
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3130312e34382e302e302f31362d3136203d3e2030.roa
File: 3130312e34382e302e302f31362d3136203d3e2030.roa (raw, json)
Hash identifier: u+t0+X0irGyRWL8Gk4WbGOrx9bKMVBUEmpla1mb4Nog=
Subject key identifier: CD:51:AD:C4:BA:48:A2:87:C0:52:B1:00:63:31:7B:B6:E7:88:94:5A
Certificate issuer: /CN=3685DAC8828B3EB4989761422A77AA7B265F96CE
Certificate serial: 047D1952D348787D7C52737EA620022356CA8D82
Authority key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3130312e34382e302e302f31362d3136203d3e2030.roa
Signing time: Wed 15 Apr 2026 08:59:32 +0000
ROA not before: Wed 15 Apr 2026 08:54:32 +0000
ROA not after: Wed 14 Apr 2027 08:59:32 +0000
asID: 0
IP address blocks: 101.48.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 05:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:7d:19:52:d3:48:78:7d:7c:52:73:7e:a6:20:02:23:56:ca:8d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE
Validity
Not Before: Apr 15 08:54:32 2026 GMT
Not After : Apr 14 08:59:32 2027 GMT
Subject: CN=CD51ADC4BA48A287C052B10063317BB6E788945A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:97:e8:cc:20:46:e9:d2:5d:8f:1e:d1:83:94:
d2:36:b6:75:16:76:76:4e:5c:3f:1d:d7:8f:cc:3e:
a9:5b:a8:f8:48:6d:03:6f:06:8a:32:f8:38:0c:48:
8d:28:14:aa:67:c3:94:c8:a6:de:73:50:8b:ba:5a:
ff:2f:dd:42:ac:02:3e:86:ce:97:42:22:76:ba:e4:
24:ca:0b:c2:e9:d7:21:1c:89:40:7b:0a:75:73:31:
98:0a:53:25:d2:0e:9e:af:93:bd:94:f4:25:9e:72:
6b:df:a6:c7:9a:35:40:41:ec:9d:c0:1f:f4:a7:82:
db:1e:09:40:e4:ba:f9:52:9e:10:ec:9b:8b:22:82:
ba:76:33:94:f4:a0:42:1e:a9:ea:8c:79:43:c9:d7:
45:c5:c0:b2:56:08:27:78:88:c6:c0:68:a3:ce:97:
ce:8a:60:96:97:bb:ad:b8:79:5b:93:28:ce:06:20:
85:ee:99:11:e8:42:2a:b5:a0:64:f6:1d:73:ce:93:
9c:0e:ae:12:b5:f2:c5:44:5e:a2:ea:0c:36:e8:23:
3c:56:82:9a:69:1a:ea:87:ce:d4:47:b8:28:87:bc:
b9:6b:e8:c7:46:0a:be:5a:6a:8b:13:29:83:01:96:
46:f6:bb:17:1a:cb:3b:1c:85:c3:d9:cc:6f:fb:b7:
04:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:51:AD:C4:BA:48:A2:87:C0:52:B1:00:63:31:7B:B6:E7:88:94:5A
X509v3 Authority Key Identifier:
keyid:36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3130312e34382e302e302f31362d3136203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.48.0.0/16
Signature Algorithm: sha256WithRSAEncryption
87:e5:67:5b:81:66:63:63:5d:0f:97:ad:07:4f:52:53:8a:65:
