
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096689320682651650/0/3231302e37362e302e302f31392d3139203d3e203234313337.roa
File: 3231302e37362e302e302f31392d3139203d3e203234313337.roa (raw, json)
Hash identifier: SPXl0CjrEONbgQYjRoIK4mMYVg5YjnRzNpU4hW+1gVM=
Subject key identifier: B1:31:27:EB:39:9C:1A:FB:D6:5C:87:95:32:A2:E9:15:0F:93:E3:8F
Certificate issuer: /CN=833355AAAB477A3A1D2F649973B483982F9BA6CE
Certificate serial: 6B011E38C1C7C2B7A7314DA3C566F5A1D383DA3B
Authority key identifier: 83:33:55:AA:AB:47:7A:3A:1D:2F:64:99:73:B4:83:98:2F:9B:A6:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/3231302e37362e302e302f31392d3139203d3e203234313337.roa
Signing time: Wed 15 Apr 2026 07:09:15 +0000
ROA not before: Wed 15 Apr 2026 07:04:15 +0000
ROA not after: Wed 14 Apr 2027 07:09:15 +0000
asID: 24137
IP address blocks: 210.76.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:09:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:01:1e:38:c1:c7:c2:b7:a7:31:4d:a3:c5:66:f5:a1:d3:83:da:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833355AAAB477A3A1D2F649973B483982F9BA6CE
Validity
Not Before: Apr 15 07:04:15 2026 GMT
Not After : Apr 14 07:09:15 2027 GMT
Subject: CN=B13127EB399C1AFBD65C879532A2E9150F93E38F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e2:db:eb:8e:94:b0:5e:ed:15:d2:fe:1a:0b:
cd:f0:13:f4:b0:ba:21:d0:49:a4:ef:1f:32:9c:98:
39:aa:10:05:15:13:18:62:09:bd:40:c9:88:50:9a:
3f:3c:26:9d:57:a5:c8:33:9a:55:77:ec:51:f9:b3:
83:ac:ba:86:b3:b5:a7:a4:04:1c:3a:1f:a1:2b:3e:
44:69:f8:ca:f6:65:7a:32:59:f2:b6:d3:01:5a:19:
b4:59:4b:f1:62:4b:76:ed:23:dd:f6:09:1b:3d:4b:
0c:00:de:a8:c5:b3:bb:f3:14:04:8a:5e:c3:f2:c0:
7d:1e:1e:30:3e:8d:fd:5a:60:fe:ac:0f:94:ee:e5:
19:d4:b9:b1:d5:dd:81:00:65:8f:99:29:ee:7b:49:
c1:1f:9c:de:5f:71:c2:16:24:13:cc:21:e7:7d:1e:
0b:37:95:b7:c7:37:56:bd:fa:6d:45:04:08:17:e6:
59:9c:4c:ea:93:4a:6b:0d:0d:58:9e:f3:69:df:a9:
f8:e0:dc:c3:0e:f1:63:a2:35:3a:1d:36:31:40:5f:
84:b2:d0:bd:6d:e8:77:ac:99:b9:93:25:3e:a4:6b:
8b:e9:03:68:e5:d1:95:95:8e:8d:2a:11:dd:4c:a1:
5a:ce:66:5f:33:ba:84:e3:f2:18:9c:2c:4e:cd:3b:
66:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:31:27:EB:39:9C:1A:FB:D6:5C:87:95:32:A2:E9:15:0F:93:E3:8F
X509v3 Authority Key Identifier:
keyid:83:33:55:AA:AB:47:7A:3A:1D:2F:64:99:73:B4:83:98:2F:9B:A6:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/3231302e37362e302e302f31392d3139203d3e203234313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.76.0.0/19
Signature Algorithm: sha256WithRSAEncryption
0b:2e:81:7f:3a:2f:2b:f8:72:10:72:5a:96:e3:57:97:5a:57:
71:11:e6:32:5e:cf:cf:ca:7e:26:e3:d6:db:2d:0f:c1:7a:7e:
c3:f6:cc:5f:86:f5:7b:7e:3f:39:e4:b0:ef:8c:3c:50:5f:d6:
1e:35:66:21:63:1d:6e:ad:f2:08:44:8a:7a:0a:19:94:a7:99:
a5:1b:7a:a7:ec:fe:bd:a2:27:84:69:bc:2c:13:80:de:d7:88:
ec:ab:ce:61:1e:53:bd:e9:b5:3d:f7:cc:15:6c:93:31:a1:04:
b7:29:80:5a:5e:56:ba:cb:07:19:61:6f:ec:07:15:83:69:f5:
d3:43:13:fd:11:36:72:57:38:69:9e:ee:02:89:a8:44:aa:3c:
3c:c5:8a:6a:39:ff:17:b2:e1:19:a8:a2:17:79:47:95:90:88:
af:56:7e:1d:a8:01:e4:31:de:1e:20:48:e1:71:5d:2d:bb:95:
0f:e3:8a:79:bf:c0:4f:45:10:42:bb:b9:d1:55:d0:d3:1a:f1:
5b:48:26:5a:12:57:7b:1b:a9:bb:fe:1f:24:97:cd:f4:02:06:
3c:38:fe:dc:bd:0c:d6:e7:53:9f:2b:28:05:b4:06:e7:00:5a:
ce:40:de:1c:ae:3f:52:cd:a8:ed:8c:4c:e0:c6:76:29:8e:62:
e3:1d:d4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:42:43 2026 by rpki-client