
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3131342e3131322e3130342e302f32322d3332203d3e2034383038.roa
File: 3131342e3131322e3130342e302f32322d3332203d3e2034383038.roa (raw, json)
Hash identifier: tyBM/SOFRdhHTCCp2GB4IxuE/44b2EFF/nyyzPKH80k=
Subject key identifier: 0F:2B:92:75:D8:D5:55:CF:F4:EA:81:A0:FB:B8:97:47:61:74:33:5F
Certificate issuer: /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Certificate serial: 16862DE574EA1B0A19256B61846AB98633A4E6B2
Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3131342e3131322e3130342e302f32322d3332203d3e2034383038.roa
Signing time: Wed 15 Apr 2026 08:02:32 +0000
ROA not before: Wed 15 Apr 2026 07:57:32 +0000
ROA not after: Wed 14 Apr 2027 08:02:32 +0000
asID: 4808
IP address blocks: 114.112.104.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:86:2d:e5:74:ea:1b:0a:19:25:6b:61:84:6a:b9:86:33:a4:e6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Validity
Not Before: Apr 15 07:57:32 2026 GMT
Not After : Apr 14 08:02:32 2027 GMT
Subject: CN=0F2B9275D8D555CFF4EA81A0FBB897476174335F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:40:12:8a:7a:fb:ef:b2:d4:63:bf:68:c1:c7:
5b:82:e2:72:02:76:89:74:c0:78:09:ee:3c:55:22:
0e:f7:3f:dc:0a:e2:d5:27:d8:2f:62:99:d9:35:8f:
b8:ce:26:ed:1b:70:db:26:b2:3a:74:42:42:10:e7:
23:bd:a5:a4:4e:90:20:49:b8:35:21:9f:a1:32:4f:
b6:6f:d7:75:74:f8:23:49:ec:7b:df:8e:ff:ba:a3:
f8:ed:40:ca:1e:46:c3:44:98:57:19:e1:72:52:7e:
5b:91:6b:f1:ce:fb:63:25:06:8a:5d:c0:6c:ef:3c:
3a:e1:a7:7a:fc:7f:e7:e1:92:46:5b:87:1f:1f:00:
8e:c2:33:bf:93:df:d8:9a:73:e2:5e:c9:6b:d4:8c:
85:96:f1:bf:c5:46:3b:03:fd:d4:84:f0:ab:7b:cb:
2f:d4:d3:2b:4b:43:c0:a8:58:11:07:53:1c:b3:18:
d9:de:f7:4e:a3:39:6d:08:f1:d1:9f:91:27:c3:a2:
43:b6:ec:49:b3:58:33:1f:26:05:eb:15:b4:f9:5a:
d9:5f:9f:6d:4c:39:44:e9:d2:d7:e5:8f:53:d9:65:
18:3c:c6:ba:da:9a:ec:f9:81:79:42:8f:60:7e:bc:
e0:16:af:94:47:f4:a7:00:8d:72:0d:63:fd:fa:38:
af:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2B:92:75:D8:D5:55:CF:F4:EA:81:A0:FB:B8:97:47:61:74:33:5F
X509v3 Authority Key Identifier:
keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3131342e3131322e3130342e302f32322d3332203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.112.104.0/22
Signature Algorithm: sha256WithRSAEncryption
22:9d:92:bb:e6:64:6e:d8:41:bf:ca:0f:5f:22:75:ed:84:71:
55:ba:58:f7:5e:99:16:c2:b5:56:bb:6a:70:83:76:40:58:ea:
8a:f0:75:0a:1f:50:f6:bb:2b:4a:ca:f0:7f:5b:82:86:ff:24:
df:3c:b7:98:96:86:54:fa:c3:4d:6a:c9:07:35:20:2b:27:b0:
4f:9f:03:66:f9:67:59:d1:91:7c:c0:0c:8a:7b:4d:d8:5b:1d:
54:43:e7:67:11:2c:b2:63:f9:56:f6:a8:f7:24:1d:de:91:c5:
8e:fc:91:d4:96:c9:cc:88:7e:1c:3c:cf:b8:f2:18:c7:f5:ba:
39:56:ef:5b:cd:df:a1:09:77:dd:d5:78:e4:4d:a4:3e:a3:7e:
bd:65:6a:84:d2:87:e8:39:bc:c1:a8:72:eb:ba:e7:75:ed:5e:
e9:f1:b8:09:67:6c:6c:af:20:e5:3c:d5:7c:65:8f:dd:b9:51:
14:a3:19:63:aa:91:01:06:5d:3c:aa:83:38:89:b8:23:59:8e:
2f:c0:d1:a2:9d:0a:a5:5b:7d:8f:aa:0d:20:ef:b3:7a:3b:52:
08:2c:97:7f:64:49:25:62:7d:aa:6a:5e:49:85:cd:87:c6:ad:
fd:7d:a8:f2:80:4b:df:d1:47:24:98:10:a3:25:6a:3f:62:b3:
a5:8f:20:a2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:25:28 2026 by rpki-client