
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3130332e3230302e3232382e302f32342d3234203d3e203137363231.roa
File: 3130332e3230302e3232382e302f32342d3234203d3e203137363231.roa (raw, json)
Hash identifier: rfxqQJiWPvC4aWxHjAtQBuC7jEmsaO2slieoSwbB6Vo=
Subject key identifier: 43:54:82:B6:63:01:2B:5A:75:91:1A:B5:55:87:7D:83:79:8C:A5:7B
Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Certificate serial: 7A6D9AEB4508748E09DAD2AD4EE1684F395C2B2B
Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3130332e3230302e3232382e302f32342d3234203d3e203137363231.roa
Signing time: Fri 17 Apr 2026 06:23:24 +0000
ROA not before: Fri 17 Apr 2026 06:18:24 +0000
ROA not after: Fri 16 Apr 2027 06:23:24 +0000
asID: 17621
IP address blocks: 103.200.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:6d:9a:eb:45:08:74:8e:09:da:d2:ad:4e:e1:68:4f:39:5c:2b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Validity
Not Before: Apr 17 06:18:24 2026 GMT
Not After : Apr 16 06:23:24 2027 GMT
Subject: CN=435482B663012B5A75911AB555877D83798CA57B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:2a:8b:05:06:50:b3:f8:fd:3a:dc:da:31:
ba:1a:74:70:c7:d2:de:99:c8:4d:58:03:f6:d8:ec:
96:8c:d5:78:e9:fc:24:69:ff:a0:77:30:02:b2:e5:
80:bd:96:74:c5:9a:3a:b7:1c:7f:c3:05:33:8e:ad:
f6:b1:11:71:a2:04:a5:0e:8e:a5:01:d0:62:3c:f4:
ba:72:ee:24:3a:b8:ee:58:11:5e:30:69:bb:32:4c:
36:43:52:1b:66:33:a8:49:7d:d7:0c:d9:31:ac:dd:
10:89:22:1e:e6:ec:a5:89:f1:e6:17:ff:ea:5b:f4:
3d:04:64:95:8c:cc:60:96:f0:ca:32:a7:44:9a:eb:
ac:1c:90:d1:96:f0:98:ef:96:d5:f4:ab:22:e6:67:
dd:54:60:14:ac:4c:e1:ec:d9:e5:8a:b4:81:ec:dc:
f0:33:b5:3d:76:76:63:18:d5:3d:91:72:88:4b:55:
e6:61:c6:ff:4e:34:fd:9a:b0:6d:cd:cd:42:01:cd:
b5:37:b3:35:6c:61:db:0f:e4:9f:d7:75:30:b1:37:
38:ec:cf:44:13:c9:91:61:4e:c4:f0:03:2a:6b:50:
d5:c5:63:3e:8d:cc:b2:06:c2:32:2b:5e:2b:5c:84:
d1:f7:0b:9c:64:ca:eb:dc:e0:90:1f:ed:d5:c4:f8:
b0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:54:82:B6:63:01:2B:5A:75:91:1A:B5:55:87:7D:83:79:8C:A5:7B
X509v3 Authority Key Identifier:
keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3130332e3230302e3232382e302f32342d3234203d3e203137363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.200.228.0/24
Signature Algorithm: sha256WithRSAEncryption
73:08:3e:25:1f:4c:7c:14:b7:d0:ba:e1:c6:37:b2:c4:ad:68:
61:54:e6:b1:26:b5:f4:2f:9d:b4:f5:8d:25:68:4d:ea:45:45:
7b:90:f6:3d:7d:64:94:a0:a0:d2:4f:a2:7d:97:2b:9c:4b:86:
6a:2f:8f:a3:0c:8e:86:fc:2f:0d:2c:f6:de:dc:d5:ff:dd:ba:
91:65:b8:3a:ca:e3:35:5b:ad:a3:86:79:8f:5a:e0:01:01:70:
7c:cd:00:77:47:d7:82:6c:b9:f1:ee:1e:a5:79:55:ee:e6:bd:
58:0e:ff:ce:37:4a:d7:17:c0:e1:5d:e1:f1:f5:0d:06:c9:4e:
91:eb:42:15:ec:cf:5c:97:43:e9:96:d4:c9:a6:d5:65:02:60:
2d:82:b2:6b:79:bb:57:2c:2a:5e:cd:0c:a1:70:e0:4b:3c:1f:
c0:59:0b:f2:b9:cd:c3:0c:f9:8e:ac:cb:b2:2e:b0:64:14:d9:
bd:e7:ca:fb:7b:56:af:cc:ae:81:18:82:e1:a1:26:01:8c:71:
bb:68:71:ed:b1:ab:18:61:74:15:7b:5e:7b:24:1b:09:62:5d:
6b:da:3d:a3:be:97:69:c7:0e:5f:9e:8b:56:82:42:8e:b0:41:
02:18:e4:4c:10:49:7d:a8:10:2c:70:b0:ac:c7:b4:34:f9:21:
f5:22:0a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:54:23 2026 by rpki-client