
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3131342e3131322e39362e302f32312d3332203d3e2034383038.roa
File: 3131342e3131322e39362e302f32312d3332203d3e2034383038.roa (raw, json)
Hash identifier: jjutZHTXEoE9FAunlZGvhzQN6yPwPHr1ZGxKzXyadPI=
Subject key identifier: A6:56:36:45:73:EC:35:B4:54:FF:9E:D5:7B:1B:1E:15:46:33:BD:0E
Certificate issuer: /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Certificate serial: 11800506108DE801FB953A00D5977EA2E556AC75
Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3131342e3131322e39362e302f32312d3332203d3e2034383038.roa
Signing time: Wed 15 Apr 2026 08:02:04 +0000
ROA not before: Wed 15 Apr 2026 07:57:04 +0000
ROA not after: Wed 14 Apr 2027 08:02:04 +0000
asID: 4808
IP address blocks: 114.112.96.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:80:05:06:10:8d:e8:01:fb:95:3a:00:d5:97:7e:a2:e5:56:ac:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Validity
Not Before: Apr 15 07:57:04 2026 GMT
Not After : Apr 14 08:02:04 2027 GMT
Subject: CN=A656364573EC35B454FF9ED57B1B1E154633BD0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:20:54:44:e0:7a:0f:37:96:cc:36:63:79:92:
53:2f:cd:23:44:27:61:88:04:83:9e:51:ff:0c:b5:
f2:d3:fe:0b:91:19:19:04:06:29:37:46:4a:ad:41:
20:8f:5f:eb:d5:7b:67:e0:6c:38:53:1f:dc:45:66:
23:b2:a8:f0:7c:86:dc:af:73:ae:e9:ac:bb:90:08:
ae:24:16:45:de:3a:65:aa:d4:41:d6:ce:80:e6:ab:
0c:d2:7d:d0:b4:65:ea:cc:45:d8:c5:f9:c2:8e:74:
12:fc:e0:db:ff:8f:a4:b8:bd:66:e7:9c:fb:d4:ce:
77:bb:ca:cf:07:30:71:bc:63:25:77:09:00:97:a2:
d5:7c:47:ea:f2:a6:d9:93:85:45:61:d5:e4:66:85:
74:d6:84:65:f4:ae:3f:74:2e:14:3d:d6:b0:8a:30:
4f:6b:52:d8:f2:7d:71:d0:31:69:96:5e:12:f6:49:
08:a3:f5:6a:6b:0c:c0:de:af:14:72:ae:c4:e1:f8:
b4:7e:ca:78:39:c1:bd:57:9e:bc:b0:2d:60:01:74:
d7:58:c5:d3:d1:48:2e:a3:7e:15:86:ee:c8:b2:98:
c1:57:07:66:02:f7:54:52:7a:d3:0b:ea:2a:5a:a8:
6a:86:68:bb:4f:44:c0:0f:b5:02:a9:19:b6:dc:66:
73:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:56:36:45:73:EC:35:B4:54:FF:9E:D5:7B:1B:1E:15:46:33:BD:0E
X509v3 Authority Key Identifier:
keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3131342e3131322e39362e302f32312d3332203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.112.96.0/21
Signature Algorithm: sha256WithRSAEncryption
a7:c7:0e:e0:c0:42:48:a1:8e:5e:39:8d:6e:a8:c4:7d:02:06:
09:44:5d:3d:84:3d:eb:1b:68:ab:27:66:65:00:7a:50:6e:41:
4f:a8:8c:c6:36:a9:ae:92:99:63:1a:fb:b5:b6:96:8f:e6:98:
f2:cf:ca:0b:af:23:b3:cc:b5:86:42:30:8b:e5:2c:19:27:42:
36:d2:a8:bb:c1:c5:df:11:90:2d:9b:f4:63:0f:a2:a3:5a:2e:
e9:4b:2e:cd:40:41:f4:f3:23:5b:a6:db:72:72:b3:78:d2:cb:
c8:31:dc:97:3b:5d:62:60:a0:4a:28:73:f7:0e:e2:48:4f:45:
e3:88:23:83:97:96:e5:b4:4d:87:31:63:71:de:31:56:50:43:
d0:b0:c1:ba:c6:df:c7:42:ce:7d:36:97:a5:35:37:d6:f7:09:
24:11:7b:7d:88:f9:ae:2a:80:9f:44:21:b9:e9:09:62:35:49:
52:42:19:f2:fb:f9:05:78:f7:30:e6:6c:7a:2c:f6:61:f0:61:
8b:1c:f4:a6:aa:b1:e2:ef:1b:ff:d8:f1:89:f0:8f:fb:68:e3:
2a:fe:25:5b:90:77:97:84:81:b4:1f:34:64:46:52:fa:e0:ac:
b4:6e:c5:04:57:50:6e:73:f5:c9:64:a7:ca:0b:b0:62:2f:87:
2a:2d:7e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:12:11 2026 by rpki-client