
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e39322e302f32342d3234203d3e203338333634.roa
File: 3132322e3230302e39322e302f32342d3234203d3e203338333634.roa (raw, json)
Hash identifier: gmVFIPgWkhBs3waNltLc8JgOEZjeZ085iQ9TZxBWt1k=
Subject key identifier: 1D:90:1B:7D:91:77:6A:FA:83:F7:5C:75:43:9C:F7:B0:6F:49:5B:EA
Certificate issuer: /CN=29BAE90B795BA6BB50390EB31964E6F823BAB331
Certificate serial: 0DC05EE2C2AAAAFB28BAB893EA844BE3668C4B71
Authority key identifier: 29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e39322e302f32342d3234203d3e203338333634.roa
Signing time: Wed 15 Apr 2026 02:50:21 +0000
ROA not before: Wed 15 Apr 2026 02:45:21 +0000
ROA not after: Wed 14 Apr 2027 02:50:21 +0000
asID: 38364
IP address blocks: 122.200.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl
rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 13:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:c0:5e:e2:c2:aa:aa:fb:28:ba:b8:93:ea:84:4b:e3:66:8c:4b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29BAE90B795BA6BB50390EB31964E6F823BAB331
Validity
Not Before: Apr 15 02:45:21 2026 GMT
Not After : Apr 14 02:50:21 2027 GMT
Subject: CN=1D901B7D91776AFA83F75C75439CF7B06F495BEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:72:3c:56:12:c4:e4:69:7d:44:57:99:11:61:
7b:f8:38:33:ff:7d:72:13:aa:f8:48:fa:53:49:36:
58:d0:4b:cf:02:8e:7f:5f:aa:41:4e:de:60:a8:5f:
06:8c:f9:9f:a7:83:58:83:67:ee:46:1e:0f:3a:43:
e9:42:e6:89:e5:39:11:01:84:6f:98:81:a8:8c:27:
29:53:bd:31:02:a6:3a:40:42:97:a9:b4:84:ce:c4:
aa:c2:55:85:1e:61:75:01:fe:95:d9:45:5e:5f:1f:
1d:4c:35:12:6b:71:39:84:2d:d2:b1:5d:81:6a:e4:
03:41:e2:bc:11:57:ab:91:bf:a2:27:96:df:ae:3d:
66:0d:da:f0:7e:46:42:c9:85:ef:b7:45:87:18:12:
08:51:50:31:ab:dd:72:1b:e9:49:c7:fb:71:30:12:
4c:16:89:64:d7:81:c7:1f:4e:01:94:e6:8a:96:a9:
57:16:45:3c:e8:0a:f7:e2:ce:b6:49:70:32:6d:68:
e9:39:ee:1a:61:ae:05:82:04:8f:ea:c2:86:04:61:
8e:77:20:f6:de:81:7d:c2:e0:29:dc:20:26:ee:f1:
5c:84:a3:b4:a6:01:f6:88:6b:74:d0:67:d7:61:7b:
c0:32:c3:f2:d8:ae:bf:b2:a9:12:e4:ce:47:e8:bf:
a8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:90:1B:7D:91:77:6A:FA:83:F7:5C:75:43:9C:F7:B0:6F:49:5B:EA
X509v3 Authority Key Identifier:
keyid:29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e39322e302f32342d3234203d3e203338333634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.200.92.0/24
Signature Algorithm: sha256WithRSAEncryption
64:42:ee:6d:0d:a0:71:8a:dd:5c:a5:b1:c6:11:3e:03:78:4e:
da:10:6e:1f:7a:c4:13:06:bd:4c:80:4f:c7:bb:b1:7d:9f:60:
61:5e:6c:3e:c6:fc:e3:6c:68:9d:78:96:8f:96:da:85:f2:f1:
c5:0f:b0:69:a5:9c:0d:3c:52:bd:53:2d:9e:67:ae:fb:97:41:
18:17:45:c1:99:25:68:02:5a:86:ac:ea:3f:7c:e2:cd:33:29:
3c:f3:49:59:e1:bd:6f:5f:63:a9:e7:2b:b6:7f:90:24:78:b6:
56:93:e6:55:a0:01:e1:15:6c:46:1f:84:a3:7c:77:fa:bb:db:
ae:3c:16:48:0e:3e:1e:d0:31:d0:72:e1:30:3f:98:b6:8a:4f:
09:ad:54:72:05:8b:1b:fc:e5:d6:38:54:3e:53:df:f2:87:23:
27:d1:f1:c4:c9:75:4d:8a:d3:02:27:f5:4e:74:dd:9c:67:77:
9d:ca:d0:17:a2:c1:b9:9c:f7:89:14:28:4f:02:ae:bf:a6:45:
e1:1a:1e:d4:f0:81:91:6b:09:53:21:79:85:b6:61:9a:1d:08:
11:43:b6:56:98:0f:a0:03:75:a3:c2:56:18:77:34:8e:48:f6:
6d:3c:2f:14:1f:db:ae:1e:2f:e6:86:f3:c7:3d:58:0c:84:4e:
ba:01:2d:ff
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:13:25 2026 by rpki-client