
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e36302e3136342e302f32322d3332203d3e2034383337.roa
File: 3130332e36302e3136342e302f32322d3332203d3e2034383337.roa (raw, json)
Hash identifier: dZGyd9JNPLiYHO0TnfSl7bhsG5Ez1osZjPWrZetk+u8=
Subject key identifier: 1A:EA:40:95:B4:FE:72:D2:C9:C2:BF:56:3A:60:52:40:22:F5:CD:F7
Certificate issuer: /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial: 2D5357B96D5EDA03042648394393970697567458
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e36302e3136342e302f32322d3332203d3e2034383337.roa
Signing time: Tue 14 Apr 2026 08:40:10 +0000
ROA not before: Tue 14 Apr 2026 08:35:10 +0000
ROA not after: Tue 13 Apr 2027 08:40:10 +0000
asID: 4837
IP address blocks: 103.60.164.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 07:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:53:57:b9:6d:5e:da:03:04:26:48:39:43:93:97:06:97:56:74:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Validity
Not Before: Apr 14 08:35:10 2026 GMT
Not After : Apr 13 08:40:10 2027 GMT
Subject: CN=1AEA4095B4FE72D2C9C2BF563A60524022F5CDF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:4b:02:91:5e:8d:b2:3d:f4:7f:3b:bc:e4:
ef:53:df:dd:87:cf:2a:fa:c0:56:2c:60:0a:7f:89:
77:5b:33:84:21:14:31:49:8d:e9:f1:3e:f4:f7:82:
7b:0d:52:1c:34:bf:27:cd:52:b2:08:65:9d:b0:45:
b1:88:24:39:65:8d:c6:ff:ce:33:83:fc:f5:e7:00:
a8:43:64:92:b9:b8:22:db:79:76:b7:fa:3a:b9:89:
b9:63:21:c5:1e:a2:3b:97:9e:d7:6b:25:7e:ff:1b:
86:ac:c1:c3:bf:8d:4d:37:1e:fa:d6:8c:3c:eb:b8:
ed:40:34:c7:45:1f:5e:d5:f4:5a:54:d7:59:3d:c0:
40:22:64:5c:3f:a4:8f:58:b8:b1:5e:1e:4b:67:01:
4d:b8:da:ca:1e:ea:90:76:70:b4:5e:5f:2e:21:42:
54:db:31:bd:ef:e3:72:1f:53:c4:88:1d:24:b8:53:
fd:d9:73:b1:ad:24:be:39:f1:a9:d0:ac:14:c9:57:
55:e1:87:4c:7c:67:f0:41:3a:62:d1:48:ff:4e:c3:
8a:f2:53:da:dc:04:33:3b:2a:3b:1d:49:33:b0:da:
f8:5a:fc:e6:60:47:c8:1d:83:d1:f7:6c:ba:45:d5:
5c:4d:ba:06:bf:20:a5:4a:be:e2:88:31:be:fc:d1:
9b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EA:40:95:B4:FE:72:D2:C9:C2:BF:56:3A:60:52:40:22:F5:CD:F7
X509v3 Authority Key Identifier:
keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e36302e3136342e302f32322d3332203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.60.164.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:76:9a:8f:c9:74:14:8f:95:4d:3e:30:31:76:8c:8f:af:65:
31:ed:b2:c1:fb:04:e1:28:71:9e:83:ac:a3:48:b1:01:76:30:
2b:13:cc:e6:42:77:77:2d:4c:23:d6:48:b1:55:06:a0:b2:99:
15:25:7b:e0:a5:ba:00:b5:0c:47:07:3a:7f:72:44:87:1a:49:
19:e5:3d:51:bb:dd:14:c6:98:f5:29:85:e0:68:e5:40:69:01:
81:df:6e:3c:4c:ab:d1:63:f7:c5:c1:c8:6c:05:9d:2a:be:6c:
58:a2:03:f2:28:d5:b7:71:98:35:67:8c:4d:3f:ce:99:ad:40:
8a:c2:fc:0c:6b:6b:26:fc:97:59:d7:8c:ed:c6:64:1b:25:dd:
7c:fa:eb:08:4c:0a:b6:a4:ca:df:c9:51:7c:3e:05:7d:fa:c8:
2e:7b:d1:2b:33:7d:f8:70:f8:d1:06:a1:25:bc:13:c0:d5:ce:
00:a9:32:b2:8d:44:44:ad:e4:52:19:7b:f4:bf:0d:bc:de:6a:
c8:cf:3c:df:8b:19:df:4d:79:8d:5b:17:15:51:43:54:86:cf:
c8:d9:ed:6d:83:b0:82:a4:a3:15:42:26:a9:65:db:3b:7f:6b:
9a:65:3d:1b:bb:d2:00:8b:b4:e9:4a:c6:ce:c7:91:2d:2d:8d:
d5:d9:14:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:41:11 2026 by rpki-client