
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131382e3234342e3232342e302f32302d3230203d3e2034383437.roa
File: 3131382e3234342e3232342e302f32302d3230203d3e2034383437.roa (raw, json)
Hash identifier: m6epqEtUYD4SGanpCKyp2r0vVNNtln8lQemUQNgltGM=
Subject key identifier: 2E:D3:6B:EA:B9:46:4D:FA:1D:8F:29:26:C7:13:74:F0:0D:A3:F3:11
Certificate issuer: /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Certificate serial: 1D60D93BAD7140F79A6AFB5F3D68B3820147E222
Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131382e3234342e3232342e302f32302d3230203d3e2034383437.roa
Signing time: Wed 15 Apr 2026 04:05:03 +0000
ROA not before: Wed 15 Apr 2026 04:00:03 +0000
ROA not after: Wed 14 Apr 2027 04:05:03 +0000
asID: 4847
IP address blocks: 118.244.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 19:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:60:d9:3b:ad:71:40:f7:9a:6a:fb:5f:3d:68:b3:82:01:47:e2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Validity
Not Before: Apr 15 04:00:03 2026 GMT
Not After : Apr 14 04:05:03 2027 GMT
Subject: CN=2ED36BEAB9464DFA1D8F2926C71374F00DA3F311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:aa:be:9f:9e:5d:aa:85:17:69:d9:24:b1:0a:
ee:93:75:45:6c:94:8e:c8:b5:19:44:f6:c6:31:3f:
ad:4d:18:57:36:90:d6:74:03:35:8f:d0:da:b3:4e:
07:53:0d:d7:71:dc:e9:f6:86:b8:cf:77:7c:05:ad:
d1:35:5f:45:d0:26:ce:c2:28:4e:c5:ac:b2:9b:9a:
e2:94:d4:ba:9e:11:d5:19:2d:07:2e:0f:30:36:f7:
c0:b7:92:31:c5:26:9d:4e:cd:49:f4:b3:a1:16:de:
fc:ab:3c:96:3a:d2:ed:f8:eb:7a:84:f9:3f:ef:bf:
e7:78:aa:5b:5b:69:f0:93:3c:91:7c:34:da:51:5e:
cf:69:f3:60:f0:8f:3e:34:04:6f:3e:cb:bc:b9:3e:
b8:f9:9f:a2:b7:a9:6b:58:8d:9b:94:4a:37:89:2b:
4f:af:22:80:7a:86:63:3f:99:f6:26:19:3b:6b:1f:
6e:f2:c9:f6:30:28:a2:df:76:e7:d0:76:42:c1:43:
26:94:1f:67:8d:c8:38:68:a3:da:7b:ba:8f:bf:6e:
7b:71:c7:e9:a3:1d:79:f7:b4:24:dd:48:da:3e:73:
c4:c2:5d:d8:ad:0d:15:45:8c:c2:cb:ce:14:88:97:
52:4b:63:91:bf:1a:bd:a4:be:d0:cd:a0:4c:92:53:
cf:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D3:6B:EA:B9:46:4D:FA:1D:8F:29:26:C7:13:74:F0:0D:A3:F3:11
X509v3 Authority Key Identifier:
keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131382e3234342e3232342e302f32302d3230203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.244.224.0/20
Signature Algorithm: sha256WithRSAEncryption
17:46:fa:91:41:9d:36:58:c5:68:c2:37:56:3f:da:02:b9:f6:
24:d6:f1:4b:2e:8d:17:ec:df:0c:5b:1a:11:41:ee:0c:68:8a:
32:47:5f:71:18:6a:d9:67:ec:cd:07:9c:8c:e1:fc:42:d8:65:
9b:b4:1a:7c:13:61:b8:85:66:7a:e2:a0:6e:db:bb:2d:db:49:
15:42:5f:f1:1e:c9:52:e5:73:90:57:25:ac:c0:d5:65:c6:7e:
f5:7b:da:33:21:d6:ec:9c:41:73:1f:cf:32:21:62:10:13:ae:
38:d7:30:bb:97:a2:8e:69:e8:1a:67:53:4e:3b:92:05:b7:21:
11:92:23:98:50:d9:77:97:e8:69:21:01:59:4b:1f:a0:e8:9d:
27:dc:39:ee:3b:13:24:7d:a7:9f:3d:f3:71:54:f5:46:c1:70:
b4:b6:cd:4f:3a:d2:d5:56:13:2f:f0:39:83:ba:38:7a:40:f9:
44:80:45:8f:12:f4:e4:04:5a:c0:36:bf:26:81:7b:8d:c2:60:
93:98:31:0a:ca:a8:4f:ab:66:02:db:18:b5:05:e1:e9:79:b4:
e3:aa:6c:53:bf:6b:c5:4d:15:f2:96:b3:a1:ad:c6:87:e7:70:
b3:c4:b4:cb:8a:7d:4e:55:b6:ae:de:20:8d:29:9b:e9:54:77:
0d:f6:7a:c9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:50:48 2026 by rpki-client