
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096689320682651650/0/3131302e37372e302e302f31372d3137203d3e203234313337.roa
File: 3131302e37372e302e302f31372d3137203d3e203234313337.roa (raw, json)
Hash identifier: vFT248uRD9dRV6l6REbq38YYVSQHghdQGQxcqm5CnYY=
Subject key identifier: 14:F4:BE:1E:CF:6A:6F:0A:0A:89:59:41:7F:88:25:1D:77:56:28:3E
Certificate issuer: /CN=833355AAAB477A3A1D2F649973B483982F9BA6CE
Certificate serial: 27C0E017BC74DCC631CE99008F6F81BC1C278369
Authority key identifier: 83:33:55:AA:AB:47:7A:3A:1D:2F:64:99:73:B4:83:98:2F:9B:A6:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/3131302e37372e302e302f31372d3137203d3e203234313337.roa
Signing time: Wed 15 Apr 2026 07:09:15 +0000
ROA not before: Wed 15 Apr 2026 07:04:15 +0000
ROA not after: Wed 14 Apr 2027 07:09:15 +0000
asID: 24137
IP address blocks: 110.77.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:09:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:c0:e0:17:bc:74:dc:c6:31:ce:99:00:8f:6f:81:bc:1c:27:83:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833355AAAB477A3A1D2F649973B483982F9BA6CE
Validity
Not Before: Apr 15 07:04:15 2026 GMT
Not After : Apr 14 07:09:15 2027 GMT
Subject: CN=14F4BE1ECF6A6F0A0A8959417F88251D7756283E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d1:c6:be:ca:80:97:a6:6c:a5:1f:87:13:37:
be:e7:ed:3e:7b:c7:08:b5:26:f3:7e:27:86:92:fd:
44:49:5c:62:2e:c1:e4:1a:34:d3:5a:5e:a3:6c:05:
57:55:b8:49:a6:75:0d:c3:98:01:1b:8d:52:35:d2:
44:93:42:7f:f3:38:60:31:d5:7b:26:cc:e8:16:2a:
9e:94:33:e7:4e:87:ab:1f:82:8f:54:4a:28:7a:ce:
ad:c2:1d:61:b9:0a:fc:e5:f8:01:83:64:ea:f9:41:
13:08:8b:83:a4:e1:e4:28:e2:1e:c8:c9:69:3c:6e:
ab:e2:7f:91:58:ba:87:49:d1:e4:2b:05:05:07:5f:
25:22:84:cc:bc:7c:aa:60:42:83:71:7e:a1:d4:8d:
08:fd:5a:68:92:63:55:3f:a0:f1:c1:d7:38:4a:57:
89:5e:5c:8f:e5:f5:1a:10:62:0d:70:4f:e8:07:f1:
cb:7a:26:e2:d4:57:47:3d:bc:f1:ab:a4:b7:15:cc:
65:e7:7d:7d:da:a1:8a:f6:39:08:cf:ba:8d:5c:78:
e0:6c:94:49:b8:08:d9:1b:8d:4e:9f:5c:2b:b1:62:
76:06:97:e4:ae:98:8f:f6:91:15:31:e7:81:d9:cf:
ea:0c:88:89:14:a1:3c:2f:c2:8c:25:64:47:05:3c:
76:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F4:BE:1E:CF:6A:6F:0A:0A:89:59:41:7F:88:25:1D:77:56:28:3E
X509v3 Authority Key Identifier:
keyid:83:33:55:AA:AB:47:7A:3A:1D:2F:64:99:73:B4:83:98:2F:9B:A6:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/3131302e37372e302e302f31372d3137203d3e203234313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.77.0.0/17
Signature Algorithm: sha256WithRSAEncryption
