
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e3131322e302f32302d3234203d3e203536303436.roa
File: 3131342e3131342e3131322e302f32302d3234203d3e203536303436.roa (raw, json)
Hash identifier: UyvVI1qV2GuzweCMNqtEtPn8qvUYEiO6ioVdsraU5O8=
Subject key identifier: 50:2A:BB:81:C0:CC:01:25:50:89:6E:6E:5C:56:C3:7B:FF:F4:44:58
Certificate issuer: /CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Certificate serial: 47E21F5D4439FC093526D55256ED23ACFC227085
Authority key identifier: F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e3131322e302f32302d3234203d3e203536303436.roa
Signing time: Thu 16 Apr 2026 00:17:40 +0000
ROA not before: Thu 16 Apr 2026 00:12:40 +0000
ROA not after: Thu 15 Apr 2027 00:17:40 +0000
asID: 56046
IP address blocks: 114.114.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 17:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:e2:1f:5d:44:39:fc:09:35:26:d5:52:56:ed:23:ac:fc:22:70:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Validity
Not Before: Apr 16 00:12:40 2026 GMT
Not After : Apr 15 00:17:40 2027 GMT
Subject: CN=502ABB81C0CC012550896E6E5C56C37BFFF44458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f0:13:72:16:92:af:85:a2:11:21:ea:d9:0d:
00:7a:d9:7e:1a:61:3f:97:44:d7:af:3a:38:21:21:
af:16:c0:81:c0:a0:ec:fa:15:ab:a4:f6:bd:00:9d:
23:4a:71:24:99:de:b2:eb:28:1d:93:d0:da:b9:37:
d2:24:e6:1d:a8:2d:57:97:1c:0b:96:df:74:2a:da:
ce:c0:34:a5:92:e2:4e:fb:bc:ef:bd:05:01:e7:95:
bf:5d:51:6e:c8:3a:1a:c8:d1:b0:b8:98:5f:07:15:
4b:40:50:40:14:52:57:f8:d1:03:05:44:62:ac:bc:
57:49:33:37:d2:ca:20:11:db:8f:a4:00:f5:42:f0:
d6:66:87:66:e4:a2:f6:77:4b:2a:e2:63:54:44:69:
71:a6:8f:23:9f:12:92:4d:d4:e8:ba:17:87:cd:d0:
50:cd:34:44:40:6e:9b:dd:f9:36:97:4f:b3:fb:d2:
57:20:8f:da:74:ae:d4:5f:5b:42:c8:19:ec:1d:73:
ed:d9:76:cc:bb:a5:c8:e8:f9:27:59:aa:84:6a:3c:
f8:0d:4a:6c:44:1d:ea:f7:32:c4:26:41:22:54:59:
9c:bd:d3:a9:ee:b8:b0:a5:6e:0e:80:fa:4f:39:b8:
63:6b:da:03:c8:9d:d0:4a:75:a0:b5:bc:e5:48:91:
58:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:2A:BB:81:C0:CC:01:25:50:89:6E:6E:5C:56:C3:7B:FF:F4:44:58
X509v3 Authority Key Identifier:
keyid:F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e3131322e302f32302d3234203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.114.112.0/20
Signature Algorithm: sha256WithRSAEncryption
5d:c6:f2:fa:03:e8:48:42:6c:72:9b:0a:79:4d:63:c9:db:f5:
4d:1d:7e:ba:e6:86:10:4d:b6:42:29:d0:c1:59:e7:40:98:45:
1f:70:d0:73:88:fd:64:ca:d7:7e:9f:cc:35:9e:8e:15:e1:f5:
c8:5a:7f:3b:86:11:4d:29:fe:30:7d:55:f8:66:0e:b6:cf:7f:
e9:c1:c6:5d:4e:da:58:ba:1a:06:01:d9:34:12:2d:7f:b8:79:
0d:c4:33:e1:fa:eb:1e:92:26:01:91:8e:e1:e0:0e:bf:18:45:
e1:23:f6:5f:27:80:c8:37:70:44:0f:15:6e:56:13:84:ec:b0:
94:b2:b2:9f:f2:aa:4b:c8:9d:fe:1b:f4:a6:f7:4f:ec:f4:c0:
5d:ab:95:3a:d3:8e:81:ac:38:0f:94:c1:fa:75:d3:5d:c3:e4:
58:1a:9c:83:7a:c0:80:40:5d:ec:c0:39:e7:1a:36:c3:11:15:
b2:89:52:a0:c2:50:a7:de:4e:55:f6:f1:3b:75:3c:9d:8f:f7:
03:6b:a0:22:bc:23:38:85:62:91:10:61:fe:65:ad:b4:8e:f6:
64:9b:69:9c:b1:a3:4c:89:f6:e7:a6:bd:9d:b4:d5:6a:ff:d9:
6e:ac:62:08:9c:f1:b1:96:46:d9:58:d2:35:a4:10:e8:fa:58:
cf:7e:3e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:02:33 2026 by rpki-client