
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e3132382e302f31372d3234203d3e20313337373032.roa
File: 3131342e3131342e3132382e302f31372d3234203d3e20313337373032.roa (raw, json)
Hash identifier: SfeGMuqHWzoAv9iGacYRYzdpfa3BDEWC2CuQowRuJd4=
Subject key identifier: 45:0C:47:6B:8B:00:FD:1F:30:0D:2C:5C:17:3F:8A:D9:D9:7E:A3:34
Certificate issuer: /CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Certificate serial: 2E4A9EDB675B4EDD19BE4A1F508A0CCDF1C34966
Authority key identifier: F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e3132382e302f31372d3234203d3e20313337373032.roa
Signing time: Thu 16 Apr 2026 00:16:28 +0000
ROA not before: Thu 16 Apr 2026 00:11:28 +0000
ROA not after: Thu 15 Apr 2027 00:16:28 +0000
asID: 137702
IP address blocks: 114.114.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 12:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:4a:9e:db:67:5b:4e:dd:19:be:4a:1f:50:8a:0c:cd:f1:c3:49:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Validity
Not Before: Apr 16 00:11:28 2026 GMT
Not After : Apr 15 00:16:28 2027 GMT
Subject: CN=450C476B8B00FD1F300D2C5C173F8AD9D97EA334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b3:1f:73:dc:12:3b:6f:9c:c5:72:8d:35:4e:
1c:95:6e:c4:6c:9d:b5:00:07:b8:10:22:8c:eb:e4:
09:22:d5:ce:10:ea:2d:5c:04:28:01:42:c5:85:9b:
79:e7:06:da:28:bf:92:98:7b:4b:0a:78:e3:59:44:
0c:2d:45:8f:03:68:ff:4e:23:86:b6:db:6f:80:b3:
68:81:e9:c1:b1:16:fd:51:3f:19:a5:d3:49:ef:b4:
56:cc:ad:1f:83:d5:c9:65:54:ba:58:61:80:57:85:
78:4d:e7:d7:ac:37:2f:a6:19:dd:c0:09:4f:66:7f:
51:b8:89:b3:33:9c:52:e6:3f:fb:0a:14:ae:c8:16:
22:00:5e:f5:f3:ef:d9:d5:05:85:79:5b:80:26:dc:
48:38:cf:2e:54:22:7d:7e:0f:72:66:d7:ee:ee:f2:
55:77:cd:5b:a7:ad:19:e1:88:18:db:c4:c1:69:50:
29:ff:ee:a9:cb:6b:40:3e:3c:4b:c5:66:6f:b3:81:
61:ad:a3:3d:37:c8:8b:ed:44:c0:83:a6:b8:98:53:
1d:ba:2d:b3:43:80:5d:a4:f9:83:d0:d9:a9:47:f2:
4d:84:55:c3:f9:dc:d4:6c:d3:f7:18:4b:42:e4:ce:
c0:8f:06:8e:9c:67:09:3e:46:43:b4:43:17:9c:1e:
c8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0C:47:6B:8B:00:FD:1F:30:0D:2C:5C:17:3F:8A:D9:D9:7E:A3:34
X509v3 Authority Key Identifier:
keyid:F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e3132382e302f31372d3234203d3e20313337373032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.114.128.0/17
Signature Algorithm: sha256WithRSAEncryption
6b:99:27:fd:0e:26:11:fe:60:8c:0e:f6:df:aa:01:58:ef:35:
75:c4:9a:f2:3f:69:f5:ac:cb:d1:43:ca:6f:ac:53:be:3a:20:
