
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3132332e3139362e3131322e302f32302d3230203d3e2034383437.roa
File: 3132332e3139362e3131322e302f32302d3230203d3e2034383437.roa (raw, json)
Hash identifier: 2itoERGERx6yceZDGkg7UBHGw9EIrUtx+RgLb85v4mM=
Subject key identifier: 77:B5:AA:EF:09:02:F1:E6:D8:12:C2:C5:7D:9F:BC:7E:F0:B3:F7:B2
Certificate issuer: /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Certificate serial: 0ABE1014F7442CB6E97EBF461048D8359BD36617
Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3132332e3139362e3131322e302f32302d3230203d3e2034383437.roa
Signing time: Wed 15 Apr 2026 04:05:03 +0000
ROA not before: Wed 15 Apr 2026 04:00:03 +0000
ROA not after: Wed 14 Apr 2027 04:05:03 +0000
asID: 4847
IP address blocks: 123.196.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 12:18:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:be:10:14:f7:44:2c:b6:e9:7e:bf:46:10:48:d8:35:9b:d3:66:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Validity
Not Before: Apr 15 04:00:03 2026 GMT
Not After : Apr 14 04:05:03 2027 GMT
Subject: CN=77B5AAEF0902F1E6D812C2C57D9FBC7EF0B3F7B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4a:41:ef:d7:32:92:0d:ec:6c:e6:2b:d8:fb:
d9:39:d2:40:22:eb:6f:05:75:d8:61:bc:75:ea:d2:
db:94:3e:06:1d:52:c5:51:dc:c2:42:b6:09:81:e1:
a9:eb:f1:f8:cd:41:b3:bc:93:1e:41:89:5f:f0:1a:
dc:eb:de:4c:8c:2a:6c:fc:83:e5:d8:e3:4b:63:07:
e2:7d:44:33:25:e8:24:3d:6a:82:6b:e1:c8:a4:4d:
b4:a9:c7:45:1a:b3:12:20:0b:c9:95:f7:64:05:0d:
a3:b2:79:cb:8d:01:08:d3:21:7a:c6:e0:94:11:b3:
e9:32:37:ef:48:03:28:b7:11:67:41:fa:ab:a5:b8:
3c:ed:f4:c5:d6:ef:25:33:bb:c9:ec:75:dc:43:72:
39:26:95:82:be:97:cd:7c:84:76:1c:0a:cc:3c:97:
bf:d1:c8:f4:29:82:74:a5:74:82:89:50:4a:8e:f5:
bf:7a:9b:b6:74:9c:a9:d7:59:4b:53:e3:f0:3b:d0:
e2:6e:8b:87:e3:09:7d:b9:50:9e:41:63:a7:68:dd:
9c:18:1b:64:22:00:28:03:25:4d:8d:4f:78:ac:0b:
e1:71:3e:a5:00:52:d9:6d:cb:0c:54:dd:90:20:34:
4b:59:ad:fb:a5:1c:a5:fc:80:23:df:76:54:8f:07:
cf:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B5:AA:EF:09:02:F1:E6:D8:12:C2:C5:7D:9F:BC:7E:F0:B3:F7:B2
X509v3 Authority Key Identifier:
keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3132332e3139362e3131322e302f32302d3230203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.196.112.0/20
Signature Algorithm: sha256WithRSAEncryption
21:12:ef:e4:35:e5:0d:03:c4:16:7f:49:c0:4c:28:4d:36:30:
9f:08:96:1b:0d:05:c6:06:82:ea:2f:d9:1d:d3:cc:f8:55:d3:
e5:96:e1:df:98:2d:f1:67:4d:06:02:89:0f:38:c5:10:f3:c8:
fd:0f:f6:03:cf:d6:1f:85:75:94:d7:2b:6b:16:44:03:2a:48:
0b:ec:5f:9b:63:60:d0:82:0f:ea:a8:44:8c:3b:9a:61:7b:08:
35:6b:a5:86:05:94:87:58:f7:77:ee:98:61:da:5b:64:1a:38:
11:5d:ed:86:b4:51:85:27:b3:b7:92:b3:ce:e0:82:d1:8a:46:
4b:d8:3a:cd:0e:d4:58:cb:db:ce:0c:be:5f:76:ab:00:89:37:
fd:f3:0b:07:0a:d1:c2:05:36:9b:94:03:78:87:2c:ef:0e:ca:
8d:e7:a7:e6:05:4e:38:b9:5a:26:fa:dc:59:b6:71:d7:a5:cf:
03:cf:3d:d1:1c:ea:ec:58:a1:60:30:43:f4:d1:57:d0:1e:b6:
08:ee:17:67:11:35:e8:4a:36:99:72:a9:c6:76:40:ec:d2:ed:
2a:f9:6f:fc:3b:2f:82:91:63:a1:8f:bc:a9:d9:b8:2b:54:81:
e1:ef:be:31:61:96:31:6f:63:de:62:92:8f:c2:1e:c2:a0:ff:
58:91:b2:43
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:50:12 2026 by rpki-client