
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e38322e302f32342d3234203d3e2034383437.roa
File: 3132322e3230302e38322e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier: Xp6isEa2ewBI3m6lqm1H70tKTkaKIvsLOOgR2gG3b8k=
Subject key identifier: 18:57:BC:76:36:B9:EF:88:21:C7:23:8B:46:19:A6:6D:D7:D0:F1:EE
Certificate issuer: /CN=29BAE90B795BA6BB50390EB31964E6F823BAB331
Certificate serial: 204F4A7B72446BE4B6E7239520F5622891CFBF71
Authority key identifier: 29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e38322e302f32342d3234203d3e2034383437.roa
Signing time: Wed 15 Apr 2026 02:50:21 +0000
ROA not before: Wed 15 Apr 2026 02:45:21 +0000
ROA not after: Wed 14 Apr 2027 02:50:21 +0000
asID: 4847
IP address blocks: 122.200.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl
rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 13:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:4f:4a:7b:72:44:6b:e4:b6:e7:23:95:20:f5:62:28:91:cf:bf:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29BAE90B795BA6BB50390EB31964E6F823BAB331
Validity
Not Before: Apr 15 02:45:21 2026 GMT
Not After : Apr 14 02:50:21 2027 GMT
Subject: CN=1857BC7636B9EF8821C7238B4619A66DD7D0F1EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:69:86:4f:a6:30:fe:7f:dd:56:ef:3c:e8:9e:
9f:3c:b9:a4:f1:9d:00:c1:9f:87:3b:29:bd:41:31:
71:de:be:67:43:26:d0:4b:6c:fd:0b:f0:fe:cd:1f:
cf:2d:0e:00:73:93:99:16:55:4e:03:5f:2e:10:f9:
db:24:f8:22:2e:39:5d:c2:c5:d2:43:03:8a:f4:e2:
35:63:05:aa:d0:f9:9b:a6:dc:c3:27:f6:79:13:58:
26:bb:c8:b7:c0:c0:f0:8f:72:67:27:6b:ce:2c:cf:
da:75:5b:cc:18:5d:f5:1b:57:41:6e:5e:e3:27:96:
1b:78:c2:07:31:2e:70:6a:ca:87:01:87:f7:4a:6f:
a0:0c:2b:29:63:86:db:49:6b:22:bf:1d:8a:66:3f:
a1:c6:0a:95:22:c7:95:e8:64:00:8b:85:25:62:31:
e8:85:b6:40:bf:a0:37:ad:29:f3:24:82:1b:ab:32:
b3:28:d4:63:b1:56:08:bf:10:ec:5d:3f:57:eb:93:
61:3d:a3:af:ce:19:f1:a3:d7:16:6b:e8:65:e2:d6:
d1:97:40:79:67:be:6c:54:0f:6f:3d:39:c0:0c:0c:
16:39:81:47:22:f8:ef:e9:9c:bd:51:7a:2d:82:71:
ac:d1:c2:6b:b0:c1:8a:18:b0:4d:6f:03:87:4c:dd:
8b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:57:BC:76:36:B9:EF:88:21:C7:23:8B:46:19:A6:6D:D7:D0:F1:EE
X509v3 Authority Key Identifier:
keyid:29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e38322e302f32342d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.200.82.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:d1:47:84:11:e4:0c:2d:af:38:fb:2c:67:2e:81:e6:67:4b:
37:1c:6a:83:79:3c:13:8c:a8:2d:56:16:83:f7:46:ce:ee:2e:
b6:83:50:e1:07:ef:f7:c3:42:1b:4b:30:77:e4:d6:a2:10:f8:
c0:f0:b0:68:ce:fa:cb:c6:69:c9:85:b2:0a:0b:d6:3a:56:4e:
65:0b:fe:20:93:9e:c5:0a:85:e8:fa:0e:52:4a:62:1d:4d:dc:
63:94:7d:6c:92:80:01:48:aa:74:9c:a3:d1:52:47:5d:80:a0:
68:8f:af:d9:c8:50:7a:f7:85:b8:67:7e:da:e2:a3:a5:2b:40:
64:15:43:de:4e:93:bc:33:16:89:47:cf:62:8f:cf:fe:3a:5d:
62:a4:b2:4d:99:ef:8b:c2:a3:77:54:07:08:72:51:55:a9:e4:
34:c7:27:35:0e:a1:37:2d:51:88:d4:5e:e8:6a:02:f8:6d:a4:
d8:b7:3d:52:80:ea:46:b4:fd:bc:57:80:13:a6:3c:ea:dc:9b:
12:28:28:55:25:54:ad:94:bf:bb:f7:c0:16:56:95:a8:38:fd:
6c:01:cd:ac:07:86:e5:51:ca:a1:6f:73:85:38:57:33:56:27:
34:36:de:b4:68:55:58:40:84:e1:31:33:23:e9:6d:14:5d:c5:
dd:c9:2d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:41:25 2026 by rpki-client