
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e37382e302f32342d3234203d3e2034383038.roa
File: 3132322e3230302e37382e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier: iZ+UPJZRYFv38gs9qgOgP60v6lhbfpea4kBBrPAAlmc=
Subject key identifier: 59:8F:EB:58:41:7B:D8:B2:02:67:75:78:6C:86:06:C4:50:05:B8:B2
Certificate issuer: /CN=29BAE90B795BA6BB50390EB31964E6F823BAB331
Certificate serial: 6212F960A4505691F0E7D90EA67C90D6EBC8EB6E
Authority key identifier: 29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e37382e302f32342d3234203d3e2034383038.roa
Signing time: Wed 15 Apr 2026 02:50:22 +0000
ROA not before: Wed 15 Apr 2026 02:45:22 +0000
ROA not after: Wed 14 Apr 2027 02:50:22 +0000
asID: 4808
IP address blocks: 122.200.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl
rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 13:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:12:f9:60:a4:50:56:91:f0:e7:d9:0e:a6:7c:90:d6:eb:c8:eb:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29BAE90B795BA6BB50390EB31964E6F823BAB331
Validity
Not Before: Apr 15 02:45:22 2026 GMT
Not After : Apr 14 02:50:22 2027 GMT
Subject: CN=598FEB58417BD8B2026775786C8606C45005B8B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:85:13:0c:94:47:b1:d1:6a:3d:53:b4:46:89:
27:5e:a0:ea:11:01:5f:ba:1c:35:7d:8b:24:9a:68:
24:e1:36:e6:76:2d:1a:e4:bf:df:3d:c9:59:27:3d:
bb:13:ce:b8:46:a8:3c:c7:b3:1f:6c:5f:42:70:d6:
1f:49:2f:27:35:9e:f5:5e:0f:53:5f:df:b0:76:8a:
64:e7:61:33:6b:df:fb:9b:7e:49:64:bb:d3:f4:f3:
41:e4:40:9e:41:18:c1:ea:68:c0:a3:ef:2a:f4:f0:
1d:21:aa:d8:51:98:bb:a4:4a:4b:bf:c5:af:90:bb:
a8:a4:d0:a0:9d:79:c5:57:a1:5c:66:2a:67:3a:0b:
62:a6:7c:9d:ab:90:79:f8:a1:a1:1a:60:79:6c:d7:
bc:ee:b5:94:a6:91:35:f0:df:1d:42:ed:17:8f:8b:
25:e7:b9:01:5d:4a:f1:cf:2f:97:b7:21:29:75:d6:
7a:ae:9a:56:2d:32:14:2e:31:d6:f5:7f:43:4d:e2:
a7:de:97:ef:31:68:2c:9d:ab:38:94:f4:01:66:9d:
9a:57:e4:ff:fc:ef:73:7d:3b:f3:bc:1b:a7:5c:df:
41:69:47:94:40:ed:b9:68:d1:8f:46:3a:42:dd:24:
c5:8c:d7:26:65:82:10:1d:be:73:68:79:46:fc:de:
03:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8F:EB:58:41:7B:D8:B2:02:67:75:78:6C:86:06:C4:50:05:B8:B2
X509v3 Authority Key Identifier:
keyid:29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e37382e302f32342d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.200.78.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:66:46:57:c8:6d:cc:d4:6b:34:54:f9:32:6a:b8:c1:38:e7:
af:b1:a4:99:8f:63:02:b1:9b:a5:df:b6:2a:a1:f4:0f:80:b1:
a4:13:5a:d1:75:e9:6a:b6:9e:64:c9:fe:d1:d4:07:45:fc:ca:
e7:bf:dd:fd:65:5b:aa:44:87:24:0a:78:e0:e8:be:04:4d:c4:
03:08:8c:dc:bd:02:03:6a:d9:75:28:3d:00:a1:eb:72:9a:28:
7e:0d:3c:70:bf:98:18:c7:67:39:55:71:a6:a7:ea:59:c9:de:
4a:4c:0c:76:84:8e:e5:0e:f9:e2:71:24:f0:23:2e:a8:ea:b0:
f2:b5:53:ce:2a:e9:b2:c8:77:59:2a:4b:83:de:ee:1a:23:54:
ea:b4:79:58:a4:ef:a4:04:2b:7a:47:a4:9c:44:cb:eb:14:88:
b4:fe:25:7c:90:ea:d6:ef:56:e9:f7:f1:02:c5:00:60:89:0c:
7b:1b:d6:6a:c2:3f:fd:0b:6f:38:90:5c:13:7a:1c:08:7c:e7:
1a:60:9f:46:a7:6f:67:0c:c7:2e:2c:af:73:fb:f9:87:ad:71:
5e:86:25:2b:c7:b4:e6:fe:91:58:96:1e:b7:42:93:73:67:c1:
91:3f:a0:e2:91:b6:75:8c:e0:02:d1:c8:d4:60:76:14:10:97:
f1:14:12:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:09:44 2026 by rpki-client