
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e36342e302f31392d3234203d3e2034383337.roa
File: 3131342e3131342e36342e302f31392d3234203d3e2034383337.roa (raw, json)
Hash identifier: uZR3/1/4YF72OuVTrOxRu4XvI1rHNO9/mv3P+UxzZfs=
Subject key identifier: 8B:80:B4:D3:B7:E5:D6:BA:55:51:59:2B:D6:57:31:19:6E:C8:3C:DB
Certificate issuer: /CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Certificate serial: 719BFEB9BC51620D100D180D119D8AF291465B5F
Authority key identifier: F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e36342e302f31392d3234203d3e2034383337.roa
Signing time: Thu 16 Apr 2026 00:18:22 +0000
ROA not before: Thu 16 Apr 2026 00:13:22 +0000
ROA not after: Thu 15 Apr 2027 00:18:22 +0000
asID: 4837
IP address blocks: 114.114.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 17:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:9b:fe:b9:bc:51:62:0d:10:0d:18:0d:11:9d:8a:f2:91:46:5b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Validity
Not Before: Apr 16 00:13:22 2026 GMT
Not After : Apr 15 00:18:22 2027 GMT
Subject: CN=8B80B4D3B7E5D6BA5551592BD65731196EC83CDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f2:33:75:18:77:0f:5b:20:d3:81:37:ec:3b:
93:9d:82:66:1a:0f:de:22:dc:97:53:0c:eb:a4:34:
00:17:7d:5f:91:62:07:3a:e7:1f:11:e4:dc:df:eb:
a3:78:70:60:43:8e:84:c7:9a:11:95:b7:b6:ab:d6:
31:1d:56:d1:66:19:a0:a8:ca:62:c0:25:29:65:f9:
2d:1b:aa:75:cc:bf:96:8d:06:a7:45:69:48:cf:d8:
e3:8a:21:25:d8:fe:df:32:b2:c2:2f:fe:a6:f3:3a:
b5:e8:28:a6:a3:cb:f4:70:e6:aa:ed:e6:e8:83:88:
2e:3c:01:d2:a4:29:bf:80:ec:49:7b:41:56:5c:da:
8b:91:c4:f7:f7:3a:18:37:84:6f:c9:80:3a:88:df:
7b:b1:f2:f2:07:09:f5:21:8f:74:63:8f:77:d8:0c:
a1:46:0b:6c:d6:ab:02:ad:ad:0f:cd:c8:36:d4:a1:
13:c1:52:4c:ad:a3:61:07:97:47:e5:61:17:a9:81:
a0:9f:83:7e:c0:20:7e:60:5e:71:45:0c:b9:84:92:
60:24:ad:9e:c4:64:51:7d:68:db:7a:27:78:9a:f8:
f1:ba:d1:10:80:1e:a0:42:94:07:43:82:a4:2d:02:
b4:94:8c:92:4c:19:78:a1:bd:9b:9c:c3:28:56:13:
b0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:80:B4:D3:B7:E5:D6:BA:55:51:59:2B:D6:57:31:19:6E:C8:3C:DB
X509v3 Authority Key Identifier:
keyid:F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e36342e302f31392d3234203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.114.64.0/19
Signature Algorithm: sha256WithRSAEncryption
41:c4:bd:32:33:99:5c:9a:8e:f7:04:fd:3b:86:40:c0:0d:dd:
8d:58:c0:23:b6:e9:a7:49:6c:87:70:d5:48:45:bc:c1:48:1a:
3a:70:70:21:a4:6e:c7:a7:b8:1b:fd:bf:ea:a6:e8:76:e2:94:
c8:cb:df:76:6e:b1:b2:27:cd:99:c4:17:f9:53:89:44:cc:02:
e0:a8:da:b9:84:89:b2:c0:11:c1:ad:2d:ad:e2:e1:61:8a:cd:
21:9f:63:bb:af:e2:26:9a:f7:6a:3f:ea:85:12:80:4a:22:c5:
20:7e:fb:65:ad:57:bd:1b:34:20:d3:c2:a1:76:ff:dd:fd:3f:
0f:f8:cc:84:c8:f6:de:52:c2:57:b2:3c:34:77:9a:99:64:43:
1e:c6:d9:2a:c6:f5:5b:a0:08:9d:61:d6:fc:c6:6e:1e:b5:e1:
02:8d:d9:da:b9:06:f1:f8:9a:5a:fd:68:29:6e:b9:e6:6e:9c:
78:ea:87:77:0b:5f:37:29:0b:12:90:b2:75:6d:1a:f9:8f:8b:
d1:59:d6:f8:29:4f:90:7e:1b:e2:3f:cb:9d:44:2c:12:43:04:
77:e1:b7:65:91:5a:21:0a:5f:95:0e:33:02:94:c5:16:c6:ee:
53:fe:f2:23:f1:74:db:26:5e:22:98:37:24:9e:ca:45:66:cb:
66:29:ac:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:46 2026 by rpki-client