
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e33312e302f32342d3234203d3e203233383438.roa
File: 3132342e3139362e33312e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier: G74RSZqExFiNY2vHW2VGpgddHXKkugwTQQaOri9K7mo=
Subject key identifier: C4:04:52:C7:CA:C3:26:6C:51:AA:3E:59:51:78:3F:B5:53:D1:59:D3
Certificate issuer: /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial: 64C8BED6A7E26BBB53A673F92D61BE876CF4D408
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e33312e302f32342d3234203d3e203233383438.roa
Signing time: Thu 16 Apr 2026 09:13:37 +0000
ROA not before: Thu 16 Apr 2026 09:08:37 +0000
ROA not after: Thu 15 Apr 2027 09:13:37 +0000
asID: 23848
IP address blocks: 124.196.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 05:50:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:c8:be:d6:a7:e2:6b:bb:53:a6:73:f9:2d:61:be:87:6c:f4:d4:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
Validity
Not Before: Apr 16 09:08:37 2026 GMT
Not After : Apr 15 09:13:37 2027 GMT
Subject: CN=C40452C7CAC3266C51AA3E5951783FB553D159D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:89:6f:42:69:9c:39:27:e7:b5:02:c5:99:64:
0e:dd:b0:13:ec:94:09:c3:59:2d:59:88:8c:6a:6e:
1f:c6:ec:db:c4:d8:e5:ad:bf:9c:ec:1d:21:a6:17:
0b:db:2a:9b:08:86:46:16:df:6d:de:09:5f:a1:c8:
ca:c3:35:cd:3d:21:e1:4a:ec:f8:97:59:48:3a:43:
7c:2c:e6:60:0f:53:06:67:3d:bc:db:ce:0a:2a:6a:
83:ab:59:65:4e:a8:ac:ad:4c:51:c2:3f:97:31:09:
1a:15:ff:69:49:28:91:ee:ee:43:c7:a8:55:7c:e2:
99:e0:fe:1a:5f:ee:ea:49:6b:90:a3:34:b4:66:b4:
8d:d5:78:e6:09:37:f9:34:53:3e:3b:a8:71:1a:20:
7f:d9:67:22:6d:75:d6:21:22:30:d8:ce:a7:d1:90:
52:a6:fc:91:ac:b8:74:6b:67:c8:ab:1d:f7:8b:4f:
32:77:65:47:5f:07:02:86:07:a8:b7:e9:fd:98:f2:
c4:72:e1:e0:6a:cd:8b:da:49:b2:a0:2c:c1:ea:a5:
c9:e0:36:9a:c3:6c:f4:2d:bd:4e:48:ad:b9:d0:c3:
ed:c5:ec:b4:51:b3:dc:60:2e:52:89:a4:94:4a:f6:
3b:76:7c:c3:b7:6b:89:e2:25:e2:6f:84:0e:a4:82:
17:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:04:52:C7:CA:C3:26:6C:51:AA:3E:59:51:78:3F:B5:53:D1:59:D3
X509v3 Authority Key Identifier:
keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e33312e302f32342d3234203d3e203233383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.196.31.0/24
Signature Algorithm: sha256WithRSAEncryption
04:89:27:a4:25:90:a5:4a:35:0e:e0:20:03:a7:9c:17:d3:4b:
23:9a:02:8d:7f:e7:b0:19:67:ed:eb:99:23:b3:32:ac:08:02:
5b:48:3d:92:5c:76:11:a3:8b:15:46:5c:04:fe:90:5f:fd:14:
