
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3131342e3131322e39362e302f32322d3332203d3e2034383038.roa
File: 3131342e3131322e39362e302f32322d3332203d3e2034383038.roa (raw, json)
Hash identifier: 2RKoWKxmYLtQAEKSW4aZgKv02IUP6uwd+uFOdd8yj/k=
Subject key identifier: F1:A3:77:4A:18:79:80:17:E0:F2:FD:E5:63:48:78:66:50:C7:E0:89
Certificate issuer: /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Certificate serial: 6054176B798C579054C684B25B794CE91F36A6EF
Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3131342e3131322e39362e302f32322d3332203d3e2034383038.roa
Signing time: Wed 15 Apr 2026 08:03:35 +0000
ROA not before: Wed 15 Apr 2026 07:58:35 +0000
ROA not after: Wed 14 Apr 2027 08:03:35 +0000
asID: 4808
IP address blocks: 114.112.96.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:54:17:6b:79:8c:57:90:54:c6:84:b2:5b:79:4c:e9:1f:36:a6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Validity
Not Before: Apr 15 07:58:35 2026 GMT
Not After : Apr 14 08:03:35 2027 GMT
Subject: CN=F1A3774A18798017E0F2FDE56348786650C7E089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4a:7f:6e:44:53:74:fe:ec:27:fa:13:db:aa:
66:20:8f:b1:78:0d:f7:12:32:0d:d3:a6:06:d4:cb:
8d:b1:12:03:3a:e0:e5:3a:96:cc:ce:60:4c:ad:2e:
93:f6:2a:e0:81:c0:a4:f2:1d:c4:8d:73:4c:41:70:
08:84:9b:04:d7:74:c7:d4:d7:f8:14:31:22:a8:f7:
17:53:6a:92:95:c7:f1:44:b1:b2:3d:ab:2d:d2:95:
33:6e:79:d6:88:7f:f3:a1:dc:21:a4:0d:36:2c:f7:
1f:07:14:ed:83:cb:99:58:42:f2:1f:12:1c:df:65:
3a:38:07:8b:f2:09:9f:84:e8:17:4e:b7:bf:50:01:
a3:14:98:6c:24:bc:78:ec:76:ce:5e:7d:c1:1f:f8:
cf:52:b1:ce:31:45:36:83:69:82:21:5f:7b:f4:96:
33:f3:1a:c5:80:4b:ed:b0:63:30:7c:72:c3:f4:5a:
7f:29:17:ad:7a:75:fe:9f:24:05:2d:e6:7f:6d:df:
40:83:47:8c:28:73:e4:32:d0:3f:1b:66:61:77:ed:
96:5c:4e:b3:43:34:2f:51:80:54:82:a3:b0:8f:4b:
3c:0a:a3:0d:ba:a7:87:25:bf:12:34:52:43:6c:4e:
7e:76:b5:1b:a3:81:31:07:28:a2:c4:74:fb:0e:9e:
be:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A3:77:4A:18:79:80:17:E0:F2:FD:E5:63:48:78:66:50:C7:E0:89
X509v3 Authority Key Identifier:
keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3131342e3131322e39362e302f32322d3332203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.112.96.0/22
Signature Algorithm: sha256WithRSAEncryption
74:41:25:2a:a8:09:e0:f7:bf:21:0e:d9:61:4e:bd:a2:a6:e0:
99:58:dc:c2:59:f8:92:6d:47:3d:c3:c3:35:0d:ac:7d:24:a9:
8e:87:c9:05:79:1c:4a:8b:27:4c:4b:8a:d2:f1:16:58:37:e0:
10:e8:4c:5a:d4:fd:d5:af:74:39:aa:6c:64:91:56:9b:e9:44:
d4:d7:b7:5e:36:6b:ea:5a:d5:75:16:a7:03:9c:8f:bd:a9:6d:
fb:d7:0a:fe:92:61:ed:8d:f3:dc:57:10:a8:44:75:f9:6a:f0:
3e:0c:ad:06:4c:fb:3a:b7:d3:58:7c:71:93:0f:cc:fc:b4:99:
5f:e1:f9:73:3a:d9:ae:c4:d9:f6:0d:f7:ce:f0:84:34:60:b1:
37:11:44:ea:f8:89:1f:47:4c:df:81:1c:ed:3e:3e:cb:e3:59:
72:b8:75:d5:04:8b:9d:22:0a:c4:b0:57:93:dd:a9:61:e1:5d:
53:f2:80:f0:57:03:3d:06:ea:4d:16:c5:eb:05:13:14:4f:99:
db:d1:39:77:a8:dd:f5:68:a0:5f:d2:bf:0b:fb:b1:69:3d:6f:
7c:ef:cc:3d:2e:95:bf:34:35:c3:57:be:a2:f9:4a:27:14:f9:
91:a1:5b:26:0d:b9:96:de:ce:77:7b:9c:50:52:31:66:94:32:
e8:b4:8d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:12:20 2026 by rpki-client