
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e38362e302f32342d3234203d3e2034383437.roa
File: 3132322e3230302e38362e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier: 04Q++9CzWyL1iOZV12B67bzkPYaoZgGLpQXoBVdnaCc=
Subject key identifier: DE:9A:AB:6C:51:0B:99:30:B5:7E:04:BC:50:04:F7:F4:EE:0B:18:BF
Certificate issuer: /CN=29BAE90B795BA6BB50390EB31964E6F823BAB331
Certificate serial: 695A118D871B87E8F09DC51A8A2ECB6DFACBFF68
Authority key identifier: 29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e38362e302f32342d3234203d3e2034383437.roa
Signing time: Wed 15 Apr 2026 02:50:22 +0000
ROA not before: Wed 15 Apr 2026 02:45:22 +0000
ROA not after: Wed 14 Apr 2027 02:50:22 +0000
asID: 4847
IP address blocks: 122.200.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl
rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 13:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:5a:11:8d:87:1b:87:e8:f0:9d:c5:1a:8a:2e:cb:6d:fa:cb:ff:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29BAE90B795BA6BB50390EB31964E6F823BAB331
Validity
Not Before: Apr 15 02:45:22 2026 GMT
Not After : Apr 14 02:50:22 2027 GMT
Subject: CN=DE9AAB6C510B9930B57E04BC5004F7F4EE0B18BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:62:2c:22:85:bd:b0:b6:91:f5:8a:b3:bf:1d:
ce:f4:2c:f6:19:71:1c:d4:56:d8:5f:40:7d:f1:a9:
48:4a:20:96:51:a8:6a:a5:20:7c:9f:55:ae:3f:0f:
e1:dc:1c:58:0a:c3:95:2b:f7:11:ac:fb:8a:2e:06:
cf:f6:3b:a3:d5:91:6c:4e:18:d7:7c:bb:23:04:a6:
a4:fd:ab:69:af:c8:4a:c9:a8:92:30:f1:b4:da:0f:
3a:0b:5a:93:3b:c9:b2:01:d5:96:32:9c:ef:ea:c5:
69:00:ed:10:7c:d3:5a:89:b0:07:b5:cf:2e:e7:06:
29:c6:db:17:25:b6:e9:92:72:b2:14:e0:4d:08:a4:
26:33:f5:4c:f7:76:c4:74:6e:7f:eb:d1:3d:09:a9:
5c:a3:53:3c:b6:1b:03:5e:ac:c3:ea:c5:08:76:a5:
99:d1:32:0b:1e:fc:e3:dd:75:a8:56:57:2e:b1:be:
bf:de:5e:db:4c:a0:80:2c:19:11:35:b8:44:6f:56:
24:29:a6:5c:21:89:35:08:b3:ba:ea:59:e2:27:31:
83:4b:e7:2b:5b:f6:4d:96:13:32:68:bc:db:95:95:
67:05:c5:8d:b5:d8:3a:5c:95:3b:69:5c:77:ce:ef:
82:cd:27:51:98:74:59:dc:3d:d1:f4:bc:4d:61:4c:
10:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9A:AB:6C:51:0B:99:30:B5:7E:04:BC:50:04:F7:F4:EE:0B:18:BF
X509v3 Authority Key Identifier:
keyid:29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e38362e302f32342d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.200.86.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:7c:e2:02:56:83:07:fa:b4:0d:e7:f3:b4:61:2a:58:a6:b0:
fb:52:ed:e3:a6:bd:b6:3e:fb:8e:75:c8:f5:b6:09:22:43:f1:
b9:d4:36:5a:bb:d2:d6:c9:45:b1:06:24:15:c9:61:b3:04:79:
e5:5a:9d:9f:66:6e:df:6f:0c:8b:2d:3e:6a:1c:53:b4:cc:ad:
9b:a9:54:ef:d7:4f:1a:bc:c1:73:0a:b5:8d:87:a9:37:ce:67:
02:0c:c4:b4:78:6f:e1:e5:65:d3:fc:76:fb:b0:8c:74:65:eb:
23:a8:9c:2a:35:0e:87:99:7e:d7:5b:57:04:cb:d4:a3:9a:f9:
9e:93:b6:f9:e2:ad:a9:ad:ff:cf:ad:a2:35:5a:74:2e:2b:34:
81:dc:5b:00:8a:36:c6:94:1c:26:63:e3:db:67:a4:14:43:96:
a2:e2:7d:59:69:dd:10:d7:25:ae:dd:e8:35:c1:82:b0:db:48:
1d:72:e7:6b:91:38:5b:b7:ae:42:1a:b0:3c:32:66:1c:92:50:
a6:8c:fb:bd:6c:6e:27:1a:7f:56:a8:24:ae:86:d8:a7:2c:9e:
10:dd:5a:f7:cf:7b:76:57:61:08:18:0d:bd:73:78:ce:58:e9:
f1:b0:fe:a6:b3:40:47:67:01:fa:80:ae:18:61:ce:8e:4b:44:
90:e1:2b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:25:38 2026 by rpki-client