
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e35382e302f32342d3234203d3e203233383438.roa
File: 3132342e3139362e35382e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier: hAb1abTtSU51zXG2gMLd/pXbd0ORvdKsW/tHDAT+UJ0=
Subject key identifier: 10:01:EE:E1:5B:3E:45:DA:17:4B:86:13:A6:01:70:BF:7D:72:BD:44
Certificate issuer: /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial: 632C25F4106C2E2516407273C87E10056B9D1653
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e35382e302f32342d3234203d3e203233383438.roa
Signing time: Thu 16 Apr 2026 09:17:58 +0000
ROA not before: Thu 16 Apr 2026 09:12:58 +0000
ROA not after: Thu 15 Apr 2027 09:17:58 +0000
asID: 23848
IP address blocks: 124.196.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 05:50:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:2c:25:f4:10:6c:2e:25:16:40:72:73:c8:7e:10:05:6b:9d:16:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
Validity
Not Before: Apr 16 09:12:58 2026 GMT
Not After : Apr 15 09:17:58 2027 GMT
Subject: CN=1001EEE15B3E45DA174B8613A60170BF7D72BD44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9b:b7:c9:e8:f1:ca:e6:32:d9:0d:e6:30:58:
6c:78:d4:49:ed:74:35:61:45:34:ca:0a:10:af:8a:
14:57:7f:c2:9e:3f:ec:ad:a1:08:30:cc:77:6e:17:
45:27:6e:02:dd:0e:4a:a8:5e:a7:f0:11:e4:72:1b:
92:22:14:88:38:dd:59:4b:b6:77:31:c3:12:9e:f0:
18:24:da:b0:ff:7d:b8:79:e2:52:51:c3:6f:43:5b:
67:7a:0e:09:50:d4:84:86:09:d1:dd:1e:f4:7b:a6:
73:03:7b:b5:ea:39:d5:8a:a3:72:a5:b1:72:4a:d6:
f5:4f:73:34:4a:1d:27:bb:e8:29:f6:00:24:83:bc:
60:1b:63:9c:b7:2d:ab:10:01:40:1b:65:1d:81:69:
32:eb:40:3c:ef:47:63:24:cc:17:83:5e:8a:a2:4c:
b3:4e:50:0a:2b:8d:66:f5:b6:62:e0:cd:c4:c0:e0:
3b:0b:f9:4e:39:a9:86:58:ea:04:73:96:4f:45:4c:
88:93:2a:db:a2:e3:f7:c1:3e:4a:08:59:a0:39:67:
73:34:a0:1e:57:fe:f3:eb:65:18:0f:aa:d7:26:0a:
f6:e0:8b:b8:49:64:59:a7:df:04:63:ba:69:21:c7:
0d:c0:5c:c9:26:23:6f:d0:2b:f1:78:b6:37:4f:26:
61:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:01:EE:E1:5B:3E:45:DA:17:4B:86:13:A6:01:70:BF:7D:72:BD:44
X509v3 Authority Key Identifier:
keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e35382e302f32342d3234203d3e203233383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.196.58.0/24
Signature Algorithm: sha256WithRSAEncryption
52:40:5f:b0:61:eb:da:2d:66:b2:1e:a8:48:78:2e:fc:28:bc:
2c:0e:55:36:18:ba:bc:44:51:4a:96:ff:49:af:89:a3:73:a6:
b8:ac:b6:40:ce:2b:20:71:59:af:f6:5c:55:31:64:8c:c9:c4:
a2:e0:c2:de:fb:aa:dc:5f:90:58:50:f7:be:5c:ff:c4:c5:61:
16:e0:5f:ab:27:0f:db:43:70:ca:7e:30:26:99:f7:68:3f:76:
94:98:d1:33:cf:36:72:77:98:77:3a:28:71:17:91:34:19:48:
76:84:26:5f:60:5e:ff:5c:8f:e7:35:cb:f6:fd:19:64:b8:d9:
0f:bb:47:d9:44:9d:7e:36:59:51:6d:46:be:86:86:5b:2f:6a:
f7:85:25:fb:ba:c7:ff:67:81:ab:5e:1c:70:58:5a:e3:53:04:
79:48:50:9a:f3:e3:82:8b:35:21:80:2b:be:98:a7:91:fe:5b:
23:a6:e3:7f:e0:b5:2c:c6:15:47:34:de:de:5c:58:94:8d:e4:
f7:b1:bb:9c:1d:a5:40:4d:87:d2:e9:23:5f:8f:0c:35:7c:6a:
68:63:3c:35:cd:f1:5d:3f:36:56:8c:92:93:18:11:72:de:d3:
ed:52:36:ee:04:52:f4:eb:1a:22:9a:e0:8c:22:fb:40:99:f9:
34:56:ca:7c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:10 2026 by rpki-client