
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948468227/0/3131332e31382e3130302e302f32342d3234203d3e2039383038.roa
File: 3131332e31382e3130302e302f32342d3234203d3e2039383038.roa (raw, json)
Hash identifier: 0vZ31zN+cOViGpd7YcM9R6wPzZDDWAwBfSOU88Ao/UU=
Subject key identifier: A3:04:12:44:5D:41:4C:58:22:8C:3B:33:F9:F6:73:25:E6:F4:3E:0F
Certificate issuer: /CN=373B103C68D9B84455801815E437C49839794406
Certificate serial: 77571255DBD1A767AAFB829C2A55C961DAE759E8
Authority key identifier: 37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/3131332e31382e3130302e302f32342d3234203d3e2039383038.roa
Signing time: Fri 17 Apr 2026 08:52:44 +0000
ROA not before: Fri 17 Apr 2026 08:47:44 +0000
ROA not after: Fri 16 Apr 2027 08:52:44 +0000
asID: 9808
IP address blocks: 113.18.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 11:25:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:57:12:55:db:d1:a7:67:aa:fb:82:9c:2a:55:c9:61:da:e7:59:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373B103C68D9B84455801815E437C49839794406
Validity
Not Before: Apr 17 08:47:44 2026 GMT
Not After : Apr 16 08:52:44 2027 GMT
Subject: CN=A30412445D414C58228C3B33F9F67325E6F43E0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c6:98:ea:c9:1d:68:c8:cd:00:a1:f5:9b:c1:
d1:14:e8:82:33:ad:8c:20:04:11:99:0e:01:64:d2:
8c:a0:60:c4:6c:81:89:fd:ec:48:ad:28:ef:6d:fa:
3f:89:73:ab:13:3e:cf:f9:c3:92:8c:c0:df:5a:a5:
70:3c:eb:0a:7e:3f:d5:9d:af:80:0c:80:15:b5:25:
d7:de:bd:14:00:31:0d:ec:ee:e4:9a:fe:33:f3:6b:
08:51:23:46:3a:f5:78:d8:26:39:54:61:f4:92:cf:
a6:37:e5:0b:11:cc:fd:40:a8:6f:a3:91:f2:87:38:
3e:60:f7:79:68:8e:63:ad:08:d0:bd:18:ff:4c:bc:
e9:ab:7a:9d:cb:77:08:08:42:3e:fc:18:6f:73:10:
5b:53:3f:5b:e9:0f:79:33:cb:76:c8:fc:25:bb:78:
33:0a:df:ed:08:10:23:76:34:3d:41:41:1b:e0:22:
e9:03:26:fe:2e:ca:4b:92:72:de:04:63:03:09:f2:
a2:85:88:b9:8f:7d:c3:22:63:24:1d:b1:b1:26:7f:
e4:80:d6:89:85:d3:97:69:6a:2e:83:bd:7b:f6:b0:
1b:ed:b3:25:47:c0:e7:d2:36:47:21:1d:40:b3:c6:
7d:e7:8a:5a:0a:d5:ad:d8:c5:89:cb:a2:02:3c:3f:
d7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:04:12:44:5D:41:4C:58:22:8C:3B:33:F9:F6:73:25:E6:F4:3E:0F
X509v3 Authority Key Identifier:
keyid:37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/3131332e31382e3130302e302f32342d3234203d3e2039383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.18.100.0/24
Signature Algorithm: sha256WithRSAEncryption
36:bc:8f:71:a8:3e:4f:7c:4f:b2:d4:d0:22:91:c9:0a:29:71:
28:84:ab:da:d3:20:ac:96:22:02:da:10:71:c9:b3:d7:72:48:
0c:b0:d3:d6:17:7f:34:bf:f9:59:76:6d:6a:f0:e8:95:d3:f4:
ac:0b:15:8c:78:c1:48:73:f9:a0:ab:fd:07:1c:8e:6b:fd:3a:
b8:d9:6f:b5:04:94:e9:03:d0:12:8e:f7:6c:2d:a0:97:88:44:
23:a0:b7:e6:17:c8:ca:ef:a3:52:58:00:0d:fa:2e:f9:75:da:
d2:25:a8:82:51:c6:97:06:0c:d4:8d:76:15:05:4a:1f:48:16:
33:9f:eb:b5:41:bd:db:96:d4:8a:6d:9c:b3:f1:b6:5e:a2:d8:
6d:9e:87:24:5e:6d:98:b9:64:81:d5:07:c0:78:a4:c8:3e:e4:
5e:1d:be:c5:b3:81:e9:29:06:e4:87:79:7e:b0:6b:a9:6a:78:
07:cc:2d:df:79:7a:b0:70:c1:83:4e:57:f6:c0:98:fd:b3:e7:
e5:28:e9:fa:d8:61:b9:f8:99:30:db:43:c5:cc:79:b4:65:d0:
14:4a:9f:5f:ef:9f:dd:9f:7e:73:75:c9:05:23:2b:bc:2c:cb:
a9:c7:21:45:6e:b0:d0:1d:66:b8:2a:e2:64:e1:26:04:64:a4:
7a:d0:c8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:29:47 2026 by rpki-client