Algorithm: sha256WithRSAEncryption
3d:f0:ce:7f:cb:3c:45:44:d3:2c:f2:65:9c:15:3e:17:24:75:
33:cf:a7:5c:41:e7:7c:a6:98:96:5d:e2:dd:c1:13:19:11:18:
4e:09:e5:b1:23:f5:39:9d:50:c6:3e:32:e0:58:4b:22:ae:ef:
e8:60:45:26:7d:be:35:7d:99:d5:75:e0:9d:01:a5:b2:ac:32:
72:11:86:31:31:75:f2:26:d4:ff:ae:04:a4:93:09:4e:96:40:
46:b3:ff:a1:65:7e:a1:73:b9:2a:35:7c:cc:5e:c3:c4:f3:0d:
c4:f6:bd:47:43:c8:a4:67:88:8c:0a:70:5a:c9:c7:cd:46:40:
72:d6:38:4c:f4:5e:8d:c5:19:83:64:2b:b7:a0:e0:95:50:2c:
4a:2b:b9:bd:31:22:1c:69:f5:3c:a5:d3:aa:a9:c6:16:99:2b:
37:60:6c:f5:97:b1:45:22:87:e9:36:69:88:ad:3f:4b:50:3f:
35:12:ea:83:96:e3:16:a4:28:45:2f:7b:c9:1d:60:2b:f5:e7:
94:8d:31:7a:00:f2:b7:34:a5:de:a6:0a:e2:03:3b:6c:02:89:
92:cd:2c:18:a9:3a:1c:f8:e9:43:7b:19:99:a7:f0:a5:5d:14:
e5:10:e8:de:c8:bf:fd:2f:66:ea:9c:20:90:27:0c:ae:a4:f6:
39:4f:07:95
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUO/epYKszKjyHzz1CjHtQCjChF7kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUIyN0MyNkY4RjdFQ0U1Mzk3MkQ4MDkzM0Y1MDNDMDky
MjJFOEY5RjAeFw0yNjA0MTUwMzU3MTJaFw0yNzA0MTQwNDAyMTJaMDMxMTAvBgNV
BAMTKDc3MDZGQjJDODlBNDJFQzlDMzJFQzVFNUEyRUQ3MzE3MDhFNDg1M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgViWiACRhik8vRWuARX+5Y4Io
aHuevbJJKoi/fhQb+rpXkDHH/mOYJ7TmXH6sl625v+VXd6Qr6buW33x5+XEN24xM
xoUJGxr5oJsBQ88FMBRtmw02ZKuuqKjMgyoxWkGxaz8cvrl8Cudt5KxqXRnUtHp9
JXWfIcjhjx/ExEpJiunkO8haxc0Sfi2NdTERLooA8HDDCemC4iYRSRis0S7Zx3aa
OkfQNZhDfX47DWmN5QsqGUlo34m9vvWisjlRrBpDjHwRAzqRHZuHsAkOC4AVJ5lN
1aDC7m2S1GlylWLgsqcOzW8UmzZgqROlDGvylWpqQGTuMb0wO0qQprVA3+ftAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUdwb7LImkLsnDLsXlou1zFwjkhTowHwYDVR0j
BBgwFoAUGyfCb49+zlOXLYCTP1A8CSIuj58wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3
MDk1NTkyNDA3MzU0NTczMS8wLzFCMjdDMjZGOEY3RUNFNTM5NzJEODA5MzNGNTAz
QzA5MjIyRThGOUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMUIyN0MyNkY4RjdFQ0U1Mzk3MkQ4MDkzM0Y1MDNDMDkyMjJFOEY5Ri5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDcwOTU1OTI0MDczNTQ1NzMxLzAvMzEzMTM1MmUzMTM4
MzIyZTM2MzQyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBHO2QDANBgkqhkiG9w0BAQsFAAOCAQEAPfDOf8s8RUTTLPJlnBU+FyR1M8+n
XEHnfKaYll3i3cETGREYTgnlsSP1OZ1Qxj4y4FhLIq7v6GBFJn2+NX2Z1XXgnQGl
sqwychGGMTF18ibU/64EpJMJTpZARrP/oWV+oXO5KjV8zF7DxPMNxPa9R0PIpGeI
jApwWsnHzUZActY4TPRejcUZg2Qrt6DglVAsSiu5vTEiHGn1PKXTqqnGFpkrN2Bs
9ZexRSKH6TZpiK0/S1A/NRLqg5bjFqQoRS97yR1gK/XnlI0xegDytzSl3qYK4gM7
bAKJks0sGKk6HPjpQ3sZmafwpV0U5RDo3si//S9m6pwgkCcMrqT2OU8HlQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:00:06 2026 by rpki-client