
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e32352e302f32342d3234203d3e203233383438.roa
File: 3132342e3139362e32352e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier: gS4XstVYuoTZxZPkTuTtk+ucyD4oevWlpHELfOxU+78=
Subject key identifier: B8:67:1D:88:6D:E5:12:89:08:1F:F5:9E:A0:35:D5:46:C9:1E:E7:DE
Certificate issuer: /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial: 3A93E2627E0D54D7BB5AEB33218CF9A4BAE7898C
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e32352e302f32342d3234203d3e203233383438.roa
Signing time: Thu 16 Apr 2026 09:13:35 +0000
ROA not before: Thu 16 Apr 2026 09:08:35 +0000
ROA not after: Thu 15 Apr 2027 09:13:35 +0000
asID: 23848
IP address blocks: 124.196.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 05:50:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:93:e2:62:7e:0d:54:d7:bb:5a:eb:33:21:8c:f9:a4:ba:e7:89:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
Validity
Not Before: Apr 16 09:08:35 2026 GMT
Not After : Apr 15 09:13:35 2027 GMT
Subject: CN=B8671D886DE51289081FF59EA035D546C91EE7DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ce:a5:a9:78:23:9c:f2:81:74:9b:d0:f3:40:
34:a3:82:d1:ec:d4:7e:90:91:f2:90:c4:d2:2c:29:
93:4e:48:ab:6d:70:9e:00:e8:e0:1c:0d:c0:14:b7:
99:a6:9c:ea:d6:b9:47:e0:cf:d9:04:28:d0:1e:94:
e7:ee:93:34:61:df:b7:d4:04:bd:a9:99:73:7a:c7:
40:dd:40:c9:35:53:c0:8d:31:01:7b:f1:33:4d:69:
27:51:57:55:f1:f8:d0:3d:21:11:3e:3d:cb:e9:bc:
13:8f:8c:b1:13:7e:7d:02:6e:0d:14:32:ae:1f:7c:
d0:07:54:85:1e:d9:70:48:d5:52:76:b0:15:2b:18:
8f:3d:e8:b5:bf:a9:91:59:2c:7d:af:3e:38:06:f9:
af:96:38:a6:1a:ce:ac:1f:5f:8d:a7:31:61:30:ad:
b2:bd:b4:d8:50:38:06:46:1c:23:a0:92:b9:d7:1d:
27:93:52:07:65:55:6b:20:b3:da:fd:96:00:9e:44:
9c:7e:8d:36:e9:76:d1:1b:02:b7:d1:75:09:bb:ea:
ca:c0:5c:d6:19:e7:6c:84:be:ab:2f:87:45:07:2a:
0a:6d:ef:ee:14:12:40:b4:17:d4:5f:48:4b:ac:f2:
2c:9f:85:60:75:1d:e2:d7:a6:52:63:01:08:91:0c:
b3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:67:1D:88:6D:E5:12:89:08:1F:F5:9E:A0:35:D5:46:C9:1E:E7:DE
X509v3 Authority Key Identifier:
keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e32352e302f32342d3234203d3e203233383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.196.25.0/24
Signature Algorithm: sha256WithRSAEncryption
28:b0:ec:90:6d:c6:88:e6:00:09:c9:71:86:9b:6e:d6:d9:07:
8b:68:18:a9:54:93:c4:83:9b:99:f9:a8:1a:16:39:38:f9:5c:
9d:d3:3c:59:b3:1c:23:e7:92:f7:49:77:56:b8:de:98:7a:14:
0f:b8:40:fd:6f:fd:e7:18:e6:89:5f:52:76:be:b6:a7:9c:7c:
6f:97:e7:8b:1b:05:4c:83:a9:18:c8:53:c5:49:6c:01:c5:cc:
f1:25:d1:32:86:dc:30:11:90:cc:e5:dd:ed:91:e7:09:a9:e8:
1a:f5:e2:91:04:69:10:ef:18:92:f6:64:28:64:28:14:ae:ce:
63:bb:8f:97:24:c8:86:36:b9:22:ff:ff:20:99:6b:e0:8d:7a:
79:2c:bf:94:e6:88:99:9a:c7:f9:6a:6a:24:21:4c:a2:8f:6e:
47:fb:8d:6d:68:af:ba:7e:79:3a:c0:97:8c:6d:fc:2b:0d:7e:
f1:60:27:d4:d0:4a:9e:6d:34:39:49:10:42:c8:44:4e:28:10:
d2:7f:f3:e0:fd:e2:1c:07:83:21:b2:f9:29:6e:23:45:bf:fb:
5a:d6:d7:73:f4:d8:0b:bf:36:7d:a6:5a:b5:24:ce:72:c9:1b:
48:36:5d:10:49:23:51:c5:e7:46:e4:50:21:f6:70:75:96:75:
7c:eb:57:8e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:01 2026 by rpki-client