
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e38322e302f32342d3234203d3e2034383038.roa
File: 3132322e3230302e38322e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier: iXPCWNvWzlbiyKQV1tytAGROlhAXSqRq6+d7dUU2dC0=
Subject key identifier: 85:03:0F:3C:AC:34:6A:84:30:61:2A:36:8D:E0:AE:EE:9A:CE:C9:02
Certificate issuer: /CN=29BAE90B795BA6BB50390EB31964E6F823BAB331
Certificate serial: 7CA538CEC509F53E6D5CA1C3E3F854669F798E09
Authority key identifier: 29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e38322e302f32342d3234203d3e2034383038.roa
Signing time: Wed 15 Apr 2026 02:50:22 +0000
ROA not before: Wed 15 Apr 2026 02:45:22 +0000
ROA not after: Wed 14 Apr 2027 02:50:22 +0000
asID: 4808
IP address blocks: 122.200.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl
rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 13:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:a5:38:ce:c5:09:f5:3e:6d:5c:a1:c3:e3:f8:54:66:9f:79:8e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29BAE90B795BA6BB50390EB31964E6F823BAB331
Validity
Not Before: Apr 15 02:45:22 2026 GMT
Not After : Apr 14 02:50:22 2027 GMT
Subject: CN=85030F3CAC346A8430612A368DE0AEEE9ACEC902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:65:34:ae:35:27:31:e4:0e:91:13:46:e4:a7:
4f:37:bf:0b:d6:b4:ea:dc:1c:3b:0e:6f:9d:61:58:
25:4a:5c:49:da:d9:e2:ca:c8:fd:b8:2c:c2:4f:81:
f0:29:44:a7:f0:aa:7f:dc:1b:0b:44:75:98:0c:e7:
fa:1c:ff:f2:18:28:5b:ec:ed:86:2e:f6:46:11:af:
f5:1b:a4:d0:b5:7f:3a:66:6f:f4:ea:dd:44:08:45:
fd:77:96:16:b5:28:36:7c:a0:34:5a:82:8e:fd:39:
4e:71:5f:d5:04:28:d0:79:19:88:5f:39:1e:16:36:
62:26:59:11:a3:36:3e:17:1e:5e:45:51:c2:8e:27:
3f:b4:24:57:3c:3e:23:6e:1a:81:10:9b:4f:32:e6:
5c:68:d4:d3:fa:fe:0e:3e:fe:c2:76:e9:7a:c6:ee:
2b:d4:f9:46:11:b1:d6:47:70:a6:d9:71:8a:8c:fb:
a8:c9:31:66:be:1d:08:3c:91:85:b1:00:41:77:e0:
7c:1a:a1:f5:df:6f:83:02:c2:54:60:13:68:f0:32:
62:f4:02:35:cc:7a:40:15:d0:2d:9f:f5:4d:23:17:
c3:d6:09:50:46:14:a2:f2:96:7b:97:91:19:e0:cf:
a7:e9:ed:dd:5e:46:50:bd:12:c7:c4:46:6a:fb:42:
d9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:03:0F:3C:AC:34:6A:84:30:61:2A:36:8D:E0:AE:EE:9A:CE:C9:02
X509v3 Authority Key Identifier:
keyid:29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e38322e302f32342d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.200.82.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:c2:56:ed:dd:56:2e:a7:fe:50:4b:99:49:96:ec:02:84:f6:
