
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e39362e302f32302d3234203d3e2034383337.roa
File: 3131342e3131342e39362e302f32302d3234203d3e2034383337.roa (raw, json)
Hash identifier: eZtOjO7I2MepkQbn85egh1Lnu1i+4JgpVaoIbcoDMcY=
Subject key identifier: F0:4F:B7:F0:5B:4B:A8:67:7E:0F:5A:D6:1B:16:44:81:20:FE:8A:3A
Certificate issuer: /CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Certificate serial: 1DBFF0CE70BE7A47E6C4A1CC0772E1D431985545
Authority key identifier: F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e39362e302f32302d3234203d3e2034383337.roa
Signing time: Thu 16 Apr 2026 00:18:22 +0000
ROA not before: Thu 16 Apr 2026 00:13:22 +0000
ROA not after: Thu 15 Apr 2027 00:18:22 +0000
asID: 4837
IP address blocks: 114.114.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 17:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:bf:f0:ce:70:be:7a:47:e6:c4:a1:cc:07:72:e1:d4:31:98:55:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Validity
Not Before: Apr 16 00:13:22 2026 GMT
Not After : Apr 15 00:18:22 2027 GMT
Subject: CN=F04FB7F05B4BA8677E0F5AD61B16448120FE8A3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:77:97:91:94:7f:df:74:19:03:e3:58:10:43:
e6:4b:7d:41:cd:31:78:83:7c:14:fa:73:32:9f:1d:
81:53:f5:6e:23:41:38:8a:dd:59:19:5b:cc:e3:50:
23:71:26:5e:03:4f:e1:bc:87:90:96:59:37:5f:11:
b4:a2:00:cf:71:11:c2:0e:2e:3f:75:25:6d:7d:5c:
2c:66:a3:31:1d:8c:c0:3c:2a:34:8b:93:d6:8d:38:
6a:f3:bd:fd:bb:fd:db:26:f9:34:f1:c6:8d:ab:35:
1c:95:91:5d:6b:ed:8d:a8:09:61:a7:dc:5a:49:fe:
44:38:37:8d:a7:98:41:92:74:f3:15:25:8c:6b:b6:
d5:62:66:9b:58:5b:bd:b6:5c:ed:f4:50:73:4d:4b:
52:42:9e:57:b4:68:1c:93:0b:21:ff:9b:b0:a8:a7:
26:fe:62:c8:28:3f:35:ad:2e:b4:ec:41:3a:86:8b:
ca:01:f0:9a:0a:56:26:1e:26:33:9b:88:1e:80:b0:
07:ff:b7:75:93:91:d7:99:b2:c5:b3:dc:6e:cd:f9:
61:4c:f9:1b:f5:ed:98:fc:0a:a9:4f:5d:ff:ed:99:
54:e2:46:43:5d:75:77:f2:d4:78:d5:be:35:9e:36:
8e:dd:d5:94:b9:34:48:0c:ed:d7:82:c0:8f:e4:40:
a8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:4F:B7:F0:5B:4B:A8:67:7E:0F:5A:D6:1B:16:44:81:20:FE:8A:3A
X509v3 Authority Key Identifier:
keyid:F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e39362e302f32302d3234203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.114.96.0/20
Signature Algorithm: sha256WithRSAEncryption
35:4b:65:a0:3d:cb:63:04:dd:a5:6f:cf:ff:31:2e:2c:22:92:
57:c8:89:ca:38:be:cb:28:9a:83:d5:37:ef:96:e4:3a:27:bc:
09:90:7c:31:8e:f5:a9:67:a9:79:8d:13:bc:79:78:1f:8a:e1:
36:3f:87:78:7f:6d:86:3d:b5:7e:c0:3a:db:90:c8:0c:21:2b:
80:09:f7:18:8b:6c:b5:bd:62:8b:ad:f0:55:68:7c:e8:0c:60:
7f:5e:58:ce:ad:d2:94:21:53:d5:f3:de:3b:07:e5:af:bc:99:
9c:5a:ee:85:77:89:5a:37:8e:12:12:bd:39:fa:5d:11:6f:f9:
dd:b8:9f:0d:74:eb:11:2a:22:9e:89:63:ad:43:26:67:0d:f2:
ef:c1:7b:93:ad:e7:5f:aa:ee:bc:ce:6c:a5:72:bb:4d:9a:e5:
38:35:3b:d1:99:39:a1:63:18:bd:51:09:ba:3b:a6:7b:cf:72:
1b:06:a7:dd:57:ad:ed:57:93:00:93:53:36:eb:e7:99:4f:da:
11:55:6d:61:67:42:46:72:fa:e1:cc:aa:38:2c:7c:97:a8:c3:
0a:90:14:ca:f4:f2:ff:ea:bd:6b:2e:da:94:01:1e:a8:6e:ca:
25:16:19:f5:ce:01:9b:d9:d3:60:8f:07:9f:6d:7c:95:a4:13:
4d:b9:73:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:47 2026 by rpki-client