
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e302e302f31382d3234203d3e20313337373032.roa
File: 3131342e3131342e302e302f31382d3234203d3e20313337373032.roa (raw, json)
Hash identifier: nLm7pgJsZIIGPL2vx/lrEFek1uPCaLKs4C53MBfr6vs=
Subject key identifier: 8F:37:47:CF:C3:D4:15:19:90:8D:17:DA:90:49:13:47:45:7C:15:70
Certificate issuer: /CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Certificate serial: 6DD2423C9A7E4882F90112236A7C421FD352480B
Authority key identifier: F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e302e302f31382d3234203d3e20313337373032.roa
Signing time: Thu 16 Apr 2026 00:16:28 +0000
ROA not before: Thu 16 Apr 2026 00:11:28 +0000
ROA not after: Thu 15 Apr 2027 00:16:28 +0000
asID: 137702
IP address blocks: 114.114.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 12:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:d2:42:3c:9a:7e:48:82:f9:01:12:23:6a:7c:42:1f:d3:52:48:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Validity
Not Before: Apr 16 00:11:28 2026 GMT
Not After : Apr 15 00:16:28 2027 GMT
Subject: CN=8F3747CFC3D41519908D17DA90491347457C1570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:83:48:ff:97:77:e5:0d:63:53:9b:f0:ea:7e:
29:fd:f3:12:14:75:2d:21:86:be:1a:05:1e:e4:a7:
77:0c:0a:26:25:0d:0f:81:1a:10:e8:a1:d9:2e:2b:
f5:a0:4b:df:3b:88:67:cf:9c:2d:d3:ae:66:19:67:
38:f4:3b:f9:78:50:f5:77:66:d5:f1:74:ac:b3:6f:
68:da:fb:3a:6d:8b:3b:a6:56:fb:09:dd:91:bc:3a:
d0:a8:88:54:71:3a:0a:eb:a9:fd:ca:46:f7:46:ec:
c7:f7:b6:49:e4:4f:9a:b9:eb:5f:7c:11:a1:b7:83:
c3:ad:4c:86:02:c1:6c:d3:9f:37:9d:7f:8c:01:c8:
1c:cb:25:32:d9:c0:5a:27:95:a5:3f:0f:8f:13:b8:
fb:25:8c:1a:b6:30:52:d0:c2:e0:6d:08:16:63:fe:
95:8c:f6:88:c0:60:8d:ab:33:28:c8:bf:73:82:d0:
1f:9b:a9:eb:23:bd:50:67:a2:77:14:5f:26:5d:b0:
e5:a0:a1:1d:cf:0a:df:ac:1f:eb:b5:ba:01:73:b1:
aa:a7:a8:65:a2:74:d5:8c:c5:9e:ee:f2:c7:e5:2a:
2b:13:67:fd:7d:43:a5:3a:b1:11:4c:b2:9a:4b:79:
b0:ff:d8:4d:1f:65:f4:e6:63:ef:a5:e7:85:13:af:
78:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:37:47:CF:C3:D4:15:19:90:8D:17:DA:90:49:13:47:45:7C:15:70
X509v3 Authority Key Identifier:
keyid:F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e302e302f31382d3234203d3e20313337373032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.114.0.0/18
Signature Algorithm: sha256WithRSAEncryption
bb:f0:db:f0:f6:f2:f6:4d:bb:a9:3b:f7:46:66:ef:0b:a3:3d:
24:fc:42:45:f1:93:60:9c:81:b9:23:63:08:03:0b:9b:42:20:
