
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3230332e3137342e39362e302f31392d3139203d3e203633363437.roa
File: 3230332e3137342e39362e302f31392d3139203d3e203633363437.roa (raw, json)
Hash identifier: rfRwHYwSIJm+rW4Mo2Nkxt/hlHnHVS4hIdZojPCJZZs=
Subject key identifier: A4:B9:51:80:35:5E:1F:14:A7:1B:ED:82:F3:E9:E2:A9:8D:3B:55:E1
Certificate issuer: /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Certificate serial: 56DC4833F4214529728D908FDB538B914E6D2BDA
Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3230332e3137342e39362e302f31392d3139203d3e203633363437.roa
Signing time: Mon 13 Apr 2026 08:15:04 +0000
ROA not before: Mon 13 Apr 2026 08:10:04 +0000
ROA not after: Mon 12 Apr 2027 08:15:04 +0000
asID: 63647
IP address blocks: 203.174.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 07:10:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:dc:48:33:f4:21:45:29:72:8d:90:8f:db:53:8b:91:4e:6d:2b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Validity
Not Before: Apr 13 08:10:04 2026 GMT
Not After : Apr 12 08:15:04 2027 GMT
Subject: CN=A4B95180355E1F14A71BED82F3E9E2A98D3B55E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:21:15:0b:86:03:b8:d6:2e:b2:2d:68:46:91:
80:17:fb:86:e9:ca:04:87:70:8b:db:2e:72:f8:1b:
c9:03:40:36:07:09:f0:26:89:db:ea:c0:3a:e2:c9:
67:a6:75:6b:23:63:02:ba:01:51:14:c9:ad:73:86:
7d:49:02:e3:9f:3d:26:96:d5:51:78:73:49:24:e4:
7d:af:d6:41:6b:fc:f2:d1:0e:d4:28:77:97:39:82:
06:09:57:db:d1:96:59:ce:f0:e7:75:91:1f:db:df:
90:7b:f0:dd:87:fe:5c:75:05:9c:b8:2b:16:f1:53:
85:ee:8b:a5:12:6e:48:d4:1b:c0:17:15:f6:38:1a:
cf:d4:14:52:37:4c:2e:a5:1f:1e:71:48:c6:07:ac:
3d:5f:35:87:b9:36:55:67:fc:99:5e:13:e2:5a:14:
15:a1:69:96:15:e9:94:ed:22:fb:04:c7:dd:53:4d:
65:c3:c9:e1:f5:48:25:98:d5:02:57:ca:0a:4a:27:
15:bb:d1:20:9c:2b:45:e1:5d:80:b8:91:08:e2:b4:
fb:2f:76:e2:30:f7:2b:1c:04:92:40:b9:4a:0f:ab:
0d:76:7a:12:ae:40:7f:c7:d6:70:1c:24:1a:43:85:
b7:da:39:e4:9b:64:69:b8:66:5b:3c:7a:15:ce:60:
c2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B9:51:80:35:5E:1F:14:A7:1B:ED:82:F3:E9:E2:A9:8D:3B:55:E1
X509v3 Authority Key Identifier:
keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3230332e3137342e39362e302f31392d3139203d3e203633363437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.174.96.0/19
Signature Algorithm: sha256WithRSAEncryption
8a:14:dc:85:e2:11:7a:f4:70:6a:e0:1e:5b:0f:18:15:77:e6:
c1:96:0d:34:36:86:fa:ca:38:b7:6f:41:a3:28:fd:8c:6c:17:
fb:ac:79:b5:53:7d:6a:da:be:76:1f:85:0b:06:f2:3b:f9:ad:
8a:94:60:44:69:0b:ba:08:ee:da:75:18:cc:54:82:ee:d0:5d:
70:57:43:18:f1:f8:cd:41:3d:1e:c9:e4:95:fe:49:a3:63:7e:
e3:b4:d6:f7:98:75:74:43:20:3f:99:c5:0f:13:a1:b0:08:9c:
ac:7c:d3:95:c1:bc:ea:81:97:6c:d9:57:13:06:a3:5a:49:03:
2c:57:c9:34:d7:e7:ea:a4:d2:e9:96:ba:1a:f1:06:6c:72:73:
cb:4a:ab:e8:69:01:b7:bf:eb:2b:92:9e:d4:7f:87:6c:b1:54:
38:78:6b:e5:b4:1f:c1:f4:04:88:85:df:1c:f4:ba:06:0f:f0:
36:9c:bd:98:e7:30:fa:5f:34:d2:c0:b6:75:91:ee:d1:36:67:
6c:d3:4f:e6:8a:97:18:61:c9:5e:81:47:b5:9f:5e:d7:46:00:
24:1c:0b:50:ec:ba:6f:69:25:c5:af:18:05:e1:b1:d0:7b:ff:
e1:e8:5e:67:99:ec:cb:d1:99:ce:18:ce:7e:86:bf:95:12:53:
ad:3b:43:19
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:20:56 2026 by rpki-client