
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096369310038753281/0/3138302e3138382e31362e302f32302d3332203d3e203536303431.roa
File: 3138302e3138382e31362e302f32302d3332203d3e203536303431.roa (raw, json)
Hash identifier: szGp+4joOygdRb/SahIDDpnkx8AeRucUTqs1bjYkcvQ=
Subject key identifier: 84:AF:37:D6:A6:16:9F:34:82:AD:8E:33:87:B4:CE:A0:EC:EA:4D:F8
Certificate issuer: /CN=F8C6F9367F4D734F71F08C8E153CC520475E2DB7
Certificate serial: 17FEB4CB2DBDD4E4F654C5FBF0EB0D1093079D46
Authority key identifier: F8:C6:F9:36:7F:4D:73:4F:71:F0:8C:8E:15:3C:C5:20:47:5E:2D:B7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/3138302e3138382e31362e302f32302d3332203d3e203536303431.roa
Signing time: Wed 15 Apr 2026 08:05:41 +0000
ROA not before: Wed 15 Apr 2026 08:00:41 +0000
ROA not after: Wed 14 Apr 2027 08:05:41 +0000
asID: 56041
IP address blocks: 180.188.16.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.crl
rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:fe:b4:cb:2d:bd:d4:e4:f6:54:c5:fb:f0:eb:0d:10:93:07:9d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8C6F9367F4D734F71F08C8E153CC520475E2DB7
Validity
Not Before: Apr 15 08:00:41 2026 GMT
Not After : Apr 14 08:05:41 2027 GMT
Subject: CN=84AF37D6A6169F3482AD8E3387B4CEA0ECEA4DF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cd:fd:f1:85:fc:a6:f2:1b:39:2e:e6:bf:7a:
30:2f:53:5a:76:30:f7:ff:22:93:27:e0:89:30:19:
36:e5:c9:1c:8b:c6:16:d2:df:bd:4c:18:e5:84:32:
e4:dc:ed:8c:61:61:cb:47:a0:ad:90:8f:37:ce:4e:
7d:ba:62:04:23:de:5c:42:57:ce:0b:3a:54:5c:cd:
6b:9f:64:11:4c:5d:d5:52:94:2a:46:38:a3:ec:cc:
dc:09:8d:ca:4b:ea:69:88:df:62:47:ad:43:4b:cd:
71:33:f4:6b:66:dc:6e:ab:bd:d1:8b:fe:aa:3f:95:
37:18:98:41:f0:e6:1d:39:cb:e3:b5:61:5f:6c:f9:
d7:0a:fe:67:21:05:d1:84:8b:7c:2d:1b:dd:17:b9:
e0:78:3a:f1:dd:99:02:5d:45:77:ab:b1:a6:e9:cf:
7c:c6:a4:51:a2:b6:7c:1b:95:9c:75:4b:26:29:f2:
0d:ad:46:ac:3a:13:17:1c:37:33:c3:13:ce:52:18:
5b:fd:09:05:91:70:06:2e:51:8a:f3:45:f9:32:f8:
b1:cd:c7:4c:21:27:59:ad:ad:00:1f:ac:12:4f:86:
33:7b:8e:d0:aa:5d:47:61:b0:fc:65:c9:c5:81:06:
49:e0:25:30:7a:50:52:0a:07:f0:b4:b7:58:84:bc:
12:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AF:37:D6:A6:16:9F:34:82:AD:8E:33:87:B4:CE:A0:EC:EA:4D:F8
X509v3 Authority Key Identifier:
keyid:F8:C6:F9:36:7F:4D:73:4F:71:F0:8C:8E:15:3C:C5:20:47:5E:2D:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/3138302e3138382e31362e302f32302d3332203d3e203536303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.188.16.0/20
Signature Algorithm: sha256WithRSAEncryption
81:ba:53:cf:27:33:2d:17:5d:ba:f5:2a:2f:71:28:f4:b7:df:
19:93:88:9e:30:8a:d4:7e:9e:df:41:32:0b:66:c2:6a:90:71:
d2:ea:aa:6e:c7:cc:d8:9b:51:5a:01:9e:b7:9f:d3:92:d3:d7:
38:36:33:ff:14:ec:06:ed:91:2a:b5:c7:7d:d2:48:22:89:75:
25:1c:2f:0e:b9:f2:08:94:2c:73:1e:84:3c:0c:13:42:7b:fe:
cb:f2:a5:52:12:9c:8e:2c:10:8c:21:63:ec:78:60:e0:d4:4a:
4d:c7:38:14:df:91:4c:93:8f:95:d9:cb:51:81:49:ef:fe:89:
f9:9b:0a:5c:7d:73:5a:85:f8:52:62:9a:5a:84:da:51:ca:0a:
8b:79:23:ca:46:67:c6:52:b9:67:8b:53:40:7f:ca:74:af:ed:
9d:b7:71:0d:ae:14:23:2a:9c:c1:d5:90:52:f6:7f:23:d5:4b:
b3:ba:8c:48:49:12:6d:55:bd:0c:13:a7:c4:09:eb:14:a3:e2:
88:87:ac:d4:23:09:a1:39:91:96:b9:e4:45:94:bd:d0:d8:4e:
44:44:98:54:62:1f:1a:67:e2:a3:d0:11:cd:73:17:f5:a1:91:
ed:0a:f1:69:c1:3f:6e:2a:5d:a3:2f:01:58:3b:ca:ce:ad:63:
29:71:19:a9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:08:43 2026 by rpki-client