
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e39322e302f32342d3234203d3e2034383038.roa
File: 3132322e3230302e39322e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier: 4nrH9LfsUqF1kG4hbRAgCUaFjmEZbef1g1MPoHFYyJc=
Subject key identifier: 09:4E:D5:A0:BF:85:0E:53:3B:F2:58:A1:26:AD:D8:F9:2C:43:C7:B6
Certificate issuer: /CN=29BAE90B795BA6BB50390EB31964E6F823BAB331
Certificate serial: 336B385533AA644F6CF7B748D24399DC972ED223
Authority key identifier: 29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e39322e302f32342d3234203d3e2034383038.roa
Signing time: Wed 15 Apr 2026 02:50:22 +0000
ROA not before: Wed 15 Apr 2026 02:45:22 +0000
ROA not after: Wed 14 Apr 2027 02:50:22 +0000
asID: 4808
IP address blocks: 122.200.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl
rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 13:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:6b:38:55:33:aa:64:4f:6c:f7:b7:48:d2:43:99:dc:97:2e:d2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29BAE90B795BA6BB50390EB31964E6F823BAB331
Validity
Not Before: Apr 15 02:45:22 2026 GMT
Not After : Apr 14 02:50:22 2027 GMT
Subject: CN=094ED5A0BF850E533BF258A126ADD8F92C43C7B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:52:88:d1:e5:78:a5:21:4e:89:b0:0e:7f:bb:
01:90:ab:5b:f6:8c:d4:10:0d:af:8d:f3:cb:0f:48:
c2:ee:ff:31:79:80:b1:22:d8:72:3f:df:89:6e:34:
02:f5:39:a8:4a:2f:30:33:31:a6:0c:c9:d6:de:5c:
4a:e2:28:44:c7:62:cb:90:67:84:97:06:4e:8e:69:
36:d4:f1:0a:8d:5d:39:c5:4e:99:64:59:d2:06:12:
56:9b:5a:0a:90:69:3f:75:44:b9:32:79:86:a8:82:
7f:71:f6:81:0e:9a:3f:3b:61:cd:a8:c2:ed:23:94:
3f:8c:b5:a3:42:91:a9:64:9d:37:a4:af:bb:64:fa:
0a:f0:23:ca:92:f0:37:56:0b:c7:06:c0:53:6f:6b:
11:69:17:60:a7:6c:04:7e:ed:b9:09:76:19:ec:6b:
00:6f:4f:5a:1c:ff:44:0c:80:bb:80:b0:f1:66:fc:
2e:c5:b3:f0:03:c7:93:5f:06:42:67:db:23:4d:6e:
49:f1:db:26:b7:46:96:0e:9c:db:b5:c4:0c:5a:0a:
2d:a7:b7:e4:bc:19:4e:9e:69:6f:8f:92:9a:27:58:
ca:5e:de:b5:cc:3c:06:6c:cb:35:2f:30:ce:1a:1f:
18:28:d5:e8:65:4b:e5:5f:09:d8:88:56:5b:29:d1:
c1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4E:D5:A0:BF:85:0E:53:3B:F2:58:A1:26:AD:D8:F9:2C:43:C7:B6
X509v3 Authority Key Identifier:
keyid:29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e39322e302f32342d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.200.92.0/24
Signature Algorithm: sha256WithRSAEncryption
71:19:07:29:ad:4c:43:7d:bc:cc:02:9b:fd:d7:f0:2c:6e:fb:
ad:e2:28:18:45:40:84:ae:af:2c:11:2c:85:c8:ef:35:33:7b:
1d:e9:b4:0f:f5:02:11:4e:48:f2:61:04:b6:42:10:5d:1f:1f:
e3:7e:60:c2:19:cc:b0:1f:ce:5c:8d:f6:26:8c:da:98:25:1e:
75:af:70:74:d9:14:2d:bc:23:d6:e5:1c:8e:fc:1a:ee:97:f6:
c7:42:25:13:cf:d1:56:a7:b8:60:ef:a5:f5:40:42:e7:0f:22:
1c:61:9b:18:0b:76:02:19:e8:88:75:dc:22:67:a0:8e:d3:f1:
05:af:52:0c:7f:c3:78:41:79:45:31:56:41:0c:d5:4f:2f:17:
98:e5:b1:d1:50:1e:54:d8:b3:03:d8:b8:14:f9:84:cb:b8:6b:
44:f7:88:62:9e:17:51:bd:fe:bd:cd:9e:57:14:5f:92:87:d4:
13:60:cf:d1:d3:f2:43:79:d4:58:43:30:86:b6:31:1a:2f:6c:
55:ea:b0:23:bd:e5:37:bc:b8:27:6f:30:99:04:c5:dc:38:61:
a7:e4:4d:ed:8b:7d:14:5d:dd:f9:59:0f:82:2e:66:1f:a9:40:
b4:21:70:2f:2d:ab:58:e9:8e:0e:3e:eb:e0:b2:ad:14:23:1a:
d6:c0:f5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:55:59 2026 by rpki-client