
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/3230332e3139362e302e302f32312d3332203d3e203536303438.roa
File: 3230332e3139362e302e302f32312d3332203d3e203536303438.roa (raw, json)
Hash identifier: bAECAsKZB+1Fwy2mAkwcIYkC+KdRHns7QlNGTktE5h4=
Subject key identifier: 30:0E:E6:5A:4F:67:B5:2F:C1:43:7B:91:9D:75:E1:DE:EA:62:09:62
Certificate issuer: /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
Certificate serial: 7A6D8BF81D4D3CB52E97CA643FB77EEA65858620
Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/3230332e3139362e302e302f32312d3332203d3e203536303438.roa
Signing time: Tue 14 Apr 2026 03:00:09 +0000
ROA not before: Tue 14 Apr 2026 02:55:09 +0000
ROA not after: Tue 13 Apr 2027 03:00:09 +0000
asID: 56048
IP address blocks: 203.196.0.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl
rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 05:17:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:6d:8b:f8:1d:4d:3c:b5:2e:97:ca:64:3f:b7:7e:ea:65:85:86:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
Validity
Not Before: Apr 14 02:55:09 2026 GMT
Not After : Apr 13 03:00:09 2027 GMT
Subject: CN=300EE65A4F67B52FC1437B919D75E1DEEA620962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:38:21:5a:75:21:b0:80:85:20:98:a3:f2:
a7:4f:f5:e2:ae:d4:d2:a7:05:18:4e:4d:cc:62:d8:
c2:6b:2c:74:c0:f8:f3:7a:42:d3:0d:40:e1:54:b6:
00:42:8e:3b:31:44:1d:64:b6:89:9b:d1:78:78:41:
05:f0:7b:86:34:c2:14:32:d6:7f:72:00:f9:9a:49:
f1:58:93:37:7f:23:ca:46:1c:4b:09:a4:89:d1:61:
f1:bd:61:3d:64:ab:9a:99:be:b9:a5:30:c9:db:46:
78:33:93:df:bf:9f:4a:ab:35:dc:34:22:cd:3a:e1:
d2:a5:b5:97:81:a0:65:a9:3a:a6:2f:40:f8:12:bb:
2c:68:e8:d1:4c:25:3e:90:00:d1:7d:cc:9f:69:9f:
df:be:55:d1:ab:d2:f0:54:ae:15:d6:ae:91:77:b9:
dd:a6:bd:0a:72:d5:29:cc:f2:51:84:33:3f:05:9a:
19:8f:b0:8b:43:32:6a:0b:15:0c:0c:51:1c:b5:3b:
31:9d:55:69:a7:31:ad:f2:4e:8c:50:d5:04:f6:d6:
e2:28:7a:ff:82:6b:32:1d:56:3c:af:ec:74:46:12:
4e:67:bd:a1:9b:d6:9c:f3:f0:b4:3f:34:8c:0f:67:
10:36:72:99:b6:f9:eb:73:2b:32:cb:bb:09:36:f5:
ff:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0E:E6:5A:4F:67:B5:2F:C1:43:7B:91:9D:75:E1:DE:EA:62:09:62
X509v3 Authority Key Identifier:
keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/3230332e3139362e302e302f32312d3332203d3e203536303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.196.0.0/21
Signature Algorithm: sha256WithRSAEncryption
33:9e:a4:f3:ad:18:02:88:41:53:62:e1:63:43:28:76:10:b1:
f1:6b:d7:12:a5:dc:4b:c8:26:bf:c9:0f:1c:0e:a5:45:fc:42:
9f:3c:f0:d7:1d:2b:d5:e2:3b:2b:e7:ec:b9:4b:99:e2:b0:a7:
b9:16:ef:ee:91:20:f3:13:93:f8:54:9a:ae:07:7c:25:aa:7e:
ec:8b:84:ba:70:4d:35:f7:f4:7c:76:13:a7:86:e8:1b:ec:37:
ac:14:c7:eb:dc:ac:4e:4d:1b:37:ab:75:4d:59:04:5e:8e:d3:
73:f2:86:67:2e:50:b6:f4:7f:c4:1e:be:7e:f3:e4:fd:af:28:
4d:18:16:f0:86:e6:5b:da:7a:4d:1c:b5:59:68:33:26:46:bd:
99:36:bf:09:23:a5:6f:31:f1:7b:93:86:a9:02:9e:4c:6f:4b:
f5:df:02:83:b2:83:a6:b5:d1:ca:a2:6d:da:08:f1:a2:e8:a7:
1d:17:65:52:6a:42:ce:ec:f2:d8:48:24:0c:c5:7c:39:5e:56:
c0:cd:31:6c:b4:ca:99:54:a4:9c:80:08:2c:49:12:5e:f4:b3:
c6:0f:1d:53:a4:c9:6a:e2:e9:65:14:2b:dc:9b:8c:ed:3e:05:
00:20:e4:7b:63:30:fb:98:94:2c:e1:46:21:34:14:14:dd:45:
a0:3d:9e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:26:32 2026 by rpki-client