
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e35322e302f32342d3234203d3e203233383438.roa
File: 3132342e3139362e35322e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier: aFigYd4/dpgIucCULQ/8hTjsMHlqSIHu5n9fQH5W7xA=
Subject key identifier: A8:AE:F7:4E:33:F3:4B:6C:64:80:69:B9:A6:32:D2:CD:FA:3A:16:DC
Certificate issuer: /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial: 2C2F8E05C32E46ED378137FCCF47F0941FD12A78
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e35322e302f32342d3234203d3e203233383438.roa
Signing time: Thu 16 Apr 2026 09:13:36 +0000
ROA not before: Thu 16 Apr 2026 09:08:36 +0000
ROA not after: Thu 15 Apr 2027 09:13:36 +0000
asID: 23848
IP address blocks: 124.196.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 05:50:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:2f:8e:05:c3:2e:46:ed:37:81:37:fc:cf:47:f0:94:1f:d1:2a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
Validity
Not Before: Apr 16 09:08:36 2026 GMT
Not After : Apr 15 09:13:36 2027 GMT
Subject: CN=A8AEF74E33F34B6C648069B9A632D2CDFA3A16DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a2:dc:73:36:f0:1e:5c:5c:37:64:5c:52:a7:
15:2d:12:fc:75:48:99:8d:11:b3:3b:21:6d:8d:fa:
0d:65:d6:99:7e:e4:01:28:e6:73:be:42:9f:f3:1d:
bf:63:f2:e0:89:0b:32:13:61:90:8e:b9:91:ab:08:
ee:79:68:3a:d8:1e:57:5c:31:8e:5f:f8:fd:d6:93:
55:05:a6:08:c9:0c:42:b3:36:07:67:18:33:31:d2:
d5:fb:3a:ab:32:71:8d:0d:98:45:63:38:d2:77:86:
8a:ea:bb:89:61:8e:98:92:04:76:23:8a:eb:38:c8:
21:fd:99:59:d9:97:6e:50:9f:18:8b:bd:65:7b:fc:
c1:18:a0:8d:4f:44:04:ac:86:3f:2f:cd:8b:bd:5f:
40:25:5a:3f:33:8e:25:8d:0e:2f:ec:e5:1e:96:f5:
9e:61:ef:d6:8d:f4:0d:7c:af:27:ac:e9:2a:3f:67:
89:8a:4f:4e:eb:9e:1d:98:c1:39:f3:09:8b:5d:55:
09:11:4c:0e:00:e1:5c:b8:94:1e:4d:23:f2:92:ff:
b4:52:72:2b:79:e4:7d:56:99:af:e7:9d:e0:8c:4f:
4e:bf:a0:b4:e8:0f:72:08:fa:1c:d2:d3:70:85:64:
59:6b:f6:87:60:01:e9:f7:d3:11:e1:a8:3e:c3:27:
78:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AE:F7:4E:33:F3:4B:6C:64:80:69:B9:A6:32:D2:CD:FA:3A:16:DC
X509v3 Authority Key Identifier:
keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e35322e302f32342d3234203d3e203233383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.196.52.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:3f:a6:28:6f:32:a2:32:6d:50:a7:b6:50:16:72:e0:bd:14:
49:62:b1:06:17:1d:46:fd:3d:00:39:ba:f9:d8:c4:bd:9a:ac:
97:18:5f:98:62:6c:ce:ed:e7:4c:67:5e:98:3e:ac:17:3c:f8:
0a:0a:d0:58:72:78:e5:e3:a8:f2:ee:d1:12:c5:9c:c5:d2:ad:
3b:3a:38:c3:e0:9d:24:12:f8:d4:f9:08:cf:ae:4e:5d:9b:c7:
2a:1e:55:ea:ce:53:c3:e4:d4:2a:26:f9:dc:1c:6a:61:64:27:
18:b0:62:91:e0:5c:34:91:a7:7f:0b:ea:f7:7e:50:ff:9c:0b:
67:9e:6d:a0:d1:6d:42:20:39:89:ff:bd:9c:0d:05:49:da:ab:
fd:24:74:f4:11:82:a1:ef:f9:ee:5f:93:88:b2:9b:6e:8c:b3:
eb:84:58:d2:ae:53:d1:dc:2d:4e:1a:8b:d1:96:12:51:1a:06:
62:26:c8:b3:71:c6:88:2d:46:99:f1:c1:09:28:8e:e1:97:f4:
18:2e:de:f5:84:b5:82:e2:3f:50:a3:22:c3:c7:a4:f5:84:96:
04:b5:04:3f:9a:7f:d4:34:33:53:fd:eb:2c:14:13:dc:09:37:
72:eb:ae:80:07:6c:0f:e9:23:9b:ea:21:52:99:6a:5b:43:f0:
1e:48:44:22
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:03 2026 by rpki-client