
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34352e3136302e302f32322d3234203d3e203133333738.roa
File: 3130332e34352e3136302e302f32322d3234203d3e203133333738.roa (raw, json)
Hash identifier: NdIKXRHOY1GoprPOCEYegt6muxxq/yc5/oPdOzwJvLw=
Subject key identifier: 7F:C6:5A:55:80:A7:CD:0B:30:41:DA:90:40:02:6E:99:97:78:89:B8
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 41F8B94BFEE279A7F4CB512A3B3CC344C289E052
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34352e3136302e302f32322d3234203d3e203133333738.roa
Signing time: Fri 17 Apr 2026 01:42:16 +0000
ROA not before: Fri 17 Apr 2026 01:37:16 +0000
ROA not after: Fri 16 Apr 2027 01:42:16 +0000
asID: 13378
IP address blocks: 103.45.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:f8:b9:4b:fe:e2:79:a7:f4:cb:51:2a:3b:3c:c3:44:c2:89:e0:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Apr 17 01:37:16 2026 GMT
Not After : Apr 16 01:42:16 2027 GMT
Subject: CN=7FC65A5580A7CD0B3041DA9040026E99977889B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ad:69:1f:02:cb:b6:5c:95:f4:3d:8c:e1:67:
88:98:23:50:fe:18:96:43:cb:33:80:c0:f9:12:17:
a3:9f:a1:73:b1:1d:5c:c1:e2:b3:d1:13:a0:90:d7:
08:5b:25:be:cd:ed:6d:f5:2e:70:2b:18:43:cf:8b:
96:23:05:a6:7c:72:f7:9c:27:c9:37:10:78:da:74:
38:7a:3d:d8:98:6e:4e:83:7a:e2:1b:66:68:81:e0:
23:99:a9:af:4f:69:06:77:dd:be:83:eb:35:fc:d1:
67:52:74:4e:db:c8:9f:f1:6b:f0:5e:26:7c:a9:25:
31:d3:00:a9:29:bf:7e:aa:77:36:ed:d2:95:da:e2:
ba:e0:39:58:88:b8:02:bb:00:fc:79:00:17:ec:32:
45:d6:05:17:29:46:28:12:57:a8:21:15:27:c3:da:
bd:a2:2c:c2:3c:f5:2e:4f:f9:91:45:26:68:68:36:
7d:c5:7e:35:99:e4:30:fe:7f:81:f7:d6:9c:c0:e8:
c0:5e:0e:c9:f6:36:b2:6b:39:f4:71:94:c4:c9:c5:
07:f1:af:e9:f0:96:aa:60:cd:0b:b0:ba:53:eb:11:
f1:73:3b:d1:94:d4:7c:e0:64:9d:df:b0:3d:a0:fd:
c9:6d:81:c0:10:f4:3d:ef:67:70:3c:08:e0:fa:db:
fa:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C6:5A:55:80:A7:CD:0B:30:41:DA:90:40:02:6E:99:97:78:89:B8
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34352e3136302e302f32322d3234203d3e203133333738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.45.160.0/22
Signature Algorithm: sha256WithRSAEncryption
73:f8:ba:33:1e:ed:b4:8a:ea:bd:57:77:23:ac:52:ee:90:18:
cc:78:87:31:cc:2a:09:58:3f:b8:2b:2f:88:f9:43:b5:42:56:
8e:88:c5:77:cd:c0:e2:63:55:28:95:87:fb:2c:78:1c:23:b2:
09:66:74:60:2f:12:ae:14:9d:4f:e7:ac:f3:5c:b8:93:bb:25:
d7:b7:f3:19:01:7d:43:7d:94:79:47:c7:b7:ec:2e:30:45:77:
4d:77:85:ef:83:f7:2d:5e:25:0d:41:df:7b:a7:af:5f:d7:5e:
f0:7a:8d:d4:34:76:52:c6:26:eb:01:e3:c3:2e:b2:b1:40:4c:
37:73:a5:7e:76:60:7b:08:3b:a6:be:22:85:7c:42:7f:d2:32:
6d:37:9a:bf:05:7c:5f:74:31:75:28:1d:42:be:7c:c1:ff:58:
c7:c6:14:81:76:02:76:4a:c4:75:17:bf:ce:68:55:13:3a:60:
58:33:48:e5:6b:c9:48:8d:23:be:72:0a:54:84:34:f8:67:9f:
e2:70:25:c7:65:56:b8:df:0f:91:25:f5:69:0f:55:3a:4c:80:
6b:a2:8f:ee:e3:ba:72:d4:d1:a6:c6:18:fe:ff:86:f8:cb:8f:
3d:9c:ca:20:c8:24:d0:f1:b6:78:b8:46:3d:b6:bd:db:17:f3:
a2:dc:30:0e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:00:27 2026 by rpki-client