
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e36362e302f32342d3234203d3e203233383438.roa
File: 3132342e3139362e36362e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier: EYUZOVP/TWLESbNzdFCnignK+O2/Q1JCl1lYrd3z/B4=
Subject key identifier: F6:E8:61:F1:9F:CB:9A:BC:E8:AE:EF:27:88:00:3D:4B:9D:92:A5:E9
Certificate issuer: /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial: 6D9EBD4183EDDA263831CCF8365E9363083C456D
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e36362e302f32342d3234203d3e203233383438.roa
Signing time: Thu 16 Apr 2026 09:17:57 +0000
ROA not before: Thu 16 Apr 2026 09:12:57 +0000
ROA not after: Thu 15 Apr 2027 09:17:57 +0000
asID: 23848
IP address blocks: 124.196.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 05:50:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:9e:bd:41:83:ed:da:26:38:31:cc:f8:36:5e:93:63:08:3c:45:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
Validity
Not Before: Apr 16 09:12:57 2026 GMT
Not After : Apr 15 09:17:57 2027 GMT
Subject: CN=F6E861F19FCB9ABCE8AEEF2788003D4B9D92A5E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:19:7a:ce:c8:d1:f6:c1:b7:f9:82:66:9b:da:
d9:68:19:e2:b2:c6:fc:d1:ad:55:da:45:0e:1c:26:
0e:fd:7e:8a:d2:43:1e:07:ab:f9:5b:40:01:13:2b:
45:30:a1:28:af:b2:36:73:ae:f8:6a:ca:95:b8:d8:
ae:a8:f1:79:54:39:a3:2e:ce:d4:22:01:62:1d:ea:
89:5a:5d:eb:f5:f9:a9:6c:8b:72:6d:a8:e2:35:42:
cb:12:63:10:ce:17:b7:bf:b1:55:f7:23:25:31:a0:
11:b9:c8:bd:52:f2:5f:93:f7:1f:08:94:11:1c:46:
ca:de:54:3f:db:45:ac:fb:2c:6b:c0:3a:f9:20:f4:
ba:59:8f:cc:c5:d9:cf:1b:d6:23:88:3b:e8:4c:0e:
07:6e:a7:dc:a2:4e:cd:a0:86:11:c5:56:d4:1d:1d:
ad:7b:16:5a:c6:be:62:89:23:6e:d4:fb:31:c7:ae:
4f:8f:07:1c:6b:15:0e:d1:18:24:f4:17:41:54:b0:
62:1f:86:31:04:df:fa:c0:88:8a:11:2e:33:67:9d:
b7:6f:c3:9f:3a:ef:30:4d:e1:5e:06:96:06:da:64:
62:24:91:1c:3d:9c:8b:ce:e3:d8:0a:8d:51:f5:a9:
eb:95:03:b4:5e:29:86:a9:0b:d8:a3:1a:47:a8:80:
46:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E8:61:F1:9F:CB:9A:BC:E8:AE:EF:27:88:00:3D:4B:9D:92:A5:E9
X509v3 Authority Key Identifier:
keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e36362e302f32342d3234203d3e203233383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.196.66.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:94:ae:86:61:58:2a:87:34:5a:29:71:4b:e4:26:c9:20:f7:
a8:28:aa:6b:b0:82:c8:94:94:d4:6b:d1:86:54:6c:0a:69:17:
7d:e5:bb:75:f3:03:88:14:43:18:70:da:43:bd:3b:06:90:ec:
38:a3:e8:fe:19:62:12:cb:59:2d:4a:88:f6:52:b4:5c:b5:60:
2f:85:e5:da:0c:90:0f:93:4b:6f:2c:02:69:78:d2:6e:9a:ca:
ea:1a:18:e9:93:24:19:39:ae:7f:e4:52:24:f6:ef:2e:f7:a2:
be:d8:a9:2b:7e:64:08:6f:9b:ec:29:a8:19:67:7c:08:ee:04:
4d:82:de:5e:dd:b0:6f:69:b8:a1:03:95:ce:e3:bf:1c:79:c2:
e9:75:41:7d:7e:55:00:73:64:e8:e9:96:11:fe:c2:b0:9b:73:
d2:b9:85:03:6a:d3:2a:78:e5:f5:10:7b:b7:72:b5:0e:b9:5e:
c6:88:62:61:eb:70:33:52:0f:80:97:9d:6d:46:b7:69:cd:22:
b4:72:c4:63:7f:4f:26:b8:72:43:00:a2:d9:ec:11:dc:f4:5f:
2e:c1:d6:2b:e9:43:fa:33:2c:e4:06:f7:2b:62:80:98:02:f0:
77:3f:35:7f:d6:32:74:0f:64:56:c2:c3:36:67:1d:8d:eb:b5:
df:d7:d0:16
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUbZ69QYPt2iY4Mcz4Nl6TYwg8RW0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURBODg0QTc5NzQ4RDU3RUI0OTM2NjcwNENCNkE4MTEw
RTI3MDQyRDAeFw0yNjA0MTYwOTEyNTdaFw0yNzA0MTUwOTE3NTdaMDMxMTAvBgNV
BAMTKEY2RTg2MUYxOUZDQjlBQkNFOEFFRUYyNzg4MDAzRDRCOUQ5MkE1RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfGXrOyNH2wbf5gmab2tloGeKy
xvzRrVXaRQ4cJg79forSQx4Hq/lbQAETK0UwoSivsjZzrvhqypW42K6o8XlUOaMu
ztQiAWId6olaXev1+alsi3JtqOI1QssSYxDOF7e/sVX3IyUxoBG5yL1S8l+T9x8I
lBEcRsreVD/bRaz7LGvAOvkg9LpZj8zF2c8b1iOIO+hMDgdup9yiTs2ghhHFVtQd
Ha17FlrGvmKJI27U+zHHrk+PBxxrFQ7RGCT0F0FUsGIfhjEE3/rAiIoRLjNnnbdv
w5867zBN4V4GlgbaZGIkkRw9nIvO49gKjVH1qeuVA7ReKYapC9ijGkeogEaNAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU9uhh8Z/Lmrzoru8niAA9S52SpekwHwYDVR0j
BBgwFoAU7aiEp5dI1X60k2ZwTLaoEQ4nBC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzA4MzUzMjM1NTgyOTc2My8wL0VEQTg4NEE3OTc0OEQ1N0VCNDkzNjY3MDRDQjZB
ODExMEUyNzA0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRURBODg0QTc5NzQ4RDU3RUI0OTM2NjcwNENCNkE4MTEwRTI3MDQyRC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NzA4MzUzMjM1NTgyOTc2My8wLzMxMzIzNDJlMzEz
OTM2MmUzNjM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM4MzQzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAHzEQjANBgkqhkiG9w0BAQsFAAOCAQEAf5SuhmFYKoc0WilxS+QmySD3
qCiqa7CCyJSU1GvRhlRsCmkXfeW7dfMDiBRDGHDaQ707BpDsOKPo/hliEstZLUqI
9lK0XLVgL4Xl2gyQD5NLbywCaXjSbprK6hoY6ZMkGTmuf+RSJPbvLveivtipK35k
CG+b7CmoGWd8CO4ETYLeXt2wb2m4oQOVzuO/HHnC6XVBfX5VAHNk6OmWEf7CsJtz
0rmFA2rTKnjl9RB7t3K1DrlexohiYetwM1IPgJedbUa3ac0itHLEY39PJrhyQwCi
2ewR3PRfLsHWK+lD+jMs5Ab3K2KAmALwdz81f9YydA9kVsLDNmcdjeu139fQFg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:25:57 2026 by rpki-client