
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e34322e302f32342d3234203d3e203233383438.roa
File: 3132342e3139362e34322e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier: q/STfamXFybH4R+elZdZKbTKhjX3ak8lsert5pZggo8=
Subject key identifier: 95:02:5F:87:14:90:8C:87:F4:AD:22:18:B1:90:F2:3C:F9:2C:BE:82
Certificate issuer: /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial: 0A843B5415F44CF19F4DF2F4E560D17C0AB0BAE7
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e34322e302f32342d3234203d3e203233383438.roa
Signing time: Thu 16 Apr 2026 09:13:35 +0000
ROA not before: Thu 16 Apr 2026 09:08:35 +0000
ROA not after: Thu 15 Apr 2027 09:13:35 +0000
asID: 23848
IP address blocks: 124.196.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 05:50:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:84:3b:54:15:f4:4c:f1:9f:4d:f2:f4:e5:60:d1:7c:0a:b0:ba:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
Validity
Not Before: Apr 16 09:08:35 2026 GMT
Not After : Apr 15 09:13:35 2027 GMT
Subject: CN=95025F8714908C87F4AD2218B190F23CF92CBE82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b5:fa:1c:aa:cb:4c:33:5e:68:5c:f1:e0:6f:
7f:54:6e:7a:11:ba:c8:47:b3:a8:3b:75:d7:f1:ca:
71:c9:c8:26:2c:e9:46:49:7e:96:e6:e0:b2:c9:2c:
24:0d:05:64:2d:07:a5:74:b9:cb:2d:1b:cd:1e:83:
45:63:36:7c:2f:f9:43:ca:33:b1:02:66:a0:f8:f6:
b6:4d:cf:aa:b9:d8:f1:72:00:01:b8:ea:f8:88:77:
c4:36:68:f1:56:9f:a9:55:b8:7b:7a:13:79:c1:6b:
fe:db:7d:e9:0d:fc:12:07:59:ef:7a:65:87:86:45:
c2:20:ad:d4:fd:12:62:97:21:d5:ae:a3:43:07:7a:
ca:61:28:fa:3f:28:c4:c4:cf:52:90:99:c0:53:21:
2d:b0:82:04:c8:4f:23:07:1f:a1:07:40:dd:48:93:
49:5a:b5:e8:71:09:39:70:2c:23:6e:54:55:91:97:
e5:bc:82:da:af:7d:47:af:60:56:b5:3c:60:9d:5e:
c3:bd:0f:5b:64:6f:d8:5a:1f:24:58:a6:42:31:a2:
e1:cb:36:08:c0:20:c1:3a:44:13:d7:0f:2c:41:8a:
6f:5b:ad:9b:fd:56:51:49:0f:38:b5:31:22:ea:fd:
48:0e:47:8d:e9:ca:cd:5a:24:f6:7b:14:f6:7c:a9:
e6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:02:5F:87:14:90:8C:87:F4:AD:22:18:B1:90:F2:3C:F9:2C:BE:82
X509v3 Authority Key Identifier:
keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e34322e302f32342d3234203d3e203233383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.196.42.0/24
Signature Algorithm: sha256WithRSAEncryption
81:bf:be:f7:35:2c:de:ca:f7:2c:7c:7b:b0:7c:48:b6:38:f5:
20:da:bf:9e:bd:3a:1b:da:a1:f0:1e:56:f5:71:a1:71:c4:11:
d4:ac:e6:cf:fc:f2:03:6c:a3:1f:71:bb:19:3d:bc:6e:7b:b1:
69:4f:68:cf:cf:bd:80:ba:7c:3a:4f:9b:aa:c1:d5:c2:84:b9:
54:69:52:6e:64:fe:3c:c0:31:13:67:5d:3e:54:fa:ac:83:03:
39:dc:ac:42:3a:61:00:6e:50:af:e3:9b:53:13:dd:1f:37:59:
38:3f:b1:b6:10:3c:03:15:97:07:fe:be:e0:b0:3c:7d:33:ac:
01:e7:cc:f8:cf:fb:18:9e:69:6c:5a:7d:92:4e:a6:60:6d:58:
3b:6d:c1:fd:b9:8c:30:07:cd:6a:28:06:ac:82:8b:fe:c6:2e:
e8:48:57:f0:0d:43:44:be:a0:49:34:f1:43:c8:8c:7f:cd:d1:
c4:e3:ed:6d:76:c8:50:e2:f7:da:ae:ce:ad:61:04:f8:7d:fd:
07:ab:af:c6:3f:84:ed:19:1a:c1:92:52:e0:9d:fb:20:62:9b:
af:0e:30:57:d8:ee:39:00:20:ca:60:4c:df:8d:86:d0:0e:db:
3a:63:ed:c4:71:52:db:52:af:e1:52:03:a1:c4:4d:87:8e:95:
70:c1:58:f3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:01 2026 by rpki-client