
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3230322e36392e31372e302f32342d3234203d3e203233383438.roa
File: 3230322e36392e31372e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier: hIKzNcJaMoazKn+u7tcqEwKFSpXC26oJ0kLo3Y4NlSQ=
Subject key identifier: 7B:C4:E5:D4:85:66:F8:0F:5A:38:AD:1F:E7:CF:C6:74:6C:85:CF:EC
Certificate issuer: /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial: 37F9A3F2DEC72F6F33F7DA2BE603FEDF4E0FDEBE
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3230322e36392e31372e302f32342d3234203d3e203233383438.roa
Signing time: Thu 16 Apr 2026 09:07:32 +0000
ROA not before: Thu 16 Apr 2026 09:02:32 +0000
ROA not after: Thu 15 Apr 2027 09:07:32 +0000
asID: 23848
IP address blocks: 202.69.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:f9:a3:f2:de:c7:2f:6f:33:f7:da:2b:e6:03:fe:df:4e:0f:de:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
Validity
Not Before: Apr 16 09:02:32 2026 GMT
Not After : Apr 15 09:07:32 2027 GMT
Subject: CN=7BC4E5D48566F80F5A38AD1FE7CFC6746C85CFEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a4:0c:ab:78:15:ec:ea:a9:86:79:01:24:87:
95:5b:1f:ed:59:03:a3:0b:38:de:da:ea:56:12:36:
e6:7c:05:66:0c:2f:79:ca:30:b2:89:d6:5f:0f:b1:
e7:a1:b4:38:e1:21:2c:93:bd:db:1d:34:fa:4d:1d:
c1:8d:36:4f:87:43:69:11:18:02:5b:89:90:55:66:
5c:6a:3d:17:77:93:91:10:4d:af:29:4a:a5:e2:ac:
d4:12:1e:b3:e4:4b:9e:99:6b:1a:5c:e7:1b:39:9f:
e6:12:34:4d:6a:b4:4d:2c:52:d8:38:a3:ce:81:27:
d7:ed:3a:00:0b:bc:49:ae:69:89:bd:2b:ae:59:e7:
f4:16:65:9b:ec:f1:b0:24:c1:49:aa:4d:c7:6f:a1:
b6:78:d1:35:6c:91:e6:50:06:31:d1:42:ea:d7:ce:
ad:7b:93:ef:e1:cc:4c:58:71:5c:f2:1e:f7:22:a0:
c0:96:51:cb:9d:da:9e:dd:46:69:25:f0:72:25:a7:
c8:83:9e:28:e5:85:02:0a:70:15:91:d7:55:0b:44:
9e:63:89:c8:5e:d6:af:f4:a9:ed:7d:01:b5:78:32:
70:9c:c5:d0:12:3e:79:ed:ff:72:e5:f2:2d:9c:2f:
70:62:60:03:2f:d8:9a:1c:e0:9b:61:d9:ca:ee:0e:
79:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C4:E5:D4:85:66:F8:0F:5A:38:AD:1F:E7:CF:C6:74:6C:85:CF:EC
X509v3 Authority Key Identifier:
keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3230322e36392e31372e302f32342d3234203d3e203233383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.69.17.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:77:8c:cd:46:b5:a3:da:18:8d:eb:62:9a:70:46:d7:84:32:
8b:9a:23:9c:9e:78:a6:ed:60:24:82:a0:af:0b:f5:02:f2:de:
32:b7:42:0c:12:63:c9:25:3a:d1:99:76:6a:11:3c:e1:0c:47:
87:a7:39:66:e8:41:a4:63:45:4d:5b:03:cb:4c:ac:6b:6d:66:
ef:aa:90:2e:d5:9a:6e:ba:8d:36:3c:e0:e1:41:2c:ca:d7:fd:
d9:05:cb:67:08:4d:03:01:b1:ac:bd:92:43:75:b6:fc:57:db:
95:54:38:a7:f9:e5:fc:e1:70:27:0e:d7:39:04:16:f7:89:cf:
29:2b:d6:81:02:43:fd:df:71:67:12:5d:c2:fb:e2:48:bd:be:
a3:92:fd:c7:76:57:f1:ac:ce:83:b6:d8:0f:49:9a:04:b3:1f:
42:78:1f:52:25:7f:4d:66:c4:34:3f:df:1e:5c:55:ef:1b:5e:
a4:38:03:fd:5d:b4:95:0a:8c:43:8b:e3:3e:6b:3a:46:32:45:
53:bc:b8:23:f1:8d:cb:36:a9:ba:fa:4a:0b:f8:65:ce:43:cf:
b2:fd:5b:0d:c1:da:70:65:8b:b3:38:9c:99:27:66:7b:c4:54:
a8:d9:81:2d:87:e4:fb:be:64:ab:87:3f:35:f4:ef:b0:d2:26:
49:be:70:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:53:08 2026 by rpki-client