
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097036477839179777/0/3230332e3131382e3234382e302f32322d3232203d3e203435303731.roa
File: 3230332e3131382e3234382e302f32322d3232203d3e203435303731.roa (raw, json)
Hash identifier: nsVtxkR/+GBz1gKXYRUuPMhNEkH95+hyumzsZS9hdyc=
Subject key identifier: 0A:88:35:75:82:F5:00:99:80:CD:63:F9:0F:C1:64:43:0A:CF:82:D8
Certificate issuer: /CN=F0F3E3439565B918CE50D05087491A23A7E8FF40
Certificate serial: 7824076E9BBD8E63D6AC3682724A03A0C7C70633
Authority key identifier: F0:F3:E3:43:95:65:B9:18:CE:50:D0:50:87:49:1A:23:A7:E8:FF:40
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0F3E3439565B918CE50D05087491A23A7E8FF40.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/3230332e3131382e3234382e302f32322d3232203d3e203435303731.roa
Signing time: Thu 16 Apr 2026 06:22:15 +0000
ROA not before: Thu 16 Apr 2026 06:17:15 +0000
ROA not after: Thu 15 Apr 2027 06:22:15 +0000
asID: 45071
IP address blocks: 203.118.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.crl
rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0F3E3439565B918CE50D05087491A23A7E8FF40.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:24:07:6e:9b:bd:8e:63:d6:ac:36:82:72:4a:03:a0:c7:c7:06:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0F3E3439565B918CE50D05087491A23A7E8FF40
Validity
Not Before: Apr 16 06:17:15 2026 GMT
Not After : Apr 15 06:22:15 2027 GMT
Subject: CN=0A88357582F5009980CD63F90FC164430ACF82D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f6:5c:00:97:96:0e:a8:29:b7:f0:9f:0c:50:
8f:2d:65:29:19:98:e5:17:1c:0e:65:9b:f0:df:7f:
8e:a2:f4:28:48:ae:6a:85:54:69:a2:7c:27:a4:6d:
ab:b2:b0:2d:7c:4d:b9:6c:d3:86:26:dc:ac:71:0a:
62:37:7b:c4:4a:75:82:ea:19:53:a9:e9:51:b3:c6:
f6:72:20:55:ae:27:85:2d:d7:87:d0:0d:2a:53:e5:
f4:59:fe:b9:e9:20:7c:ed:40:be:d5:b4:05:5d:bd:
96:0a:04:19:ee:12:c3:73:70:7f:ce:eb:9a:24:77:
91:62:74:17:8e:e1:64:c4:3e:cf:79:6f:32:20:1e:
16:6b:16:7f:43:72:a2:78:62:d8:d3:2f:52:d8:f8:
86:58:9c:be:1d:56:49:c0:cb:4f:6d:42:0d:0d:22:
3d:cd:b1:2d:e5:b6:c0:88:99:b8:80:91:c3:73:1e:
4d:cb:ed:de:c7:e1:10:90:07:35:af:a2:79:7d:fc:
86:a6:dd:e2:ce:5a:62:3f:bf:05:8a:60:45:fe:04:
e3:0f:cd:4f:6a:bf:91:95:5b:a0:f1:34:92:f1:aa:
4b:e0:45:45:c0:8f:83:70:52:d0:63:d0:7a:32:db:
9c:f6:da:04:00:96:59:f0:8b:b7:54:c0:0b:f9:61:
44:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:88:35:75:82:F5:00:99:80:CD:63:F9:0F:C1:64:43:0A:CF:82:D8
X509v3 Authority Key Identifier:
keyid:F0:F3:E3:43:95:65:B9:18:CE:50:D0:50:87:49:1A:23:A7:E8:FF:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0F3E3439565B918CE50D05087491A23A7E8FF40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/3230332e3131382e3234382e302f32322d3232203d3e203435303731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.118.248.0/22
Signature Algorithm: sha256WithRSAEncryption
88:59:2b:42:11:28:49:f9:92:1d:1c:e8:78:ce:b4:b6:12:a6:
9d:ee:e6:41:ba:43:2d:cb:c1:07:70:d1:2c:13:6d:a6:5a:e3:
fb:f0:41:95:27:1d:33:13:1c:55:83:1a:b5:a4:a3:23:65:21:
d1:64:27:a9:f3:4e:78:76:59:1d:30:dd:02:51:11:12:5b:bc:
a7:56:f3:2f:c3:73:63:1d:df:50:da:2a:14:c0:87:10:c1:fd:
d9:ab:71:c9:f8:eb:1f:b3:24:a1:11:01:d3:75:22:92:de:8d:
cf:a1:de:9e:a7:1b:fb:52:9c:fb:b2:15:c9:dc:1a:5a:41:04:
d7:44:d4:cf:5a:2e:a3:52:94:8b:af:1c:41:44:30:ec:2f:86:
8e:5a:23:13:46:dc:eb:53:07:13:f7:dd:d9:b3:ed:2e:46:c8:
b8:f2:5b:4c:d3:50:a7:f2:a2:ee:b2:4d:55:70:6d:da:76:58:
ed:46:46:65:57:66:fb:0d:92:e5:c8:14:b6:86:20:0d:e3:16:
52:32:d5:10:f7:2a:20:5b:55:33:d7:c0:e1:e7:c7:96:87:c8:
8a:7b:c7:c8:b0:57:29:94:e8:43:e2:c4:ef:3d:b8:88:b5:a2:
43:fd:30:2d:99:d5:1b:92:89:6d:69:fc:b3:fc:b1:e2:4b:e0:
97:35:a8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:51:05 2026 by rpki-client