
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e35332e302f32342d3234203d3e203233383438.roa
File: 3132342e3139362e35332e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier: JAOZaiBr7i4s3bA/C/NUg30uxlzfCkU7PT38kOwZdQQ=
Subject key identifier: B3:27:08:A1:66:12:2D:27:A4:BA:5F:81:86:94:E7:3D:9F:CD:B1:69
Certificate issuer: /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial: 20E3EF7D7BBC3C406C5E731DCFD6E7912C5C0338
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e35332e302f32342d3234203d3e203233383438.roa
Signing time: Thu 16 Apr 2026 09:13:36 +0000
ROA not before: Thu 16 Apr 2026 09:08:36 +0000
ROA not after: Thu 15 Apr 2027 09:13:36 +0000
asID: 23848
IP address blocks: 124.196.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 05:50:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:e3:ef:7d:7b:bc:3c:40:6c:5e:73:1d:cf:d6:e7:91:2c:5c:03:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
Validity
Not Before: Apr 16 09:08:36 2026 GMT
Not After : Apr 15 09:13:36 2027 GMT
Subject: CN=B32708A166122D27A4BA5F818694E73D9FCDB169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:98:b5:35:0f:49:83:12:61:c5:f4:1c:6d:9c:
1d:8b:6f:b5:db:8b:c9:0e:8a:09:03:f2:29:29:83:
34:4d:eb:33:25:ca:e9:90:39:ec:aa:bf:27:c0:15:
eb:90:c8:1f:6f:33:7c:56:ad:44:68:ee:ab:22:8f:
8e:a1:4a:d6:0e:b0:d2:fc:cb:fb:64:dd:e7:9f:e4:
9b:65:75:6a:ab:10:5a:68:4d:75:bb:14:0f:a8:89:
77:b6:2a:e9:3a:86:65:33:ea:e2:0c:4d:24:9e:3a:
9e:82:a2:73:6f:af:9d:c3:de:98:79:a2:58:54:05:
53:21:4b:f2:20:9a:a7:f7:1d:45:0f:46:af:b5:f2:
3f:ab:6f:41:34:39:dd:1a:ae:a8:17:55:dd:2e:cd:
ff:3b:80:0c:de:fc:8e:69:82:47:4c:96:95:3c:bb:
a0:ae:dc:54:46:90:73:35:f9:61:63:af:56:96:2f:
d4:b3:fc:d6:35:f9:23:0a:21:6e:66:fc:5d:33:38:
85:37:e5:ff:76:87:56:30:b8:47:53:9a:3c:62:9a:
2e:3d:c8:d4:42:83:57:69:c8:f3:6e:ab:23:69:f5:
e2:5a:6f:67:1a:61:df:97:dc:84:02:ec:06:bc:31:
85:e5:7f:70:a1:fb:0a:91:ef:82:3f:bf:a0:e7:9a:
4d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:27:08:A1:66:12:2D:27:A4:BA:5F:81:86:94:E7:3D:9F:CD:B1:69
X509v3 Authority Key Identifier:
keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e35332e302f32342d3234203d3e203233383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.196.53.0/24
Signature Algorithm: sha256WithRSAEncryption
38:3b:af:b8:0e:da:ed:fa:d0:b2:4a:36:bb:93:38:37:8e:a1:
f6:48:f3:3c:3d:bf:8e:1d:ed:7a:4f:c1:45:29:4c:10:06:7b:
21:67:f7:79:2c:8f:6c:0f:04:9b:6b:5a:f3:61:bb:1e:d0:e2:
3f:d9:5c:24:79:94:17:42:ba:3a:85:17:4e:b8:d8:cb:c9:2f:
dd:b4:13:b4:9d:47:50:ef:69:1f:7a:21:31:2f:2e:e6:20:47:
5d:c0:14:bf:72:78:d3:34:4c:1e:ad:9b:fb:4b:45:11:ed:b2:
db:69:85:2a:70:95:5a:51:a5:05:bb:0c:3a:3c:00:2e:b1:e2:
ce:3d:b4:ca:91:e1:b9:4d:65:c6:18:66:ab:0e:44:42:48:55:
bf:82:31:7c:1a:de:8e:fc:bf:0f:0b:8c:bb:da:ca:48:88:af:
b9:0d:a6:c6:00:c0:27:3e:8a:fc:08:ab:53:99:40:d4:44:d9:
4a:fd:9d:3c:3a:95:55:c3:df:34:3d:c8:dc:0e:6c:01:d7:46:
ef:2a:b2:89:1a:51:03:67:e6:3f:d3:ad:03:9d:57:35:a0:52:
30:71:77:31:7a:36:1b:15:a7:cf:5b:28:5d:92:0f:b2:cf:9d:
c6:52:ad:65:07:65:8e:d8:df:46:fd:43:ea:07:19:ce:e1:5e:
9b:dd:cf:97
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:25:56 2026 by rpki-client