
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e34392e302f32342d3234203d3e203233383438.roa
File: 3132342e3139362e34392e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier: RXI0wySzQ2AlA5fzVR2NRdvfdVCF7S78OZ4EfIvm3hM=
Subject key identifier: B7:9B:D2:53:40:E1:ED:AD:A9:CC:7B:95:94:79:9B:39:34:74:38:0F
Certificate issuer: /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial: 2D9296923F6034F3294A17331FDB81B38A7FDC10
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e34392e302f32342d3234203d3e203233383438.roa
Signing time: Thu 16 Apr 2026 09:13:35 +0000
ROA not before: Thu 16 Apr 2026 09:08:35 +0000
ROA not after: Thu 15 Apr 2027 09:13:35 +0000
asID: 23848
IP address blocks: 124.196.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 05:50:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:92:96:92:3f:60:34:f3:29:4a:17:33:1f:db:81:b3:8a:7f:dc:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
Validity
Not Before: Apr 16 09:08:35 2026 GMT
Not After : Apr 15 09:13:35 2027 GMT
Subject: CN=B79BD25340E1EDADA9CC7B9594799B393474380F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a5:39:55:1d:d9:23:ac:2b:73:6f:1b:2b:7c:
29:29:f2:eb:f0:5d:ac:81:fe:d8:68:1f:10:37:ab:
08:fc:43:4d:f1:3a:2c:ba:3a:9c:a1:fd:d0:5b:47:
4f:36:cf:b5:6e:27:45:68:cc:e6:aa:45:de:58:fd:
a1:db:15:2d:f6:3c:1d:23:39:01:88:f4:f1:ec:cb:
0c:ca:ef:67:47:31:12:37:60:3b:97:56:86:3f:a8:
c0:06:0f:0f:45:76:e7:86:80:b3:7f:b0:fe:fb:ae:
d3:6f:a2:f9:d8:52:17:fb:5b:28:18:b6:3d:04:5d:
27:08:46:4f:d5:e5:c3:5b:cc:85:cf:89:c3:05:2f:
47:b4:14:65:1c:00:9e:e7:67:5e:15:fd:d9:43:5f:
94:87:85:dd:a7:bb:8a:1d:9c:86:a9:9e:c3:8c:45:
44:de:1c:4d:49:1a:b3:b1:47:75:c5:a2:2a:31:e7:
88:09:a8:12:20:80:94:44:ae:c4:15:44:fe:30:b9:
cf:27:85:c0:fb:89:5a:8e:03:79:98:03:e6:3d:2f:
de:e1:79:69:18:ef:45:4e:71:87:e7:cc:d4:85:d5:
0f:06:8d:37:c4:22:4e:ab:84:fb:70:2c:60:9d:1f:
58:33:b3:98:2d:bf:68:41:18:1b:1d:53:a3:cd:f8:
e1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9B:D2:53:40:E1:ED:AD:A9:CC:7B:95:94:79:9B:39:34:74:38:0F
X509v3 Authority Key Identifier:
keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e34392e302f32342d3234203d3e203233383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.196.49.0/24
Signature Algorithm: sha256WithRSAEncryption
52:9c:da:cf:6f:b1:75:c8:45:04:5a:d9:e1:78:b5:ca:a5:60:
bc:d8:46:d1:b1:8c:bb:24:09:b7:70:b3:06:5f:9b:2e:b2:40:
53:07:e2:a5:7d:1d:ed:ee:23:4c:23:18:68:3c:03:77:d2:23:
9f:1c:ad:18:f7:36:ff:4e:af:14:74:b1:72:7a:08:76:b9:ec:
91:41:af:64:d1:94:a0:57:04:69:70:8a:7e:7b:ff:97:7b:8f:
81:a0:1e:4e:0a:f2:56:2c:77:b8:53:f5:3b:e0:17:a9:d0:19:
24:6f:b9:48:bf:2a:a4:c4:df:75:ca:c9:39:0d:45:47:71:1b:
63:d0:ef:0e:e9:7e:4b:83:82:8c:0f:0b:d5:d1:23:f9:38:f1:
b5:5e:ba:f6:d5:58:af:66:a9:0a:46:44:3f:1a:f9:a2:9b:f0:
a2:cf:36:42:40:60:05:fc:9b:7b:21:28:f0:e2:e8:30:56:7e:
87:be:6c:56:c9:fb:87:a4:a7:d8:7c:2d:8f:d3:74:35:08:06:
83:b2:1a:85:cb:b1:71:d0:b5:5d:a7:4a:d4:39:52:56:0a:ce:
a2:4e:54:3c:e4:6f:e3:0e:03:d2:06:e5:b6:1b:74:e3:a0:d4:
bb:03:a0:50:b2:f7:a5:5d:c3:c8:94:92:56:67:ea:60:fc:89:
97:b3:06:b3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:04 2026 by rpki-client