78:fa:b9:4e:18:57:2d:d8:98:67:66:89:36:bd:03:b7:a0:de:
0f:e3:74:7a:65:b2:93:78:5e:12:ab:d0:10:c0:36:16:b4:8d:
33:b6:10:2f:56:7f:aa:9f:de:09:46:bf:2e:49:15:cd:8d:63:
53:53:a4:de:19:48:50:b6:56:ef:46:2d:2f:13:b5:39:05:08:
9b:eb:01:ee:c1:a7:df:a2:77:94:7a:cb:c1:82:50:c8:b8:99:
ca:01:df:9a:69:cb:ed:a2:15:31:c6:86:ef:5b:aa:cd:e7:c5:
47:0c:81:58:94:f5:bb:d5:58:ff:8f:c1:ce:9c:79:e7:bf:de:
e6:de:59:43:5e:52:54:58:52:1a:3f:33:94:5b:18:49:8c:87:
e3:64:a7:a6:1a:b1:13:3c:31:fc:13:47:8a:f9:1c:35:48:b9:
06:02:79:4f:67:1b:5a:43:ae:ce:4b:72:65:08:0c:a4:66:68:
0e:1b:b7:0c:57:13:d8:50:1c:0f:aa:76:71:29:0f:ba:27:a3:
b3:17:84:bd:0f:b6:37:26:90:13:6f:26:0c:d5:75:3c:9b:f9:
db:cb:6e:1f:23:6b:9d:2c:19:b6:ac:25:a2:e2:d7:21:09:65:
b4:09:d4:32
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgIUBH0ZUtNIeH18UnN+piACI1bKjYIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0Iy
NjVGOTZDRTAeFw0yNjA0MTUwODU0MzJaFw0yNzA0MTQwODU5MzJaMDMxMTAvBgNV
BAMTKENENTFBREM0QkE0OEEyODdDMDUyQjEwMDYzMzE3QkI2RTc4ODk0NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzl+jMIEbp0l2PHtGDlNI2tnUW
dnZOXD8d14/MPqlbqPhIbQNvBooy+DgMSI0oFKpnw5TIpt5zUIu6Wv8v3UKsAj6G
zpdCIna65CTKC8Lp1yEciUB7CnVzMZgKUyXSDp6vk72U9CWecmvfpseaNUBB7J3A
H/SngtseCUDkuvlSnhDsm4sigrp2M5T0oEIeqeqMeUPJ10XFwLJWCCd4iMbAaKPO
l86KYJaXu624eVuTKM4GIIXumRHoQiq1oGT2HXPOk5wOrhK18sVEXqLqDDboIzxW
gpppGuqHztRHuCiHvLlr6MdGCr5aaosTKYMBlkb2uxcayzschcPZzG/7twSVAgMB
AAGjggIGMIICAjAdBgNVHQ4EFgQUzVGtxLpIoofAUrEAYzF7tueIlFowHwYDVR0j
BBgwFoAUNoXayIKLPrSYl2FCKneqeyZfls4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDUyMzY1MS8wLzM2ODVEQUM4ODI4QjNFQjQ5ODk3NjE0MjJBNzdB
QTdCMjY1Rjk2Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0IyNjVGOTZDRS5jZXIw
gYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTIzNjUxLzAvMzEzMDMxMmUzNDM4
MmUzMDJlMzAyZjMxMzYyZDMxMzYyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAZTAwDQYJ
KoZIhvcNAQELBQADggEBAIflZ1uBZmNjXQ+XrQdPUlOKZXj6uU4YVy3YmGdmiTa9
A7eg3g/jdHplspN4XhKr0BDANha0jTO2EC9Wf6qf3glGvy5JFc2NY1NTpN4ZSFC2
Vu9GLS8TtTkFCJvrAe7Bp9+id5R6y8GCUMi4mcoB35ppy+2iFTHGhu9bqs3nxUcM
gViU9bvVWP+Pwc6ceee/3ubeWUNeUlRYUho/M5RbGEmMh+Nkp6YasRM8MfwTR4r5
HDVIuQYCeU9nG1pDrs5LcmUIDKRmaA4btwxXE9hQHA+qdnEpD7ono7MXhL0Ptjcm
kBNvJgzVdTyb+dvLbh8ja50sGbasJaLi1yEJZbQJ1DI=
-----END CERTIFICATE-----
Generated at Thu Apr 16 22:35:40 2026 by rpki-client