
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632003199041538/0/3130312e3235312e3134342e302f32302d3230203d3e2034383337.roa
File: 3130312e3235312e3134342e302f32302d3230203d3e2034383337.roa (raw, json)
Hash identifier: xoRs3FL3HieKEqrqewNhwvKSZqMvWnRJadRDQ7hi73M=
Subject key identifier: 15:03:4F:53:36:4E:5C:0C:2B:FC:0B:B1:67:43:BB:EF:34:04:76:C0
Certificate issuer: /CN=634581F1B95FBA204B1C8D0271BB81C7A7A08F63
Certificate serial: 649E6E8CD881B66042ADD238A089C6AAA3957225
Authority key identifier: 63:45:81:F1:B9:5F:BA:20:4B:1C:8D:02:71:BB:81:C7:A7:A0:8F:63
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/3130312e3235312e3134342e302f32302d3230203d3e2034383337.roa
Signing time: Wed 15 Apr 2026 03:11:38 +0000
ROA not before: Wed 15 Apr 2026 03:06:38 +0000
ROA not after: Wed 14 Apr 2027 03:11:38 +0000
asID: 4837
IP address blocks: 101.251.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.crl
rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 09:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:9e:6e:8c:d8:81:b6:60:42:ad:d2:38:a0:89:c6:aa:a3:95:72:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=634581F1B95FBA204B1C8D0271BB81C7A7A08F63
Validity
Not Before: Apr 15 03:06:38 2026 GMT
Not After : Apr 14 03:11:38 2027 GMT
Subject: CN=15034F53364E5C0C2BFC0BB16743BBEF340476C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0f:81:56:98:5d:51:cf:39:e4:82:e9:6a:78:
81:24:8c:97:27:26:28:97:50:73:10:4c:6b:79:94:
3c:3e:ed:1c:2a:d1:79:79:07:d3:bd:d6:88:8e:52:
a2:0b:f4:31:e2:d1:ca:01:2b:6f:88:6a:05:b3:7d:
ab:88:41:1f:1b:c6:37:e4:2e:66:4c:6e:eb:a6:00:
1d:a9:f3:05:41:4a:c2:ca:d6:d4:f6:57:05:bc:d6:
86:7a:60:b5:a9:cb:f9:89:66:39:0f:61:d5:90:61:
06:30:22:95:fc:43:7e:97:92:36:9e:c6:d1:b6:02:
4d:01:66:b9:83:5b:cd:f4:3f:ce:46:e9:72:a3:02:
3e:96:a6:30:4f:f7:11:8e:af:a9:35:3f:87:ea:1d:
27:53:a9:2b:cf:7b:a7:ef:e9:18:d0:f4:97:52:eb:
00:2d:e4:14:84:53:ac:8f:75:82:6d:07:e4:b9:d9:
7d:77:5a:84:6a:f8:c9:5c:3f:6c:c9:c0:ae:79:3b:
38:a4:75:9d:30:8b:68:be:04:db:77:3b:87:9f:48:
fe:56:af:bf:51:be:81:4f:7c:62:fc:6d:6f:36:0b:
c7:66:94:18:46:c9:79:2e:40:14:31:69:28:b5:54:
bf:18:ff:63:d3:7a:5d:5b:06:d7:0c:ac:6d:b4:2f:
f1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:03:4F:53:36:4E:5C:0C:2B:FC:0B:B1:67:43:BB:EF:34:04:76:C0
X509v3 Authority Key Identifier:
keyid:63:45:81:F1:B9:5F:BA:20:4B:1C:8D:02:71:BB:81:C7:A7:A0:8F:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/3130312e3235312e3134342e302f32302d3230203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.251.144.0/20
Signature Algorithm: sha256WithRSAEncryption
b4:50:98:96:19:62:85:dc:c7:a5:c8:f6:70:0d:ec:be:20:91:
e3:ec:a6:2c:67:b4:b5:87:86:45:ed:09:c1:43:14:17:fd:75:
ee:70:bc:70:31:64:cf:4d:db:67:f8:e0:f5:79:89:e5:ee:b8:
b6:ac:7d:d3:05:1e:d4:82:f2:44:f6:a2:35:e1:63:34:95:1f:
a0:94:d0:0a:6c:6d:ab:c5:69:77:bd:b0:b9:32:6c:8c:d2:d8:
2f:06:38:7c:6c:7f:6b:23:c4:b6:8a:83:5e:f9:48:1b:49:ad:
7d:32:44:3a:80:6e:23:81:3e:27:83:9f:41:11:88:c0:d1:84:
07:f0:71:9a:0d:97:9b:7f:79:49:77:35:10:af:24:bc:5a:c2:
16:52:60:6c:98:f9:ec:d8:7e:4f:8f:aa:ce:8e:76:ec:ab:76:
ff:7e:e3:e2:c1:6b:e2:1c:dd:3b:82:cf:02:6c:02:e9:6a:37:
ea:46:9a:a8:d3:7d:71:46:87:c5:85:7b:bd:6a:39:6a:f9:16:
c2:d9:2c:d3:59:54:72:47:5c:48:13:ba:73:b6:94:1a:13:28:
1a:94:70:0a:19:c5:57:3f:3c:a0:5c:b0:a9:b7:b1:39:58:be:
09:7a:21:6c:96:95:be:33:29:16:d4:77:c8:2e:72:ec:1c:d1:
66:23:c8:1f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:18:28 2026 by rpki-client