07:26:24:54:dc:09:14:7a:e8:32:e3:5c:d8:f7:87:74:d5:e4:
e9:2c:b8:50:cd:76:e7:75:cd:09:25:d8:e5:0a:66:42:50:38:
9f:4a:80:d4:6c:80:cf:a0:10:ee:78:db:d9:17:9d:fc:61:b5:
08:55:47:9a:aa:a8:42:4c:0e:71:76:37:ee:d7:84:fc:64:c8:
20:5f:6f:48:13:c9:2b:50:a5:f7:5d:e6:dd:27:c2:30:9d:cb:
8a:33:b8:ba:c6:72:ee:3f:0a:60:ba:14:02:c8:4a:23:bb:4a:
2e:fe:36:9b:00:c5:b5:76:5b:1b:3c:f3:62:40:48:5e:c1:4f:
11:98:0a:29:30:71:ea:79:bc:be:3f:20:be:f1:1a:a3:38:24:
46:75:b2:1c:08:5b:b6:aa:cb:bd:89:14:48:28:1f:76:ac:20:
1a:4e:16:1a:8d:11:09:5a:9f:21:ae:57:7b:e5:ca:11:97:3b:
25:fd:24:bf:05:02:48:7a:18:bc:ec:00:e0:f0:89:42:98:15:
45:cb:06:3d:23:b4:4a:c1:32:7b:c8:ee:a5:a0:dc:10:69:ca:
da:26:ec:a8:5c:1b:fd:5e:cb:0a:69:92:c0:4e:b0:fa:f2:b8:
47:c7:ab:ba:8a:9b:e7:b1:61:4c:1b:de:cc:73:d9:4c:aa:29:
3b:e4:49:22
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUJ8DgF7x03MYxzpkAj2+BvBwng2kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODMzMzU1QUFBQjQ3N0EzQTFEMkY2NDk5NzNCNDgzOTgy
RjlCQTZDRTAeFw0yNjA0MTUwNzA0MTVaFw0yNzA0MTQwNzA5MTVaMDMxMTAvBgNV
BAMTKDE0RjRCRTFFQ0Y2QTZGMEEwQTg5NTk0MTdGODgyNTFENzc1NjI4M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC0ca+yoCXpmylH4cTN77n7T57
xwi1JvN+J4aS/URJXGIuweQaNNNaXqNsBVdVuEmmdQ3DmAEbjVI10kSTQn/zOGAx
1XsmzOgWKp6UM+dOh6sfgo9USih6zq3CHWG5Cvzl+AGDZOr5QRMIi4Ok4eQo4h7I
yWk8bqvif5FYuodJ0eQrBQUHXyUihMy8fKpgQoNxfqHUjQj9WmiSY1U/oPHB1zhK
V4leXI/l9RoQYg1wT+gH8ct6JuLUV0c9vPGrpLcVzGXnfX3aoYr2OQjPuo1ceOBs
lEm4CNkbjU6fXCuxYnYGl+SumI/2kRUx54HZz+oMiIkUoTwvwowlZEcFPHblAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUFPS+Hs9qbwoKiVlBf4glHXdWKD4wHwYDVR0j
BBgwFoAUgzNVqqtHejodL2SZc7SDmC+bps4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjY4OTMyMDY4MjY1MTY1MC8wLzgzMzM1NUFBQUI0NzdBM0ExRDJGNjQ5OTczQjQ4
Mzk4MkY5QkE2Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvODMzMzU1QUFBQjQ3N0EzQTFEMkY2NDk5NzNCNDgzOTgyRjlCQTZDRS5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2Njg5MzIwNjgyNjUxNjUwLzAvMzEzMTMwMmUzNzM3
MmUzMDJlMzAyZjMxMzcyZDMxMzcyMDNkM2UyMDMyMzQzMTMzMzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAduTQAwDQYJKoZIhvcNAQELBQADggEBAAcmJFTcCRR66DLjXNj3h3TV5OksuFDN
dud1zQkl2OUKZkJQOJ9KgNRsgM+gEO5429kXnfxhtQhVR5qqqEJMDnF2N+7XhPxk
yCBfb0gTyStQpfdd5t0nwjCdy4ozuLrGcu4/CmC6FALISiO7Si7+NpsAxbV2Wxs8
82JASF7BTxGYCikwcep5vL4/IL7xGqM4JEZ1shwIW7aqy72JFEgoH3asIBpOFhqN
EQlanyGuV3vlyhGXOyX9JL8FAkh6GLzsAODwiUKYFUXLBj0jtErBMnvI7qWg3BBp
ytom7KhcG/1eywppksBOsPryuEfHq7qKm+exYUwb3sxz2UyqKTvkSSI=
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:42:46 2026 by rpki-client