
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096979629178093570/0/3131362e3231342e33322e302f31392d3234203d3e2039383039.roa
File: 3131362e3231342e33322e302f31392d3234203d3e2039383039.roa (raw, json)
Hash identifier: htPttDVb0kWX6wnItHN++EBcVc6dyeN811V4YSR37w0=
Subject key identifier: B4:7D:D4:35:54:B4:98:CE:64:75:8B:F6:1F:AF:84:D6:8D:7C:81:AC
Certificate issuer: /CN=0491F42A3990BD60D32248583741F141AC61F0EE
Certificate serial: 70A5F619A4370ADA3AC415227FBCAF311B11CEDF
Authority key identifier: 04:91:F4:2A:39:90:BD:60:D3:22:48:58:37:41:F1:41:AC:61:F0:EE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/3131362e3231342e33322e302f31392d3234203d3e2039383039.roa
Signing time: Thu 16 Apr 2026 02:26:40 +0000
ROA not before: Thu 16 Apr 2026 02:21:40 +0000
ROA not after: Thu 15 Apr 2027 02:26:40 +0000
asID: 9809
IP address blocks: 116.214.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.crl
rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:a5:f6:19:a4:37:0a:da:3a:c4:15:22:7f:bc:af:31:1b:11:ce:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0491F42A3990BD60D32248583741F141AC61F0EE
Validity
Not Before: Apr 16 02:21:40 2026 GMT
Not After : Apr 15 02:26:40 2027 GMT
Subject: CN=B47DD43554B498CE64758BF61FAF84D68D7C81AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c9:07:af:dc:6c:64:72:ec:2b:70:a5:59:f3:
2d:08:b9:68:6a:33:87:a4:ac:d6:21:9e:8c:96:68:
94:c8:1f:d9:1f:84:4d:46:ea:67:0f:63:86:3d:21:
ac:c3:7a:cf:fe:f3:8d:5d:44:87:16:70:fd:a9:7c:
57:ea:45:58:05:1c:43:80:b9:e4:6e:ca:c5:8f:6a:
20:d4:09:f8:66:3e:8b:c8:a5:3a:d2:99:3b:33:8d:
74:85:1a:95:ba:1b:5c:57:87:31:e7:3e:c2:29:ce:
72:7a:43:98:ad:35:65:85:3b:77:2e:9b:c8:9d:a5:
3d:d1:01:a6:8e:3d:c4:61:b6:b5:af:1c:d0:e0:eb:
0b:a8:23:be:81:47:7b:44:2d:99:28:de:78:32:fe:
23:a1:28:8d:a8:35:4b:22:8d:f2:ef:d9:22:29:c6:
eb:02:a6:c6:3e:b0:6f:44:e0:e5:56:44:20:f9:46:
5c:a4:c7:ff:c3:c3:ec:91:89:84:f3:85:a2:54:00:
9d:4a:01:f5:bd:5d:47:07:d6:45:25:58:5b:31:58:
a8:9c:53:c0:c2:62:a5:87:3e:eb:4c:7f:b8:ba:8a:
8f:fe:87:84:53:ca:f3:65:eb:1a:22:ee:ec:e9:ba:
b6:c9:2b:cf:2b:03:5e:42:99:31:22:41:b2:c8:81:
8f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7D:D4:35:54:B4:98:CE:64:75:8B:F6:1F:AF:84:D6:8D:7C:81:AC
X509v3 Authority Key Identifier:
keyid:04:91:F4:2A:39:90:BD:60:D3:22:48:58:37:41:F1:41:AC:61:F0:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/3131362e3231342e33322e302f31392d3234203d3e2039383039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.214.32.0/19
Signature Algorithm: sha256WithRSAEncryption
2d:f4:8c:b9:0c:3d:af:26:e4:03:15:10:fe:20:47:33:84:c3:
9e:50:94:bf:73:bc:ec:b1:69:71:3c:eb:47:e6:3e:52:ec:1c:
1e:0d:70:90:fb:a5:cb:f1:df:90:3d:95:9a:3d:c9:2c:e7:a8:
88:3d:5e:39:3f:a5:84:34:61:7b:e9:2c:bc:1f:fb:e2:33:4c:
2e:91:15:7d:ee:29:e1:b0:25:bb:d6:39:c7:2b:8c:3b:7b:84:
46:e4:ec:77:c9:89:b3:d6:f2:b1:3b:24:a7:98:31:f2:17:b3:
50:4b:ff:c1:34:d8:b7:b3:b4:0e:4e:eb:34:2a:9b:a4:56:bc:
a6:16:6d:bf:16:6e:4f:3f:b1:37:52:b4:86:ab:c0:d1:ab:3f:
aa:01:4b:4a:c1:09:0e:4d:10:67:72:9c:d0:80:84:4f:1f:54:
52:e2:d3:d5:70:14:cc:72:48:d6:17:d1:a7:3e:7b:f0:cf:7c:
0f:9d:9e:d5:b5:b6:22:c4:fb:e1:4a:40:05:19:9e:ab:10:38:
e0:f2:6f:92:75:67:a1:4c:57:8e:f6:ff:6e:b4:33:f4:ba:92:
35:0b:8a:9d:12:d2:5d:09:54:4d:0c:a6:00:29:35:ce:ee:61:
49:b4:60:3e:9a:56:5f:fc:b3:6e:d5:87:70:0e:7d:cb:6d:ed:
0c:bb:19:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:29:13 2026 by rpki-client