
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3130332e32332e3136312e302f32342d3234203d3e203435313130.roa
File: 3130332e32332e3136312e302f32342d3234203d3e203435313130.roa (raw, json)
Hash identifier: c9vEheG5N1+PEClCcbwGe6LLo4Bd5VfI0yAs8ZlivL4=
Subject key identifier: 2F:0B:B6:4C:08:2E:FF:DB:07:CB:31:FC:06:21:76:FC:31:42:DD:79
Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Certificate serial: 20D1E419E774B96587695F56BEA8F08803BC4D36
Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3130332e32332e3136312e302f32342d3234203d3e203435313130.roa
Signing time: Fri 17 Apr 2026 11:00:36 +0000
ROA not before: Fri 17 Apr 2026 10:55:36 +0000
ROA not after: Fri 16 Apr 2027 11:00:36 +0000
asID: 45110
IP address blocks: 103.23.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:d1:e4:19:e7:74:b9:65:87:69:5f:56:be:a8:f0:88:03:bc:4d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Validity
Not Before: Apr 17 10:55:36 2026 GMT
Not After : Apr 16 11:00:36 2027 GMT
Subject: CN=2F0BB64C082EFFDB07CB31FC062176FC3142DD79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:eb:3c:09:c7:fa:2b:86:c3:2f:3d:4b:b6:f6:
1a:90:2b:10:ea:50:4d:25:9a:41:e4:d7:c9:76:0a:
57:38:55:a6:a5:e6:a9:89:df:74:ce:15:19:96:09:
fe:a0:9a:52:13:8d:30:e8:50:97:a2:a8:04:52:41:
bd:5d:81:18:8a:1f:74:00:b5:35:4a:f6:8b:f2:5a:
f3:08:86:9d:f2:da:b1:11:76:9a:10:d8:38:69:93:
89:0b:ff:54:49:9e:a9:2d:96:c6:95:7b:90:86:84:
b2:57:1f:b6:0d:97:30:89:d5:13:01:94:87:7c:c6:
1b:b2:27:f9:2b:57:74:c9:63:f8:e0:44:c8:80:9c:
29:4e:1a:42:84:0f:b0:b1:9b:77:dc:5f:45:2e:31:
60:ae:4e:46:fd:31:bc:b8:80:4c:ee:d7:db:e0:d7:
ac:2e:f0:2d:d1:e9:9c:70:e5:94:97:3c:11:9e:a6:
48:dd:29:62:7d:a9:b7:b0:f3:ea:f3:e2:29:33:92:
a4:df:99:8d:a8:d3:54:e6:7b:f6:42:78:0d:ae:83:
e4:19:b6:c6:81:98:94:28:45:11:d9:9b:14:bf:c4:
81:20:a3:f9:f2:1c:56:f6:f7:63:01:b7:47:b7:9c:
a5:e0:fa:ea:93:be:d0:ef:c9:cd:7b:40:fa:fc:d9:
50:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0B:B6:4C:08:2E:FF:DB:07:CB:31:FC:06:21:76:FC:31:42:DD:79
X509v3 Authority Key Identifier:
keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3130332e32332e3136312e302f32342d3234203d3e203435313130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.23.161.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:08:65:64:36:54:dc:be:08:a0:f5:55:f4:f5:e2:ec:8a:72:
8a:98:73:6f:07:dd:97:91:0a:e1:15:ea:98:e6:39:2a:62:33:
d0:65:cf:f6:61:f2:07:9c:13:10:a3:9c:f9:51:1c:28:19:22:
46:7d:68:f5:68:6c:c1:68:4a:b5:34:d4:81:8d:15:7a:f3:84:
73:c7:7d:aa:e7:73:2e:03:ec:e2:b2:0d:95:ae:7f:cc:58:d4:
0c:3e:4f:cb:d5:39:e6:90:cb:ed:9b:43:ed:ea:fc:38:c9:95:
ce:83:98:10:a4:94:94:82:30:ed:1b:d4:0d:f9:a2:94:00:80:
a6:49:81:ad:bc:d2:66:ca:32:d2:d8:64:68:ab:2a:e8:55:4d:
de:38:84:41:1a:67:81:7b:67:cf:00:a3:ce:fe:d4:a5:d8:df:
c9:d3:85:6a:49:4c:d0:17:2a:f4:54:ae:76:30:b9:c1:8b:76:
a6:a9:04:ec:a9:65:1d:02:a3:57:42:2c:65:93:15:e2:b5:54:
24:9b:8b:75:79:38:d1:c9:73:27:b9:e4:80:27:64:df:65:b4:
18:5c:72:58:d0:6a:17:c5:1b:c6:eb:fb:6c:0f:ed:51:46:a5:
17:05:90:f6:91:76:a9:fc:ae:46:a6:0a:66:cc:db:9e:4c:60:
56:48:82:ca
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:22:20 2026 by rpki-client