
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096603204424105986/0/3231312e3134382e3136302e302f31392d3139203d3e203233383431.roa
File: 3231312e3134382e3136302e302f31392d3139203d3e203233383431.roa (raw, json)
Hash identifier: bMsjW1jbE0mk/8BJ/0nz3O3UXsGlGA3e6jddE9uPDS4=
Subject key identifier: 4D:8D:C5:66:89:BA:22:4A:36:33:68:5F:00:6A:4E:27:EA:F4:AB:80
Certificate issuer: /CN=7F04F6FCE22750607E54E558E039E0F551D3135D
Certificate serial: F39E44BFBE507CA4137E634D9A9D77C492537E
Authority key identifier: 7F:04:F6:FC:E2:27:50:60:7E:54:E5:58:E0:39:E0:F5:51:D3:13:5D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/3231312e3134382e3136302e302f31392d3139203d3e203233383431.roa
Signing time: Wed 15 Apr 2026 01:17:05 +0000
ROA not before: Wed 15 Apr 2026 01:12:05 +0000
ROA not after: Wed 14 Apr 2027 01:17:05 +0000
asID: 23841
IP address blocks: 211.148.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 09:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
f3:9e:44:bf:be:50:7c:a4:13:7e:63:4d:9a:9d:77:c4:92:53:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F04F6FCE22750607E54E558E039E0F551D3135D
Validity
Not Before: Apr 15 01:12:05 2026 GMT
Not After : Apr 14 01:17:05 2027 GMT
Subject: CN=4D8DC56689BA224A3633685F006A4E27EAF4AB80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:13:b2:ba:db:77:33:8d:85:1e:78:75:3c:ff:
24:0a:69:60:0e:43:fb:01:7c:49:15:ad:dd:ed:55:
7f:1c:52:a6:af:ed:fe:e8:6c:90:ae:8a:31:ee:c4:
1e:d0:35:ef:9e:17:c3:b9:a5:68:b9:7d:6c:b8:f0:
d2:e2:fa:12:47:c0:12:c6:2f:06:93:8f:ad:f6:a5:
43:b4:d2:6c:3b:b1:9e:ab:16:04:5e:53:57:8c:5e:
4c:88:6b:0d:d0:de:64:e0:46:82:9c:77:86:9a:b0:
ea:57:04:32:e0:67:ba:6d:18:f3:cc:cd:de:12:96:
31:7d:f1:2b:e7:8b:9c:0e:fd:6d:58:e9:7a:0a:b4:
fc:d2:2e:59:75:3b:72:4d:85:28:87:c0:60:60:45:
fb:2a:59:3b:ab:77:f1:fe:1a:73:b0:01:35:2a:28:
3d:fa:98:7d:8c:18:e4:a0:73:96:3b:87:93:84:35:
08:cb:7a:04:0c:22:b3:87:a4:04:57:f1:4d:3e:ce:
16:e6:be:96:91:2a:55:71:59:24:d4:09:bb:c2:27:
7d:ce:7c:c2:f1:eb:52:31:ac:25:f0:34:1c:88:4b:
47:9c:16:5d:ad:2d:9b:36:be:63:77:f8:dd:45:f5:
97:f4:13:4f:1d:20:71:9e:77:bb:59:72:e7:b8:98:
0e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8D:C5:66:89:BA:22:4A:36:33:68:5F:00:6A:4E:27:EA:F4:AB:80
X509v3 Authority Key Identifier:
keyid:7F:04:F6:FC:E2:27:50:60:7E:54:E5:58:E0:39:E0:F5:51:D3:13:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/3231312e3134382e3136302e302f31392d3139203d3e203233383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.148.160.0/19
Signature Algorithm: sha256WithRSAEncryption
5a:ef:11:d3:7a:08:73:95:76:c9:b1:4d:bc:7f:fa:ff:d3:18:
9a:80:6a:7a:8d:6c:3b:bc:7d:f7:9c:8e:56:91:d4:ed:98:91:
5c:12:73:80:9a:6d:8d:c1:d6:9f:93:d6:57:e2:05:60:48:7e:
71:44:aa:d2:12:35:c5:5f:11:4e:a2:d6:24:b9:2a:fb:e3:bd:
4c:4c:c4:ab:b1:81:01:a6:05:52:bc:58:e1:12:07:4b:d8:2d:
a1:3b:78:fb:49:40:f2:19:29:6d:8c:79:47:44:36:ae:02:5c:
be:a7:2e:b2:4f:cd:ec:03:24:07:cd:22:d1:00:b5:ea:bf:8e:
29:3b:7a:67:7f:b9:8f:91:a2:56:df:a5:c2:20:d4:bc:1e:d5:
b4:47:31:21:80:38:97:89:9f:53:4e:32:33:3a:1f:08:15:19:
16:61:11:85:0a:17:ca:5a:43:0e:0f:c4:d3:c9:82:88:fa:70:
6b:63:ea:be:36:79:fd:75:82:44:c6:05:e7:14:e7:7b:ee:e4:
d6:5b:01:a5:8f:97:43:ec:8b:89:84:69:e7:fc:29:ca:ef:65:
28:35:32:b0:d4:ab:38:4b:23:5d:69:b6:fe:c0:84:d2:76:23:
f7:2e:99:10:51:25:58:f8:fe:7f:44:99:99:fd:01:0c:ff:a3:
75:29:ce:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:00:43 2026 by rpki-client