3b:39:bb:81:69:5d:b3:f1:f5:54:e8:60:31:1b:d8:25:ad:dc:
98:dd:eb:12:8f:3a:d3:16:53:c2:93:8d:d4:aa:20:11:60:7d:
ea:33:7d:1e:f2:81:83:58:80:ca:40:0f:22:80:52:41:b6:75:
57:d9:04:24:4a:70:89:2a:e8:7e:03:d9:c6:8c:a0:b6:8d:03:
ed:5a:58:6a:50:d4:98:52:5e:35:4d:68:6a:33:05:8b:2f:ba:
a4:ce:bc:6b:3e:f6:e8:63:32:f5:d7:07:0a:f9:73:2d:35:b7:
f2:5a:db:5c:07:13:bf:02:11:d0:c3:90:46:3b:94:fd:35:f8:
8e:3e:78:48:9b:25:5e:63:d6:74:12:d1:0d:f2:9c:8c:1e:c1:
ba:db:f6:91:8e:4b:dc:86:c1:9f:9c:07:a7:c7:d1:64:ee:45:
11:ad:f1:ea:aa:5c:9a:fc:42:dc:46:61:41:eb:a0:5b:a4:eb:
73:94:52:a0:6d:74:0e:5a:94:23:da:ca:57:2e:69:67:77:04:
21:f9:55:cc
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUZMi+1qfia7tTpnP5LWG+h2z01AgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURBODg0QTc5NzQ4RDU3RUI0OTM2NjcwNENCNkE4MTEw
RTI3MDQyRDAeFw0yNjA0MTYwOTA4MzdaFw0yNzA0MTUwOTEzMzdaMDMxMTAvBgNV
BAMTKEM0MDQ1MkM3Q0FDMzI2NkM1MUFBM0U1OTUxNzgzRkI1NTNEMTU5RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeiW9CaZw5J+e1AsWZZA7dsBPs
lAnDWS1ZiIxqbh/G7NvE2OWtv5zsHSGmFwvbKpsIhkYW323eCV+hyMrDNc09IeFK
7PiXWUg6Q3ws5mAPUwZnPbzbzgoqaoOrWWVOqKytTFHCP5cxCRoV/2lJKJHu7kPH
qFV84png/hpf7upJa5CjNLRmtI3VeOYJN/k0Uz47qHEaIH/ZZyJtddYhIjDYzqfR
kFKm/JGsuHRrZ8irHfeLTzJ3ZUdfBwKGB6i36f2Y8sRy4eBqzYvaSbKgLMHqpcng
NprDbPQtvU5IrbnQw+3F7LRRs9xgLlKJpJRK9jt2fMO3a4niJeJvhA6kghcxAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUxARSx8rDJmxRqj5ZUXg/tVPRWdMwHwYDVR0j
BBgwFoAU7aiEp5dI1X60k2ZwTLaoEQ4nBC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzA4MzUzMjM1NTgyOTc2My8wL0VEQTg4NEE3OTc0OEQ1N0VCNDkzNjY3MDRDQjZB
ODExMEUyNzA0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRURBODg0QTc5NzQ4RDU3RUI0OTM2NjcwNENCNkE4MTEwRTI3MDQyRC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NzA4MzUzMjM1NTgyOTc2My8wLzMxMzIzNDJlMzEz
OTM2MmUzMzMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM4MzQzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAHzEHzANBgkqhkiG9w0BAQsFAAOCAQEABIknpCWQpUo1DuAgA6ecF9NL
I5oCjX/nsBln7euZI7MyrAgCW0g9klx2EaOLFUZcBP6QX/0UOzm7gWlds/H1VOhg
MRvYJa3cmN3rEo860xZTwpON1KogEWB96jN9HvKBg1iAykAPIoBSQbZ1V9kEJEpw
iSrofgPZxoygto0D7VpYalDUmFJeNU1oajMFiy+6pM68az726GMy9dcHCvlzLTW3
8lrbXAcTvwIR0MOQRjuU/TX4jj54SJslXmPWdBLRDfKcjB7Butv2kY5L3IbBn5wH
p8fRZO5FEa3x6qpcmvxC3EZhQeugW6Trc5RSoG10DlqUI9rKVy5pZ3cEIflVzA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:10:57 2026 by rpki-client