
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3130332e392e3130382e302f32322d3232203d3e20313531323936.roa
File: 3130332e392e3130382e302f32322d3232203d3e20313531323936.roa (raw, json)
Hash identifier: BQkj9JY42h/4Ktqm5PZu183HmciBKbXBVRuupkHRF58=
Subject key identifier: EC:50:8F:15:55:1E:21:B3:45:BA:8E:5D:B7:C3:0E:05:06:03:9B:07
Certificate issuer: /CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Certificate serial: 34C3A5FEE8AD1E535BF9ADD01E9ED2ACCB7C8F8B
Authority key identifier: 79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3130332e392e3130382e302f32322d3232203d3e20313531323936.roa
Signing time: Fri 17 Apr 2026 07:59:10 +0000
ROA not before: Fri 17 Apr 2026 07:54:10 +0000
ROA not after: Fri 16 Apr 2027 07:59:10 +0000
asID: 151296
IP address blocks: 103.9.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:c3:a5:fe:e8:ad:1e:53:5b:f9:ad:d0:1e:9e:d2:ac:cb:7c:8f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Validity
Not Before: Apr 17 07:54:10 2026 GMT
Not After : Apr 16 07:59:10 2027 GMT
Subject: CN=EC508F15551E21B345BA8E5DB7C30E0506039B07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a5:cd:18:6d:ef:05:4a:d0:95:ab:4a:85:48:
06:29:95:79:c5:21:c6:e0:ff:36:b7:72:ca:78:a1:
87:7f:ad:b9:89:41:5e:f3:9a:e2:4c:61:97:ee:7f:
0f:7d:56:bc:c4:4a:38:d3:8e:44:4c:29:59:6c:eb:
28:8d:bc:eb:fa:0e:a6:e9:6e:14:25:53:de:95:a1:
08:09:26:50:55:b5:ac:9c:67:f3:cb:36:6b:77:fc:
af:55:53:eb:0e:75:f0:c1:86:cd:95:cb:4f:92:2e:
b8:fe:94:6d:d1:f5:32:d9:3f:99:39:11:62:71:85:
2a:69:36:95:1a:1b:a1:0a:99:88:fa:77:b2:31:1b:
a9:72:d8:1b:c9:13:8e:94:84:04:b9:cd:2d:e1:62:
09:c8:27:12:06:06:f5:7c:d5:61:2f:9e:aa:03:37:
7f:1c:fa:20:8b:3e:47:2f:f4:fe:a2:54:db:3b:46:
59:54:47:75:4f:72:c2:cf:8b:ad:26:d7:82:02:36:
56:15:04:a4:13:20:37:6d:74:da:e3:44:e5:21:16:
f2:d4:1f:fa:4a:a8:2d:04:9c:f4:1a:9d:81:2e:d4:
e2:8d:72:be:ce:e5:8f:53:be:b0:ed:6b:05:2e:aa:
56:1c:45:9b:5b:59:3b:9b:13:df:49:d2:1f:76:37:
c6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:50:8F:15:55:1E:21:B3:45:BA:8E:5D:B7:C3:0E:05:06:03:9B:07
X509v3 Authority Key Identifier:
keyid:79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3130332e392e3130382e302f32322d3232203d3e20313531323936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.9.108.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:c3:3a:58:c7:2f:9c:f0:23:7d:d8:86:cf:f4:b3:0d:c2:25:
5b:4c:f8:38:ba:39:51:2e:4b:9c:3b:e6:41:be:6e:06:70:4e:
3a:cf:7f:d0:24:0b:ce:7d:80:ca:b7:29:52:a5:0f:ed:93:fc:
f2:e6:9e:c4:31:45:0c:2c:b9:bd:fe:f3:54:b9:91:55:e7:c4:
e6:d0:a3:0c:af:1b:49:91:70:a2:02:dc:81:36:17:ed:9b:98:
07:61:ac:a9:14:bf:4c:9e:ed:53:29:28:2e:7d:13:2b:12:d6:
ce:f7:d3:ae:73:78:09:32:7b:5c:24:72:1e:ab:ca:5e:17:f9:
06:e7:69:59:dd:d3:b3:54:38:9e:0a:bd:d7:ad:06:47:2b:01:
02:df:3c:20:cc:7a:db:aa:70:46:f7:fb:74:6a:93:aa:fd:b7:
0a:fa:61:8f:4b:e8:34:91:a2:c9:b9:13:c6:b6:62:df:84:28:
47:27:37:c5:07:d0:b6:03:24:47:55:43:82:cb:7a:9d:c1:16:
79:c0:9d:8f:03:e6:48:3a:4a:4f:ba:65:e3:f8:f2:78:ef:a8:
75:23:7e:56:f0:f4:e9:5e:80:e4:91:f1:a5:86:60:08:8c:fe:
eb:cf:a2:00:f5:0f:bd:6d:bc:0d:c7:33:ed:83:cd:fa:0c:84:
a2:ff:79:29
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:32:22 2026 by rpki-client