
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e35352e302f32342d3234203d3e203233383438.roa
File: 3132342e3139362e35352e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier: qMyq/lYsYz6BrLb0S389ztsc9AFYiShRb8F5Yr9qERE=
Subject key identifier: F7:F3:65:75:4B:FA:BE:B7:52:D5:F4:56:55:0F:84:37:D9:9E:67:E3
Certificate issuer: /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial: 22D18D91FB51EC8BA2600E65836F16BE46826595
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e35352e302f32342d3234203d3e203233383438.roa
Signing time: Thu 16 Apr 2026 09:13:36 +0000
ROA not before: Thu 16 Apr 2026 09:08:36 +0000
ROA not after: Thu 15 Apr 2027 09:13:36 +0000
asID: 23848
IP address blocks: 124.196.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 05:50:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:d1:8d:91:fb:51:ec:8b:a2:60:0e:65:83:6f:16:be:46:82:65:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
Validity
Not Before: Apr 16 09:08:36 2026 GMT
Not After : Apr 15 09:13:36 2027 GMT
Subject: CN=F7F365754BFABEB752D5F456550F8437D99E67E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b6:99:05:0a:e4:bd:e1:16:bc:28:ad:7e:1c:
ba:68:3e:83:ce:0b:9c:8e:3d:fe:c4:b3:5f:30:0a:
25:59:d5:8a:11:9b:8f:66:04:88:ec:90:84:34:f3:
45:c7:f0:28:13:88:f0:74:ef:7b:4f:f8:99:ff:e9:
e1:b0:fa:c1:3a:6a:24:ad:48:cb:df:90:05:62:20:
f4:80:aa:59:a5:5b:1b:64:95:31:42:3f:5f:cc:cc:
85:4c:30:78:49:45:b0:2c:e6:24:0c:9e:a0:1f:33:
83:d3:a8:7b:96:88:c0:a0:ea:f5:9f:75:47:d5:28:
45:ff:a9:cc:bf:1a:ba:c5:3e:32:f8:dd:56:56:3b:
eb:67:dd:8a:51:66:a9:80:5a:b4:83:aa:51:7d:46:
dc:89:20:5f:10:ed:40:68:89:3e:e5:11:b7:6a:41:
aa:fa:1a:4b:bd:82:15:d5:35:af:18:b0:54:f8:35:
00:c8:8b:0a:76:bc:09:a7:1a:d7:ca:c1:6e:4a:70:
6f:88:41:ce:aa:90:68:6e:ad:dd:94:71:2f:1b:d8:
33:10:f6:5b:b4:ca:46:88:67:18:ef:ef:3a:c9:a5:
de:f8:b7:18:93:df:e1:95:49:ea:a3:7d:5e:a9:ff:
89:3f:78:6a:f0:95:4b:21:71:36:00:3b:b8:6a:d8:
a4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F3:65:75:4B:FA:BE:B7:52:D5:F4:56:55:0F:84:37:D9:9E:67:E3
X509v3 Authority Key Identifier:
keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e35352e302f32342d3234203d3e203233383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.196.55.0/24
Signature Algorithm: sha256WithRSAEncryption
61:ff:73:63:5e:31:d5:e2:7c:b9:85:38:6d:0c:b1:b5:cb:7a:
a3:f4:37:83:f3:af:93:87:80:1b:c1:df:78:87:66:8e:04:52:
c5:87:56:61:99:29:f2:ac:b6:23:ee:d2:07:58:c4:ce:1d:f4:
a1:ec:49:b0:70:6c:e4:b1:e6:91:03:9d:ce:0f:ab:dc:b3:89:
ee:9e:bf:0c:da:ca:cf:68:cc:ff:05:a0:f6:9e:33:d9:ac:ec:
ee:d4:1a:0b:2f:21:15:d9:92:0b:a6:4d:8c:1a:83:ad:03:37:
c4:f5:22:66:90:ae:5f:62:ae:8b:52:e3:db:3c:6f:1c:64:f6:
c3:85:ae:47:15:de:d2:a7:d6:cb:16:23:14:39:3e:34:33:cc:
c2:81:91:fa:5d:24:fd:16:8b:0c:43:8b:21:90:94:f3:f3:14:
c9:ad:d7:b8:f5:b5:b4:0b:aa:9d:52:e5:3d:64:88:fe:58:7c:
f5:e1:bd:b8:ca:c0:1f:a0:fb:ce:d4:ce:40:dc:85:06:bb:8c:
67:d1:0a:bd:60:7d:d3:61:7f:cc:dc:05:76:e8:e7:6b:6a:74:
95:39:2b:5b:08:e0:04:e9:78:bc:ac:f1:3a:53:9a:04:db:ad:
91:51:d7:3e:09:6d:0d:c7:5c:81:f4:4b:7c:e8:16:1b:e9:1e:
01:3b:18:70
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:25:54 2026 by rpki-client