88:99:25:51:93:2f:5a:d6:ae:21:bc:ea:3f:97:5c:cc:04:71:
ce:a3:fe:62:82:b7:4f:0c:78:c7:39:ab:39:1c:61:16:83:b1:
cd:ee:2b:65:d8:9d:e4:26:42:30:41:4c:3a:6d:57:1d:43:b7:
67:22:af:c9:3c:fc:37:4c:64:dd:74:ea:fe:b9:30:f4:39:c5:
ed:54:46:f0:9e:fe:3e:fd:a7:68:05:42:db:bd:e0:f8:14:6d:
62:bf:5e:c3:4c:ef:86:b2:1c:5a:f5:23:4d:b0:1d:68:55:03:
ea:5b:2d:a6:85:83:8b:c8:02:7c:d8:19:6c:90:24:3d:b5:12:
c1:4c:ec:f4:32:a0:d5:16:c7:90:4c:b7:27:cc:ca:19:e7:ed:
49:e9:08:a9:d3:bc:cd:a1:de:a4:ef:20:32:e0:63:29:f0:ae:
d6:24:b3:28:78:fd:d4:96:f3:43:24:e3:5c:6f:c9:7f:f7:ac:
bc:57:06:71:16:04:4b:f8:4d:4d:5d:16:84:a3:82:6f:9a:8b:
3f:62:4c:99:1c:01:48:58:dd:ce:fb:0d:6f:dc:7c:e2:4b:6b:
7e:46:9a:50:45:ec:db:de:77:fe:64:08:3f:50:1c:a5:76:19:
13:db:1b:dd
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUfKU4zsUJ9T5tXKHD4/hUZp95jgkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjlCQUU5MEI3OTVCQTZCQjUwMzkwRUIzMTk2NEU2Rjgy
M0JBQjMzMTAeFw0yNjA0MTUwMjQ1MjJaFw0yNzA0MTQwMjUwMjJaMDMxMTAvBgNV
BAMTKDg1MDMwRjNDQUMzNDZBODQzMDYxMkEzNjhERTBBRUVFOUFDRUM5MDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqZTSuNScx5A6RE0bkp083vwvW
tOrcHDsOb51hWCVKXEna2eLKyP24LMJPgfApRKfwqn/cGwtEdZgM5/oc//IYKFvs
7YYu9kYRr/UbpNC1fzpmb/Tq3UQIRf13lha1KDZ8oDRago79OU5xX9UEKNB5GYhf
OR4WNmImWRGjNj4XHl5FUcKOJz+0JFc8PiNuGoEQm08y5lxo1NP6/g4+/sJ26XrG
7ivU+UYRsdZHcKbZcYqM+6jJMWa+HQg8kYWxAEF34HwaofXfb4MCwlRgE2jwMmL0
AjXMekAV0C2f9U0jF8PWCVBGFKLylnuXkRngz6fp7d1eRlC9EsfERmr7Qtk1AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUhQMPPKw0aoQwYSo2jeCu7prOyQIwHwYDVR0j
BBgwFoAUKbrpC3lbprtQOQ6zGWTm+CO6szEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDg3MTE0OTY1MDY0MDg5Ny8wLzI5QkFFOTBCNzk1QkE2QkI1MDM5MEVCMzE5NjRF
NkY4MjNCQUIzMzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMjlCQUU5MEI3OTVCQTZCQjUwMzkwRUIzMTk2NEU2RjgyM0JBQjMzMS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk0ODcxMTQ5NjUwNjQwODk3LzAvMzEzMjMyMmUzMjMw
MzAyZTM4MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAHrIUjANBgkqhkiG9w0BAQsFAAOCAQEAx8JW7d1WLqf+UEuZSZbsAoT2iJkl
UZMvWtauIbzqP5dczARxzqP+YoK3Twx4xzmrORxhFoOxze4rZdid5CZCMEFMOm1X
HUO3ZyKvyTz8N0xk3XTq/rkw9DnF7VRG8J7+Pv2naAVC273g+BRtYr9ew0zvhrIc
WvUjTbAdaFUD6lstpoWDi8gCfNgZbJAkPbUSwUzs9DKg1RbHkEy3J8zKGeftSekI
qdO8zaHepO8gMuBjKfCu1iSzKHj91JbzQyTjXG/Jf/esvFcGcRYES/hNTV0WhKOC
b5qLP2JMmRwBSFjdzvsNb9x84ktrfkaaUEXs2953/mQIP1AcpXYZE9sb3Q==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:21:15 2026 by rpki-client