
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097036124037054466/0/3131302e3137322e3234302e302f32302d3230203d3e2030.roa
File: 3131302e3137322e3234302e302f32302d3230203d3e2030.roa (raw, json)
Hash identifier: BlJQFtwEe239oiLFMf7gt0MKpGM3ZXb59VD8C+ezkpg=
Subject key identifier: 9E:2A:14:08:4B:5B:03:0E:6A:6B:2F:11:F6:8C:5D:90:EB:46:4D:B0
Certificate issuer: /CN=9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22
Certificate serial: 1394804149D4882EFDEC0FF3063FD0D938F93C12
Authority key identifier: 9A:2C:DA:A9:66:FD:96:CB:EC:CC:40:BC:FC:3D:E1:B2:23:26:3C:22
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/3131302e3137322e3234302e302f32302d3230203d3e2030.roa
Signing time: Thu 16 Apr 2026 05:55:33 +0000
ROA not before: Thu 16 Apr 2026 05:50:33 +0000
ROA not after: Thu 15 Apr 2027 05:55:33 +0000
asID: 0
IP address blocks: 110.172.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl
rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 07:08:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:94:80:41:49:d4:88:2e:fd:ec:0f:f3:06:3f:d0:d9:38:f9:3c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22
Validity
Not Before: Apr 16 05:50:33 2026 GMT
Not After : Apr 15 05:55:33 2027 GMT
Subject: CN=9E2A14084B5B030E6A6B2F11F68C5D90EB464DB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:79:7e:28:7e:d1:c7:e6:2c:ff:3f:2d:90:14:
c9:42:56:70:60:b6:a0:0e:b4:e2:2b:34:93:80:3e:
bd:a8:ce:33:e5:7b:f5:a3:2a:9f:55:9c:c6:3d:54:
d5:59:aa:7f:a6:ea:20:9b:97:05:f9:d7:81:43:f9:
6d:2e:bf:a2:08:a7:b0:ea:dd:f2:f7:92:df:e4:41:
34:63:ce:14:00:01:54:65:3e:97:91:5a:9d:a9:ec:
14:0e:f0:95:47:6b:6b:74:76:b7:93:8d:6c:9b:e1:
79:d7:27:41:51:04:ee:b5:03:77:14:69:c9:f6:88:
25:96:c8:13:31:4a:65:48:6f:e2:ce:3a:6f:6e:b9:
67:73:70:8b:08:12:aa:44:65:ce:0f:87:08:bd:67:
70:40:03:c3:ca:bd:50:c6:7a:9f:0b:79:cb:a5:c8:
9d:d6:12:52:22:15:0c:60:24:27:cf:4c:d3:42:45:
d4:ec:8c:43:d2:7d:7e:2d:54:7f:24:fc:b2:6d:91:
15:1e:52:6e:6c:d3:8c:a7:68:d0:b9:20:19:31:11:
f1:95:91:54:c0:07:2c:ed:7b:62:85:74:48:8a:21:
f0:f4:f1:bc:e9:3a:35:13:f0:8c:58:f4:a6:61:70:
9a:b7:7a:f0:5c:73:5f:1a:e0:7d:18:0d:aa:06:8f:
9f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2A:14:08:4B:5B:03:0E:6A:6B:2F:11:F6:8C:5D:90:EB:46:4D:B0
X509v3 Authority Key Identifier:
keyid:9A:2C:DA:A9:66:FD:96:CB:EC:CC:40:BC:FC:3D:E1:B2:23:26:3C:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/3131302e3137322e3234302e302f32302d3230203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.172.240.0/20
Signature Algorithm: sha256WithRSAEncryption
4b:30:cb:ee:25:03:98:e0:3f:b6:15:9c:ca:78:3d:6b:95:99:
1b:9c:55:ba:8b:a4:13:64:43:bd:1b:01:cc:1b:87:12:2d:82:
ef:71:cc:a4:5d:25:49:ce:91:af:a8:ff:4f:1a:06:02:93:4e:
83:a8:32:e9:11:99:60:40:fb:f9:9a:7f:27:d6:ea:28:2c:73:
72:9c:09:96:17:e4:1b:28:4f:05:c3:4a:40:6b:4e:ab:81:8a:
46:3c:ed:eb:d8:ab:7f:33:16:36:51:c2:fb:4e:b9:4a:4d:9a:
94:64:18:b4:23:f4:8e:6a:ab:0a:d4:2f:69:00:e6:6b:9f:89:
f8:e4:50:16:95:22:6b:6c:29:e2:95:0a:31:b3:e3:6e:7c:c8:
04:8c:b4:46:d7:81:9a:24:6d:96:ca:6c:a4:33:98:3e:b3:79:
ba:2f:b7:a1:61:0a:a7:eb:57:67:fb:35:84:ed:86:36:86:86:
f6:ac:4c:14:53:af:b3:c5:ec:52:fd:82:02:02:e7:d4:fb:03:
10:6f:f7:f9:53:cf:dc:3c:69:37:4f:ee:68:9b:54:0b:2c:9c:
ac:ff:b8:91:87:01:ab:c0:60:8a:cc:ff:e0:42:5d:af:61:ea:
14:18:70:85:c2:f5:0a:cd:79:38:e9:8e:80:a8:77:b9:af:ef:
25:93:19:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:35:36 2026 by rpki-client