
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e39362e302f32302d3234203d3e20313337373032.roa
File: 3131342e3131342e39362e302f32302d3234203d3e20313337373032.roa (raw, json)
Hash identifier: muvu6CQMqTuNlfNzK3PNDYlQpfEfxnnrgjlIM12wZFs=
Subject key identifier: CC:36:43:E8:78:44:29:F5:17:2A:42:DE:02:12:80:3D:EF:B1:40:DB
Certificate issuer: /CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Certificate serial: 127269695C396886B5FD8266CF0070923E69ABC2
Authority key identifier: F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e39362e302f32302d3234203d3e20313337373032.roa
Signing time: Thu 16 Apr 2026 00:16:28 +0000
ROA not before: Thu 16 Apr 2026 00:11:28 +0000
ROA not after: Thu 15 Apr 2027 00:16:28 +0000
asID: 137702
IP address blocks: 114.114.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 12:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:72:69:69:5c:39:68:86:b5:fd:82:66:cf:00:70:92:3e:69:ab:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Validity
Not Before: Apr 16 00:11:28 2026 GMT
Not After : Apr 15 00:16:28 2027 GMT
Subject: CN=CC3643E8784429F5172A42DE0212803DEFB140DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:57:7c:7a:fd:2e:9f:9e:7a:81:df:81:6d:ca:
9c:22:33:44:97:f3:a9:3e:13:fd:e5:8d:aa:bb:7f:
66:42:fe:84:94:25:1d:a2:a3:5d:12:a3:94:82:40:
5e:47:fa:ef:19:14:68:7d:ad:62:dc:f9:46:ff:de:
88:1f:da:7a:7b:46:9d:dd:3a:ed:25:8f:e7:9d:c5:
4f:28:9e:24:52:25:0f:aa:dc:57:dc:cc:27:be:6f:
4b:ea:17:74:11:8d:9f:01:76:58:dc:e0:98:76:da:
87:69:81:82:91:d4:41:27:92:02:0a:b2:ed:18:75:
5a:e8:8c:6d:30:17:bd:c3:c4:2f:24:be:9e:9e:4d:
fb:2f:36:7f:00:61:ec:77:ea:d8:2e:46:40:29:55:
66:46:00:6d:bb:76:6c:a2:e1:5f:01:27:d8:5f:60:
73:88:57:30:ad:a4:f4:ff:9e:de:87:73:a1:69:98:
79:b2:2f:93:77:73:27:06:b4:6d:be:2d:10:bb:b6:
e8:33:3b:8c:f0:c1:32:a3:6c:e5:15:32:1b:fe:1c:
2d:46:99:da:b2:35:c6:53:4e:88:95:fb:ab:45:66:
03:aa:dc:7e:20:f7:f6:17:5b:ad:a0:bd:a1:07:be:
7b:d6:d0:4b:33:bf:7a:38:eb:57:b2:d9:0f:ca:af:
93:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:36:43:E8:78:44:29:F5:17:2A:42:DE:02:12:80:3D:EF:B1:40:DB
X509v3 Authority Key Identifier:
keyid:F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e39362e302f32302d3234203d3e20313337373032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.114.96.0/20
Signature Algorithm: sha256WithRSAEncryption
96:a7:bd:70:ff:e1:e0:82:0c:59:e0:1c:c7:c9:76:5e:a2:1a:
80:87:df:53:5f:36:24:71:46:f0:1f:7f:3c:09:be:7c:e7:c9:
1c:c2:cf:67:e9:ae:86:5d:e4:3f:fa:56:b0:00:02:1a:28:07:
cd:09:5f:32:47:44:ff:89:2f:d4:b1:29:09:e1:29:8f:67:d0:
36:0a:ed:88:c6:45:d6:af:b4:03:ef:86:e0:06:c6:f2:41:cb:
c8:0f:1c:c4:1f:49:b4:76:70:be:8b:8b:30:38:a4:c2:27:e1:
48:97:d7:4a:45:4a:f9:5f:06:ee:b3:85:37:fc:b7:d5:b3:8e:
84:13:4e:15:9c:5b:7e:96:71:94:9e:cc:09:47:0e:6d:78:06:
9d:65:47:31:e7:99:41:18:46:84:89:97:12:ea:2e:7e:09:9b:
cc:c6:db:36:ef:11:09:0b:d5:18:7a:5c:c8:7c:85:7b:4c:19:
4d:15:76:31:11:46:cc:b3:a5:80:a0:1e:09:7f:e4:2e:3c:47:
53:dc:c2:e5:8e:ac:11:0c:09:11:9b:3a:7b:0f:b6:89:61:b2:
e1:00:64:47:d5:94:99:ea:a3:d8:9f:14:fc:73:e7:d2:9a:e1:
f8:b0:d3:3c:de:30:a1:ba:65:66:53:28:b4:24:72:fa:f8:e0:
61:41:a3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:10:42 2026 by rpki-client