
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3131362e3231342e36342e302f32302d3230203d3e203633363437.roa
File: 3131362e3231342e36342e302f32302d3230203d3e203633363437.roa (raw, json)
Hash identifier: JvClkUewsT0aXuhX97pCueIzGDKcCMNARyrxk9iYnd0=
Subject key identifier: 29:BE:DB:5A:E7:C4:62:B2:04:41:37:5D:BF:1A:50:C5:64:07:C3:5F
Certificate issuer: /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Certificate serial: 64C7A3B978C039D7D843456F34D2DC583DAFEA63
Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3131362e3231342e36342e302f32302d3230203d3e203633363437.roa
Signing time: Mon 13 Apr 2026 08:28:43 +0000
ROA not before: Mon 13 Apr 2026 08:23:43 +0000
ROA not after: Mon 12 Apr 2027 08:28:43 +0000
asID: 63647
IP address blocks: 116.214.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 07:10:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:c7:a3:b9:78:c0:39:d7:d8:43:45:6f:34:d2:dc:58:3d:af:ea:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Validity
Not Before: Apr 13 08:23:43 2026 GMT
Not After : Apr 12 08:28:43 2027 GMT
Subject: CN=29BEDB5AE7C462B20441375DBF1A50C56407C35F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e9:dc:7f:4d:bf:d4:ce:09:0f:d0:95:b6:39:
6b:be:4e:c8:ee:13:29:b6:7d:e1:a2:dd:09:39:43:
1e:ed:40:2c:57:6d:4b:25:ef:39:4c:f7:d8:41:38:
e2:be:5b:a2:61:f2:6e:c6:52:8f:1e:19:8f:6c:73:
2e:42:f6:e4:d7:f4:bc:1f:08:f0:01:00:50:dd:94:
4e:d7:ae:95:3f:14:be:c3:a1:ee:2a:ca:5b:e6:4e:
0f:e9:a1:89:ed:fb:1b:86:4f:d9:20:ba:09:4a:69:
25:e7:cb:22:55:dc:ce:44:f3:cc:a3:d7:c8:6f:35:
ad:80:83:d2:16:19:04:03:ce:cb:a1:4b:14:28:32:
ac:4d:69:f5:b3:b1:82:c9:e7:38:7e:5f:39:e9:51:
dc:ab:a4:46:16:b7:8b:1f:60:a7:ec:4e:62:db:9d:
00:34:82:b3:72:32:e3:20:91:ee:95:ad:db:0e:ff:
5c:34:ff:f5:82:ab:75:1a:56:4c:43:cf:0b:a1:92:
de:27:0b:cd:c7:fa:9a:f1:40:9e:64:f1:7a:e1:7a:
04:38:80:a9:54:0a:c8:19:77:f4:7b:32:6b:fb:e7:
51:b0:2a:a8:50:59:1f:cd:bc:78:d5:e2:ca:8f:ed:
88:b8:aa:02:66:e1:ba:48:0b:51:9f:ef:75:28:5f:
82:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BE:DB:5A:E7:C4:62:B2:04:41:37:5D:BF:1A:50:C5:64:07:C3:5F
X509v3 Authority Key Identifier:
keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3131362e3231342e36342e302f32302d3230203d3e203633363437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.214.64.0/20
Signature Algorithm: sha256WithRSAEncryption
9f:aa:7f:5b:bd:b5:44:b5:aa:88:d6:45:36:37:a0:f3:3c:af:
f0:70:66:24:70:d6:bb:a0:e9:2e:17:06:e8:b5:7f:ef:45:2b:
36:cf:01:e4:78:a2:53:1e:32:25:48:24:30:7a:fc:9f:42:3f:
30:ed:ef:ee:b8:44:69:ab:10:03:e0:c7:87:45:f4:d9:d3:c1:
27:be:71:d0:69:99:50:87:66:22:d0:97:59:8b:0b:dd:64:cc:
4c:3d:b4:74:7a:f9:60:56:02:1b:c3:5f:84:1b:54:9d:fa:5b:
82:2c:83:c2:78:84:d8:76:49:4a:5c:9f:68:fe:11:b7:bd:f1:
2e:c4:9d:7e:09:96:a1:f0:68:4f:f4:e4:56:37:a0:2d:27:11:
45:60:ba:f7:04:b1:5f:4b:2f:eb:a4:bf:5f:f0:47:3c:ce:e7:
b6:ca:16:21:b1:ec:d8:c0:b6:7f:97:53:2a:20:58:eb:f1:09:
b4:a4:8e:c8:b9:25:c7:52:c6:8d:c2:fc:56:90:16:3e:03:35:
26:02:83:e3:8c:ab:6a:92:8b:01:04:be:95:dc:22:9c:d9:d8:
f0:db:17:22:88:29:77:56:14:db:81:92:08:f9:56:6d:aa:10:
f4:32:9b:d8:1e:eb:f7:cc:c7:46:f7:53:1b:c0:71:4e:e6:00:
37:de:d0:d3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:19:04 2026 by rpki-client