
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34352e3136302e302f32322d3234203d3e2034383337.roa
File: 3130332e34352e3136302e302f32322d3234203d3e2034383337.roa (raw, json)
Hash identifier: xU3bX0JgaC1pUmz+RXjKf1ETb6OVmL9YO23djMUw67c=
Subject key identifier: 9E:91:2F:DE:9D:3F:03:BE:AB:A1:B9:A3:A8:31:1E:DC:42:A2:BF:EF
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 1E955D50EAD376471421C3981DD5755198343E4A
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34352e3136302e302f32322d3234203d3e2034383337.roa
Signing time: Fri 17 Apr 2026 01:42:16 +0000
ROA not before: Fri 17 Apr 2026 01:37:16 +0000
ROA not after: Fri 16 Apr 2027 01:42:16 +0000
asID: 4837
IP address blocks: 103.45.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:95:5d:50:ea:d3:76:47:14:21:c3:98:1d:d5:75:51:98:34:3e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Apr 17 01:37:16 2026 GMT
Not After : Apr 16 01:42:16 2027 GMT
Subject: CN=9E912FDE9D3F03BEABA1B9A3A8311EDC42A2BFEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:78:92:80:d2:1f:40:8e:ab:fd:25:e3:83:20:
4c:8d:04:21:2d:70:94:96:73:26:74:cb:ad:d3:04:
8e:4c:f9:4f:ec:55:b8:3f:ad:84:46:74:85:5d:aa:
a2:eb:60:10:1b:13:ac:3f:1d:b7:d4:92:1b:6b:4c:
5f:6c:11:5f:c8:79:a4:93:93:09:8f:7b:1c:09:af:
0c:4d:fe:7f:18:0a:60:2f:fb:c6:83:f7:68:2d:91:
b6:0e:1e:0c:73:7c:8c:d9:21:2f:f2:67:9a:86:85:
79:5b:40:ef:94:bf:44:00:eb:14:d2:bb:c6:6d:d1:
61:ed:e0:ed:a4:8a:af:a0:da:83:55:fb:20:2c:4f:
4f:50:7f:47:9b:82:ea:1d:bc:e9:ef:6b:3d:c9:51:
49:af:1f:47:59:a7:f4:ca:91:41:df:3c:27:1e:03:
ef:fd:98:8a:8b:4b:5f:7d:57:53:ff:68:15:56:ff:
c1:5e:0a:80:38:d9:79:1b:b1:be:7c:98:33:18:f9:
14:7f:03:5f:b5:14:ff:a3:ac:5d:45:0b:f0:d8:87:
54:ae:a0:44:79:1f:28:98:0d:2d:a3:b5:b3:ae:ff:
78:c7:0a:60:d6:9c:c2:5b:ef:b1:08:da:58:2b:62:
e6:30:c9:da:7c:e6:a4:f5:5a:60:39:d2:13:54:e0:
75:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:91:2F:DE:9D:3F:03:BE:AB:A1:B9:A3:A8:31:1E:DC:42:A2:BF:EF
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34352e3136302e302f32322d3234203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.45.160.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:bc:b3:e9:c4:6a:dd:ac:b2:92:8c:c6:0d:fc:c4:9d:43:51:
7a:44:98:f6:cf:26:60:d6:f8:c4:85:d1:0b:8e:c3:2a:c1:7b:
00:d8:61:0d:63:e9:fd:12:b0:5c:21:da:ca:87:21:5e:6a:0e:
a5:4b:c6:87:2d:ac:5c:f1:8f:1d:8c:85:40:86:d3:2f:9e:7a:
0a:36:8b:4f:3a:57:98:63:df:63:4f:29:5b:7c:7c:a4:e1:37:
c6:07:9b:9f:67:f2:e8:15:a5:9c:1c:2f:33:1b:c9:87:26:07:
9c:71:33:bb:f2:3b:37:fe:78:f5:1b:00:45:c8:21:89:1a:e0:
1c:32:c8:5a:a0:f4:1f:27:9b:82:0e:a1:a0:b1:fe:c9:e5:e9:
ff:8d:96:d9:0d:fe:8f:0b:ab:e8:ce:3c:28:ed:6c:2e:e1:60:
b0:69:14:1d:27:76:2d:63:2d:3d:3c:66:56:c8:66:03:b1:09:
84:ce:cb:91:b9:8f:57:5d:eb:24:df:48:f8:3b:4c:0e:cf:fa:
ed:42:c7:e1:ac:2c:fb:38:c9:0d:89:cd:ae:50:a2:e7:fe:6f:
19:1d:0b:3a:51:17:73:5c:6a:91:f1:87:5b:3e:ac:60:61:01:
5d:7e:56:b4:f1:d8:f1:db:59:cd:6d:5c:8f:13:5b:c1:e7:8c:
2b:5b:e9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:12:33 2026 by rpki-client