
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3230322e36392e32322e302f32342d3234203d3e203233383438.roa
File: 3230322e36392e32322e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier: wWpNXRSK90idJEFGYGmnqJXjP6R/9+Ea0PaFHalFG8Q=
Subject key identifier: 57:DD:A1:BA:28:EC:E2:6C:2D:15:01:00:81:B7:09:F5:0F:AC:73:C0
Certificate issuer: /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial: 500F4A47D7BD428C816DDEDF5303FE773BB3D53A
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3230322e36392e32322e302f32342d3234203d3e203233383438.roa
Signing time: Thu 16 Apr 2026 09:07:33 +0000
ROA not before: Thu 16 Apr 2026 09:02:33 +0000
ROA not after: Thu 15 Apr 2027 09:07:33 +0000
asID: 23848
IP address blocks: 202.69.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 05:50:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:0f:4a:47:d7:bd:42:8c:81:6d:de:df:53:03:fe:77:3b:b3:d5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
Validity
Not Before: Apr 16 09:02:33 2026 GMT
Not After : Apr 15 09:07:33 2027 GMT
Subject: CN=57DDA1BA28ECE26C2D15010081B709F50FAC73C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:de:ea:aa:6b:ad:9b:29:29:ca:9a:4a:43:c9:
0f:98:16:33:03:93:0e:6b:4d:02:4e:92:ac:e3:97:
44:7b:90:a7:14:49:69:6a:f2:5e:a7:9e:4b:ad:a2:
26:ed:e0:c9:6e:98:60:b8:ca:be:8c:ff:03:37:75:
b2:b2:7f:8e:6d:61:24:98:b0:d8:35:af:b0:a6:6a:
fe:f7:e5:31:d2:18:1f:c1:5f:d8:bd:b4:f1:17:21:
c8:aa:ef:da:1a:ee:46:67:b7:32:a9:44:0a:31:04:
d4:3d:bd:27:97:25:4f:25:a7:b3:b6:3e:66:4f:60:
36:92:97:5d:88:ba:66:e6:37:58:a9:6a:3b:59:bd:
82:a1:bf:56:83:23:a4:5e:3d:40:ac:07:dc:fe:16:
a7:89:43:d4:32:8e:3e:71:72:39:be:64:97:0c:b0:
58:79:7e:1c:2f:d4:94:ff:8c:b1:41:f9:9b:17:ad:
7d:7c:b3:03:f4:65:d9:7c:e0:a0:bb:03:32:69:b4:
79:07:e8:4f:0c:3c:cb:df:8b:1e:65:c9:dd:12:17:
c2:c4:bf:3e:0d:28:4f:a2:96:35:5a:0a:c7:92:95:
5a:db:6f:03:fd:de:41:a7:55:40:12:53:20:a7:34:
d8:35:35:07:b9:9e:40:55:8d:66:94:08:42:10:7c:
bf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DD:A1:BA:28:EC:E2:6C:2D:15:01:00:81:B7:09:F5:0F:AC:73:C0
X509v3 Authority Key Identifier:
keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3230322e36392e32322e302f32342d3234203d3e203233383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.69.22.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:35:29:d5:8e:02:ff:df:77:55:78:06:0e:3a:f1:6d:76:d6:
6c:2f:1c:a2:8d:c4:22:70:f5:e1:60:87:29:be:4a:1a:98:a9:
82:dc:12:8c:7f:6d:5b:ef:39:8c:90:47:7d:00:9f:80:96:19:
4e:37:7c:5b:b4:3f:1b:08:70:fc:1a:0c:65:57:08:21:df:01:
d3:83:54:af:f7:0b:d9:1d:ea:3e:54:5e:2d:b9:b2:91:ff:05:
44:04:54:3e:fc:8c:0d:b3:90:5d:53:fd:04:9c:64:7e:f8:ef:
26:d1:d1:5c:ce:d2:6f:3f:1b:8e:38:b8:87:24:38:2c:c7:21:
d1:6a:e0:06:1b:1b:b5:d5:8a:c5:24:3b:ca:e5:53:32:76:9f:
73:bc:c2:b6:10:e1:73:f0:57:16:4e:c9:e2:bc:14:4e:10:bb:
40:e4:99:35:d1:8e:dd:b6:f0:8d:3f:30:d9:1a:66:d9:66:94:
c2:44:be:ea:59:bb:88:bc:a8:4a:24:0c:d7:aa:2d:ae:79:41:
31:c2:09:ef:d1:e7:a8:49:af:c9:72:78:38:03:80:4b:f0:24:
ed:fd:64:6d:dc:b0:91:09:4a:fc:60:a6:b0:eb:57:7a:ac:08:
90:9c:f5:a8:29:c0:87:45:c8:1b:62:77:52:7e:3b:5c:28:e3:
33:a2:36:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:27:24 2026 by rpki-client