
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e39362e302f32302d3234203d3e203536303436.roa
File: 3131342e3131342e39362e302f32302d3234203d3e203536303436.roa (raw, json)
Hash identifier: ezCUIC9VcjeRK2+GTssm4PV96+Ina4oiGh1Ju4wnOtE=
Subject key identifier: 23:23:68:72:0F:B7:3B:5F:13:DB:2D:0B:63:37:8A:FD:24:D1:E7:F6
Certificate issuer: /CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Certificate serial: 55B15E76215DB154F70FB955A5CCBB37C165E9BF
Authority key identifier: F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e39362e302f32302d3234203d3e203536303436.roa
Signing time: Thu 16 Apr 2026 00:17:40 +0000
ROA not before: Thu 16 Apr 2026 00:12:40 +0000
ROA not after: Thu 15 Apr 2027 00:17:40 +0000
asID: 56046
IP address blocks: 114.114.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 17:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:b1:5e:76:21:5d:b1:54:f7:0f:b9:55:a5:cc:bb:37:c1:65:e9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Validity
Not Before: Apr 16 00:12:40 2026 GMT
Not After : Apr 15 00:17:40 2027 GMT
Subject: CN=232368720FB73B5F13DB2D0B63378AFD24D1E7F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:50:36:99:df:b2:8d:e6:61:59:21:8e:df:91:
66:0a:25:9c:af:21:ca:91:64:99:81:a9:c4:b5:1a:
0b:f8:d9:08:17:00:d9:47:99:49:3d:89:de:1f:5d:
24:05:ca:36:14:73:3f:7d:c7:52:06:0b:4d:68:61:
9e:6c:fb:49:15:21:8a:8e:b0:a0:8b:71:42:2d:96:
c1:9e:7e:e2:28:5d:ef:9c:f2:d9:d0:2b:1d:2c:bb:
ba:49:51:12:e0:e8:ed:33:0f:eb:2f:66:9b:0a:cd:
57:8b:14:8d:bf:b7:9c:28:bf:e0:7c:d2:c4:4b:45:
6c:02:10:4c:cf:12:ab:e3:6b:ff:fb:26:90:96:89:
df:0b:bd:56:0d:18:39:64:29:06:98:74:a4:8f:27:
db:65:d5:1d:60:94:34:3c:20:8c:54:04:92:d6:1a:
f0:cf:2c:c3:b9:f2:60:10:de:b9:6c:a0:95:88:4d:
3b:0d:72:b9:97:be:33:57:c9:2a:28:49:cb:5f:42:
cc:88:61:f9:80:92:42:2d:ea:00:ab:86:f6:c7:9b:
75:84:40:9b:fb:c1:9d:fd:7c:d7:c7:b6:9a:e0:18:
85:e7:94:54:ac:23:b3:62:36:db:bb:e2:e9:58:6e:
b0:fe:9f:58:bb:bb:91:36:5a:b2:a6:ea:13:c5:52:
c1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:23:68:72:0F:B7:3B:5F:13:DB:2D:0B:63:37:8A:FD:24:D1:E7:F6
X509v3 Authority Key Identifier:
keyid:F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e39362e302f32302d3234203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.114.96.0/20
Signature Algorithm: sha256WithRSAEncryption
0b:9f:82:43:63:cf:26:94:83:13:2d:6f:e1:1b:ce:f5:d8:89:
05:ab:bc:91:86:85:cb:d2:9f:bb:e6:9c:6b:71:df:6e:28:f5:
dd:42:b7:da:d2:08:0e:6a:22:ca:2b:b6:f3:43:f5:6f:28:5d:
36:72:72:84:f0:67:09:d7:5c:a8:cf:c8:0c:c4:36:90:24:23:
48:91:28:ed:96:20:17:19:0c:6b:ba:3e:0e:21:f6:c7:3b:1a:
b3:3d:97:df:68:04:00:af:6a:fd:32:7a:6d:2d:36:ee:90:1c:
17:aa:c5:4f:83:f7:1a:6b:95:e9:9c:74:06:8b:bd:46:fe:84:
01:a0:71:fc:a5:f4:97:96:96:91:7c:2e:d4:cb:20:d3:23:c6:
53:0d:25:1f:6b:8e:41:23:42:8e:a9:75:21:71:da:10:ba:ed:
ea:46:b4:b9:d8:76:f7:e0:a9:73:e3:f8:90:ae:02:cb:99:c1:
26:74:12:43:d5:a7:cb:e1:8b:d6:96:09:0b:68:87:e5:a0:f7:
4c:3a:dc:a4:7f:3f:58:56:29:f6:0f:7e:d6:cd:79:fa:10:91:
54:12:0c:3e:06:5d:46:6b:e1:1f:23:de:63:fa:e2:41:2e:68:
00:5e:05:c6:03:9d:27:cd:9c:bd:92:29:f2:a8:cc:30:9d:58:
9f:d9:fc:12
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:50:19 2026 by rpki-client