
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e37372e302f32342d3234203d3e203233383438.roa
File: 3132342e3139362e37372e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier: QUxxoRpNB7wFFyIhwMoVSge9KTB1XfSIsnl19U3e1IA=
Subject key identifier: 7C:0D:B9:DC:17:68:EE:A2:25:5B:9A:65:2C:22:32:64:46:37:E3:CA
Certificate issuer: /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial: 37A9F44D671C184630F4D097FFC1206201D910AB
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e37372e302f32342d3234203d3e203233383438.roa
Signing time: Thu 16 Apr 2026 09:17:57 +0000
ROA not before: Thu 16 Apr 2026 09:12:57 +0000
ROA not after: Thu 15 Apr 2027 09:17:57 +0000
asID: 23848
IP address blocks: 124.196.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 05:50:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:a9:f4:4d:67:1c:18:46:30:f4:d0:97:ff:c1:20:62:01:d9:10:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
Validity
Not Before: Apr 16 09:12:57 2026 GMT
Not After : Apr 15 09:17:57 2027 GMT
Subject: CN=7C0DB9DC1768EEA2255B9A652C2232644637E3CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:24:5f:77:2a:c7:b1:02:72:8b:cd:d1:b2:06:
51:3b:03:7d:98:d7:cc:2b:80:15:4b:e3:50:8f:02:
32:5c:3a:18:7e:40:65:87:98:c2:55:53:8c:00:5b:
27:cc:c5:b8:0e:ca:2b:54:a9:d2:d5:c8:29:32:27:
a5:04:f6:68:c1:7a:43:08:f8:30:4c:c1:ba:ac:3f:
11:87:b2:25:26:7c:89:89:fc:22:8f:14:20:39:fc:
0c:ec:97:cb:13:80:a4:f6:40:1f:42:c7:db:b7:e9:
4d:a6:65:b6:fb:8e:07:94:dd:25:43:cb:5b:aa:de:
37:37:64:13:93:17:3c:41:d7:1a:0c:d7:18:0f:77:
9a:83:80:4e:33:97:1c:b2:a8:da:92:44:61:54:b2:
01:b1:74:3e:99:17:19:a3:34:96:55:db:6b:37:b6:
d2:ca:95:a5:2b:b9:59:e8:98:31:61:47:9e:63:46:
25:83:ef:15:40:95:02:c5:95:51:11:ee:d0:10:56:
50:3e:2c:c6:05:c1:88:cc:18:9d:96:91:28:d5:8a:
5a:15:f2:40:3f:2b:51:7e:de:ac:27:b4:d9:af:8e:
f8:36:f0:77:aa:2a:8d:ac:09:da:7f:7a:d6:fb:9a:
ae:d2:b0:cd:53:27:b0:a3:af:01:a4:93:29:55:c8:
f0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0D:B9:DC:17:68:EE:A2:25:5B:9A:65:2C:22:32:64:46:37:E3:CA
X509v3 Authority Key Identifier:
keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e37372e302f32342d3234203d3e203233383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.196.77.0/24
Signature Algorithm: sha256WithRSAEncryption
18:38:9e:cd:c9:a4:18:57:dd:5b:35:64:8d:68:df:e5:6d:fc:
8b:d0:e4:a7:be:3a:43:16:f2:a8:a0:05:fa:49:31:78:bd:18:
37:5e:ae:a1:a4:03:80:7a:4a:31:04:b4:c1:18:2e:e4:19:75:
59:02:51:6a:13:f7:13:ee:df:30:c0:54:18:77:da:b9:11:55:
e9:62:2b:fc:49:30:46:c5:4c:fb:14:30:31:34:31:14:84:7a:
c4:16:4f:b5:b3:96:07:7f:e8:1b:64:b6:0b:4b:8d:c5:77:26:
47:be:1a:87:e0:79:2c:b0:b7:df:50:0a:3b:b9:80:ed:11:5a:
53:b0:a4:2c:b5:ac:8d:06:84:da:95:b2:35:7c:b2:25:db:fc:
d2:8a:27:0a:16:14:07:2a:75:ea:23:8b:4b:3d:e9:6c:c3:02:
4f:d4:51:00:83:5d:0b:87:46:67:46:38:aa:96:67:96:a1:c1:
aa:eb:7f:b7:66:60:57:a7:ab:8e:f8:fa:c9:58:70:91:9c:e1:
04:76:56:e5:6c:e9:93:ee:cb:69:85:c6:57:0b:1b:40:8c:58:
b2:18:34:a9:fb:4c:9e:90:d3:99:56:19:71:0e:82:21:8e:e3:
f8:ca:0c:da:2e:69:9d:c7:cf:8b:eb:34:20:b7:68:19:9b:af:
7e:ba:92:0b
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUN6n0TWccGEYw9NCX/8EgYgHZEKswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURBODg0QTc5NzQ4RDU3RUI0OTM2NjcwNENCNkE4MTEw
RTI3MDQyRDAeFw0yNjA0MTYwOTEyNTdaFw0yNzA0MTUwOTE3NTdaMDMxMTAvBgNV
BAMTKDdDMERCOURDMTc2OEVFQTIyNTVCOUE2NTJDMjIzMjY0NDYzN0UzQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgJF93KsexAnKLzdGyBlE7A32Y
18wrgBVL41CPAjJcOhh+QGWHmMJVU4wAWyfMxbgOyitUqdLVyCkyJ6UE9mjBekMI
+DBMwbqsPxGHsiUmfImJ/CKPFCA5/Azsl8sTgKT2QB9Cx9u36U2mZbb7jgeU3SVD
y1uq3jc3ZBOTFzxB1xoM1xgPd5qDgE4zlxyyqNqSRGFUsgGxdD6ZFxmjNJZV22s3
ttLKlaUruVnomDFhR55jRiWD7xVAlQLFlVER7tAQVlA+LMYFwYjMGJ2WkSjViloV
8kA/K1F+3qwntNmvjvg28HeqKo2sCdp/etb7mq7SsM1TJ7CjrwGkkylVyPDRAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUfA253Bdo7qIlW5plLCIyZEY348owHwYDVR0j
BBgwFoAU7aiEp5dI1X60k2ZwTLaoEQ4nBC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzA4MzUzMjM1NTgyOTc2My8wL0VEQTg4NEE3OTc0OEQ1N0VCNDkzNjY3MDRDQjZB
ODExMEUyNzA0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRURBODg0QTc5NzQ4RDU3RUI0OTM2NjcwNENCNkE4MTEwRTI3MDQyRC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NzA4MzUzMjM1NTgyOTc2My8wLzMxMzIzNDJlMzEz
OTM2MmUzNzM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM4MzQzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAHzETTANBgkqhkiG9w0BAQsFAAOCAQEAGDiezcmkGFfdWzVkjWjf5W38
i9Dkp746QxbyqKAF+kkxeL0YN16uoaQDgHpKMQS0wRgu5Bl1WQJRahP3E+7fMMBU
GHfauRFV6WIr/EkwRsVM+xQwMTQxFIR6xBZPtbOWB3/oG2S2C0uNxXcmR74ah+B5
LLC331AKO7mA7RFaU7CkLLWsjQaE2pWyNXyyJdv80oonChYUByp16iOLSz3pbMMC
T9RRAINdC4dGZ0Y4qpZnlqHBqut/t2ZgV6erjvj6yVhwkZzhBHZW5Wzpk+7LaYXG
VwsbQIxYshg0qftMnpDTmVYZcQ6CIY7j+MoM2i5pncfPi+s0ILdoGZuvfrqSCw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:26:02 2026 by rpki-client