dc:81:2a:ff:8c:36:5b:66:49:1c:74:38:60:b2:14:30:79:ae:
3e:32:7d:75:3c:9c:0e:b7:65:bb:88:89:67:36:c7:bd:86:2b:
cd:35:19:6c:c2:e3:b4:82:9d:62:b4:08:28:a2:74:25:92:a7:
52:ec:76:93:48:7c:6d:73:51:9a:02:d4:32:d7:bb:2b:ad:f1:
76:db:ce:0d:34:88:39:53:b7:12:ea:e4:67:50:34:7c:45:08:
f7:11:24:79:ef:bc:1d:47:76:1f:72:fb:bb:22:f3:0f:22:91:
f8:5d:33:7e:a0:91:9b:b4:d3:18:19:eb:84:49:df:d6:6d:58:
7e:f0:4e:41:5f:25:3a:39:72:20:1e:42:c8:cb:b4:3e:aa:22:
05:e9:1a:94:06:11:d0:43:e2:cb:92:09:d6:33:1c:81:95:21:
4a:96:31:59:2e:46:53:fb:87:06:e4:59:dd:4f:00:67:c0:d3:
44:8c:08:ea:a8:85:2e:3c:20:1d:49:02:99:4f:d8:fd:b1:07:
a5:45:32:48:f7:40:5d:c6:94:94:a4:10:c2:af:5f:e0:7f:7a:
29:bd:67:80
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUbdJCPJp+SIL5ARIjanxCH9NSSAswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhCNEZDMjlGRUYyMEFERkFGQjI0QTZEQUY1RjQ0MTUy
MjZFRjhBODAeFw0yNjA0MTYwMDExMjhaFw0yNzA0MTUwMDE2MjhaMDMxMTAvBgNV
BAMTKDhGMzc0N0NGQzNENDE1MTk5MDhEMTdEQTkwNDkxMzQ3NDU3QzE1NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0g0j/l3flDWNTm/Dqfin98xIU
dS0hhr4aBR7kp3cMCiYlDQ+BGhDoodkuK/WgS987iGfPnC3TrmYZZzj0O/l4UPV3
ZtXxdKyzb2ja+zptizumVvsJ3ZG8OtCoiFRxOgrrqf3KRvdG7Mf3tknkT5q56198
EaG3g8OtTIYCwWzTnzedf4wByBzLJTLZwFonlaU/D48TuPsljBq2MFLQwuBtCBZj
/pWM9ojAYI2rMyjIv3OC0B+bqesjvVBnoncUXyZdsOWgoR3PCt+sH+u1ugFzsaqn
qGWidNWMxZ7u8sflKisTZ/19Q6U6sRFMsppLebD/2E0fZfTmY++l54UTr3jTAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUjzdHz8PUFRmQjRfakEkTR0V8FXAwHwYDVR0j
BBgwFoAU+LT8Kf7yCt+vskptr19EFSJu+KgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjU4Njc2NDAxNDg0NTk1NS8wL0Y4QjRGQzI5RkVGMjBBREZBRkIyNEE2REFGNUY0
NDE1MjI2RUY4QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjhCNEZDMjlGRUYyMEFERkFGQjI0QTZEQUY1RjQ0MTUyMjZFRjhBOC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NjU4Njc2NDAxNDg0NTk1NS8wLzMxMzEzNDJlMzEz
MTM0MmUzMDJlMzAyZjMxMzgyZDMyMzQyMDNkM2UyMDMxMzMzNzM3MzAzMi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBnJyADANBgkqhkiG9w0BAQsFAAOCAQEAu/Db8Pby9k27qTv3RmbvC6M9
JPxCRfGTYJyBuSNjCAMLm0Ig3IEq/4w2W2ZJHHQ4YLIUMHmuPjJ9dTycDrdlu4iJ
ZzbHvYYrzTUZbMLjtIKdYrQIKKJ0JZKnUux2k0h8bXNRmgLUMte7K63xdtvODTSI
OVO3EurkZ1A0fEUI9xEkee+8HUd2H3L7uyLzDyKR+F0zfqCRm7TTGBnrhEnf1m1Y
fvBOQV8lOjlyIB5CyMu0PqoiBekalAYR0EPiy5IJ1jMcgZUhSpYxWS5GU/uHBuRZ
3U8AZ8DTRIwI6qiFLjwgHUkCmU/Y/bEHpUUySPdAXcaUlKQQwq9f4H96Kb1ngA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:27:53 2026 by rpki-client