f6:f0:d2:b5:40:84:65:de:67:8e:b6:5c:34:ef:ce:af:ec:e0:
87:d4:53:bf:8c:25:a7:8d:d3:19:8a:fb:30:46:39:f2:18:dd:
af:32:ad:b7:51:83:32:93:ac:86:a5:c1:e4:6f:0e:e9:aa:cf:
2d:74:ec:6e:c4:6d:1e:f0:2d:d8:51:9e:c1:97:7b:d6:57:05:
b6:ea:ea:0b:36:db:5d:2d:9b:e5:f6:60:72:18:64:d9:58:2a:
9b:1f:d8:86:05:06:e8:a0:44:07:55:af:b8:36:10:01:b9:f1:
50:c0:f2:a7:8b:c8:ce:c8:ec:e9:bc:9f:a6:19:c9:d2:df:e3:
6b:56:ec:b9:3a:5a:c5:09:15:68:2e:17:ab:a3:64:16:9d:f8:
d4:ef:88:3c:fa:1a:b5:bb:1f:69:61:a1:ca:92:58:8d:da:c4:
d6:34:78:29:13:96:a7:59:5c:dd:27:26:ae:fc:24:75:bf:65:
f9:31:5c:2c:c4:d4:f5:fd:e8:0c:a6:72:c6:ab:ad:8a:b4:a7:
52:38:f6:8f:10:02:11:45:de:d9:f1:48:64:65:89:14:cc:23:
4f:51:00:94
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIULkqe22dbTt0ZvkofUIoMzfHDSWYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhCNEZDMjlGRUYyMEFERkFGQjI0QTZEQUY1RjQ0MTUy
MjZFRjhBODAeFw0yNjA0MTYwMDExMjhaFw0yNzA0MTUwMDE2MjhaMDMxMTAvBgNV
BAMTKDQ1MEM0NzZCOEIwMEZEMUYzMDBEMkM1QzE3M0Y4QUQ5RDk3RUEzMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0sx9z3BI7b5zFco01ThyVbsRs
nbUAB7gQIozr5Aki1c4Q6i1cBCgBQsWFm3nnBtoov5KYe0sKeONZRAwtRY8DaP9O
I4a222+As2iB6cGxFv1RPxml00nvtFbMrR+D1cllVLpYYYBXhXhN59esNy+mGd3A
CU9mf1G4ibMznFLmP/sKFK7IFiIAXvXz79nVBYV5W4Am3Eg4zy5UIn1+D3Jm1+7u
8lV3zVunrRnhiBjbxMFpUCn/7qnLa0A+PEvFZm+zgWGtoz03yIvtRMCDpriYUx26
LbNDgF2k+YPQ2alH8k2EVcP53NRs0/cYS0LkzsCPBo6cZwk+RkO0QxecHsi/AgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQURQxHa4sA/R8wDSxcFz+K2dl+ozQwHwYDVR0j
BBgwFoAU+LT8Kf7yCt+vskptr19EFSJu+KgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjU4Njc2NDAxNDg0NTk1NS8wL0Y4QjRGQzI5RkVGMjBBREZBRkIyNEE2REFGNUY0
NDE1MjI2RUY4QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjhCNEZDMjlGRUYyMEFERkFGQjI0QTZEQUY1RjQ0MTUyMjZFRjhBOC5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDk2NTg2NzY0MDE0ODQ1OTU1LzAvMzEzMTM0MmUz
MTMxMzQyZTMxMzIzODJlMzAyZjMxMzcyZDMyMzQyMDNkM2UyMDMxMzMzNzM3MzAz
Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEB3JygDANBgkqhkiG9w0BAQsFAAOCAQEAa5kn/Q4mEf5gjA72
36oBWO81dcSa8j9p9azL0UPKb6xTvjog9vDStUCEZd5njrZcNO/Or+zgh9RTv4wl
p43TGYr7MEY58hjdrzKtt1GDMpOshqXB5G8O6arPLXTsbsRtHvAt2FGewZd71lcF
turqCzbbXS2b5fZgchhk2Vgqmx/YhgUG6KBEB1WvuDYQAbnxUMDyp4vIzsjs6byf
phnJ0t/ja1bsuTpaxQkVaC4Xq6NkFp341O+IPPoatbsfaWGhypJYjdrE1jR4KROW
p1lc3Scmrvwkdb9l+TFcLMTU9f3oDKZyxqutirSnUjj2jxACEUXe2fFIZGWJFMwj
T1EAlA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:52:05 2026 by rpki-client