
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/3230332e3139362e302e302f32312d3332203d3e203233373234.roa
File: 3230332e3139362e302e302f32312d3332203d3e203233373234.roa (raw, json)
Hash identifier: gfBMB7Ui+e2fOBQ5Tl23lKPDE0eKQepKcbPTeJBVaPE=
Subject key identifier: 38:61:90:62:7C:30:07:93:DF:1D:38:E3:84:2E:EF:CB:5F:F2:EF:86
Certificate issuer: /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
Certificate serial: 208A7D100961C005A43F57999EC203545ADBB345
Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/3230332e3139362e302e302f32312d3332203d3e203233373234.roa
Signing time: Tue 14 Apr 2026 03:00:09 +0000
ROA not before: Tue 14 Apr 2026 02:55:09 +0000
ROA not after: Tue 13 Apr 2027 03:00:09 +0000
asID: 23724
IP address blocks: 203.196.0.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl
rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 05:17:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:8a:7d:10:09:61:c0:05:a4:3f:57:99:9e:c2:03:54:5a:db:b3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
Validity
Not Before: Apr 14 02:55:09 2026 GMT
Not After : Apr 13 03:00:09 2027 GMT
Subject: CN=386190627C300793DF1D38E3842EEFCB5FF2EF86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f2:ed:c4:38:ae:5e:7d:bc:78:be:ca:8d:b8:
90:a6:33:2d:6e:de:ff:ed:49:5e:d7:ff:08:5e:d8:
e8:3f:6a:6a:1e:10:8c:af:da:45:5e:10:a0:d4:19:
5d:f2:4d:64:38:02:31:e0:44:5d:b6:d4:d2:4b:b9:
d3:25:0e:ce:3d:b7:06:b0:0c:18:1a:80:49:a3:e5:
ef:fc:ff:b0:42:0c:8c:d5:2f:fa:9c:8b:db:5f:e5:
1c:08:f1:a5:62:87:0a:ad:1a:76:0f:43:69:50:7b:
58:99:55:c3:5c:06:03:5a:1d:74:0a:ba:42:c9:a7:
d2:39:e7:fc:f8:97:ba:08:c1:06:9e:2e:5b:c8:14:
76:63:8c:24:64:de:33:c8:af:ca:a8:ca:e3:27:32:
de:3d:a1:bd:cd:f9:8d:78:81:30:b5:42:f5:94:23:
6a:41:ef:00:fa:dc:7b:24:43:8b:90:c5:0c:27:07:
41:90:96:dd:43:dd:41:67:03:b7:25:bf:58:c8:59:
ed:cf:0a:cb:91:84:09:06:d5:4b:cf:b8:25:c8:8f:
5b:5a:a9:fb:ef:33:3c:39:d6:d3:aa:9a:10:42:c1:
f8:9b:a7:56:8f:65:61:68:57:8e:8c:9b:a9:6c:0e:
ea:76:20:c4:0b:4b:88:99:8b:23:e0:a4:ee:c7:a6:
ec:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:61:90:62:7C:30:07:93:DF:1D:38:E3:84:2E:EF:CB:5F:F2:EF:86
X509v3 Authority Key Identifier:
keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/3230332e3139362e302e302f32312d3332203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.196.0.0/21
Signature Algorithm: sha256WithRSAEncryption
cb:3d:85:96:a9:99:94:89:96:a9:ff:2b:8b:e4:97:50:8f:13:
1e:f7:7a:67:da:27:6a:b2:c8:cd:99:05:89:f7:5d:87:cf:51:
2c:66:7b:f0:90:59:a7:a2:d5:60:27:2e:a1:dc:57:ac:18:5f:
23:85:e0:97:fc:bf:17:d9:32:c9:00:6e:cf:e1:7d:22:6d:78:
fa:7b:a5:f5:27:b4:10:ad:ea:e8:c9:bf:e7:da:e4:6a:82:46:
20:fc:74:63:5f:21:7d:52:af:95:d9:7a:98:b1:2e:d0:33:31:
3a:0f:67:5d:08:f0:67:df:4b:68:44:3d:52:f6:31:a2:4c:f6:
60:2f:5e:c4:20:eb:1e:fa:38:b9:fd:da:e0:36:58:4c:c0:e6:
35:15:2e:0f:6e:de:26:74:b1:05:61:c9:e9:e1:08:f9:03:0d:
df:14:ca:5a:6a:85:26:ab:6a:73:1d:01:68:b1:cb:09:3e:5f:
bc:fe:61:2b:98:86:60:a1:99:0d:04:7e:97:7e:e5:22:aa:fe:
10:57:7e:7e:0a:2a:c1:a9:19:d9:d6:84:70:0a:a4:be:f5:24:
8c:d4:d0:d0:56:c8:84:67:34:2c:a9:95:cd:88:7c:c7:54:31:
2c:93:11:46:eb:36:a0:07:e7:d0:73:cf:2b:2f:d4:d9:9f:8c:
ef:51:2b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:26:31 2026 by rpki-client