
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3232332e3232332e3138342e302f32322d3232203d3e203435303634.roa
File: 3232332e3232332e3138342e302f32322d3232203d3e203435303634.roa (raw, json)
Hash identifier: p+D71BLuI8k94Q1H4/k7JU3sIoRsAtcwLqxPLVgrfBY=
Subject key identifier: B4:5D:05:06:E5:D0:50:9C:0E:22:00:09:53:CC:5D:98:E2:5F:5A:DA
Certificate issuer: /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Certificate serial: 7661A4738FE19E6C3E2BF94E0969EB3CC80043A2
Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3232332e3232332e3138342e302f32322d3232203d3e203435303634.roa
Signing time: Mon 13 Apr 2026 08:08:31 +0000
ROA not before: Mon 13 Apr 2026 08:03:31 +0000
ROA not after: Mon 12 Apr 2027 08:08:31 +0000
asID: 45064
IP address blocks: 223.223.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 07:10:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:61:a4:73:8f:e1:9e:6c:3e:2b:f9:4e:09:69:eb:3c:c8:00:43:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Validity
Not Before: Apr 13 08:03:31 2026 GMT
Not After : Apr 12 08:08:31 2027 GMT
Subject: CN=B45D0506E5D0509C0E22000953CC5D98E25F5ADA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:01:93:66:86:47:ee:49:73:46:89:7f:d0:ba:
b0:0e:98:83:80:35:59:13:0c:62:50:b2:45:bb:38:
69:6b:ed:31:d8:62:4f:48:c4:76:30:f6:08:11:08:
66:70:e9:63:cb:98:df:2f:9d:03:65:56:88:a4:09:
ce:9d:40:86:d8:22:d8:27:b6:24:ca:c8:bf:a8:8b:
17:9d:93:3a:a2:d4:42:29:bc:fb:83:ed:da:50:71:
19:15:93:0d:17:43:fa:d5:74:21:43:46:2a:b7:eb:
1e:72:29:ba:e2:a9:ea:b4:3a:cd:92:40:6e:17:f7:
1d:6c:dc:83:09:46:c5:8d:d8:06:dc:be:48:af:b8:
a4:98:08:87:a7:b8:1a:81:ea:29:59:8a:42:ea:ab:
55:e0:4a:ff:02:a2:af:b7:5c:6d:3d:d0:d3:fa:53:
bf:49:ab:fe:31:a1:d9:dd:be:06:a6:3a:f2:f4:75:
72:6b:67:8f:c3:73:17:f7:d5:a3:81:f6:1b:bb:36:
50:c4:f8:17:c9:18:70:91:7d:33:72:5b:4e:f0:4c:
c6:a0:47:2a:5c:45:10:b5:8f:04:69:0c:04:48:7b:
fb:c2:d1:c0:7d:dd:a5:b8:13:6a:e1:3e:2e:5d:97:
87:bc:91:f2:eb:c1:45:99:35:4a:6f:0b:a5:3a:09:
03:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5D:05:06:E5:D0:50:9C:0E:22:00:09:53:CC:5D:98:E2:5F:5A:DA
X509v3 Authority Key Identifier:
keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3232332e3232332e3138342e302f32322d3232203d3e203435303634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.223.184.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:04:bb:79:8a:98:fa:46:f5:d6:fd:b6:74:96:a1:d1:16:40:
b1:c7:1b:40:c1:92:ad:2e:0e:ee:1c:02:2e:e0:fd:6d:87:b3:
f0:e6:47:59:0d:f4:bf:05:9f:7e:e1:eb:33:27:ad:e3:70:3b:
2f:2d:56:c3:19:50:f5:c8:84:a3:75:0e:c4:96:4c:e9:35:fe:
27:66:a1:81:ae:64:b7:34:a3:67:7b:01:b5:5c:9c:bf:45:6f:
70:6d:0b:ba:26:39:9a:35:d9:7d:48:26:7e:0a:81:f5:a0:38:
2c:2f:ea:81:44:90:30:0a:9f:85:2c:f1:c6:1c:e2:16:a1:e0:
b9:de:bd:3e:6c:2e:33:03:db:ca:48:91:96:fe:2a:22:30:bc:
c4:4d:d4:88:30:24:60:0c:3f:3f:fb:98:de:c7:d9:cf:92:2a:
17:b8:af:34:7f:fd:31:ef:12:8a:13:16:fe:53:d0:95:ae:af:
af:4c:44:ef:70:cd:7c:d3:df:55:c8:ef:4c:e4:3e:0d:26:7d:
c8:a3:2e:25:e9:6f:13:1b:25:50:37:35:c9:e6:79:cb:5a:f4:
90:fe:1d:cb:e6:d1:f0:d4:be:c0:50:fd:ef:ca:58:c6:2c:34:
45:3d:4b:0f:6b:9e:91:7b:68:81:dc:5d:c5:c9:f9:96:95:e7:
77:2a:3c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:20:50 2026 by rpki-client