
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3130332e392e32342e302f32322d3232203d3e20313531323936.roa
File: 3130332e392e32342e302f32322d3232203d3e20313531323936.roa (raw, json)
Hash identifier: pcCIdHW+Wr27+f4tlmgbNg3rAcusLNN5epai2nB9kY4=
Subject key identifier: 24:14:69:10:71:0A:6D:C0:75:7A:5E:2F:97:8C:DA:77:39:D2:3A:E2
Certificate issuer: /CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Certificate serial: 47092470679AAD030F1BFF231478771F0241D262
Authority key identifier: 79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3130332e392e32342e302f32322d3232203d3e20313531323936.roa
Signing time: Fri 17 Apr 2026 07:59:10 +0000
ROA not before: Fri 17 Apr 2026 07:54:10 +0000
ROA not after: Fri 16 Apr 2027 07:59:10 +0000
asID: 151296
IP address blocks: 103.9.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:09:24:70:67:9a:ad:03:0f:1b:ff:23:14:78:77:1f:02:41:d2:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Validity
Not Before: Apr 17 07:54:10 2026 GMT
Not After : Apr 16 07:59:10 2027 GMT
Subject: CN=24146910710A6DC0757A5E2F978CDA7739D23AE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:15:a4:5e:27:be:fc:f6:28:b9:35:3b:da:8b:
26:23:99:26:96:16:f5:c6:e2:46:1c:0c:cb:8c:c0:
94:5e:80:9d:7e:22:6c:48:48:22:3a:6c:97:f6:e1:
ff:97:9c:db:88:fb:5b:dc:bb:e3:7a:d2:74:6e:15:
cd:23:cd:c4:ca:cd:d6:f7:e5:88:a1:1a:66:72:ab:
c4:00:67:ab:9e:00:99:c3:91:44:b6:18:76:5e:93:
bb:5f:6b:c3:bf:79:71:10:92:59:5e:71:7d:d6:78:
49:ed:02:2b:78:50:f1:18:d6:73:5b:dc:15:d8:7e:
81:e8:14:ef:91:95:c7:3e:fd:ac:1b:e4:e2:57:03:
ef:ad:d4:c7:05:7d:3b:5e:33:02:ca:84:73:83:ad:
5e:c8:bb:75:f2:e3:8e:2c:42:10:ae:db:92:f4:ce:
ee:b2:36:d0:e8:e2:81:7f:3c:87:b9:8a:39:15:39:
4c:56:74:f6:95:cf:e2:cd:22:0e:e0:45:88:dc:52:
45:e4:42:49:c1:c8:99:56:c9:07:50:cb:05:63:a3:
d5:66:f1:5a:c0:b9:c7:7a:01:6a:c0:31:99:db:90:
9a:3a:31:6e:f1:a9:38:0d:e5:59:d5:61:c8:83:64:
42:6a:36:4f:01:a6:f2:42:cc:56:fc:8e:6b:69:ef:
73:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:14:69:10:71:0A:6D:C0:75:7A:5E:2F:97:8C:DA:77:39:D2:3A:E2
X509v3 Authority Key Identifier:
keyid:79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3130332e392e32342e302f32322d3232203d3e20313531323936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.9.24.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:5b:08:f7:a2:38:62:c3:58:98:19:1e:28:c1:05:33:ad:88:
49:9b:2e:a9:eb:77:91:5c:fa:77:0f:a3:d2:56:13:71:6a:a5:
6b:00:da:bb:61:4c:1f:b9:47:b5:e0:4c:7b:f3:27:0b:fe:01:
0e:d4:8f:4b:93:61:aa:c8:1d:c7:c4:4b:4f:bc:63:a9:17:de:
ce:6c:83:f1:df:0f:d5:a4:f6:b9:73:85:05:43:02:f6:95:e5:
80:8a:cd:21:56:94:a3:66:4f:03:8d:2a:a2:a5:be:51:ea:46:
2b:75:a6:1e:7a:56:d8:36:52:49:f5:63:67:8e:4b:ab:4c:7e:
6c:bf:67:fb:dd:b3:9d:04:97:56:b7:f7:b9:bb:a3:59:8d:53:
06:3f:ba:45:a6:5b:0a:91:fa:85:f9:f8:2d:55:66:b2:ec:34:
bb:ce:c1:d2:fa:84:db:36:5e:3c:a0:bd:c4:24:83:a7:ca:1d:
2c:af:f0:9e:8c:f6:f1:f3:9d:b0:3c:c2:e4:68:e7:5f:6c:34:
fb:a1:c3:6e:74:24:a3:e4:80:2a:56:e8:3c:40:24:5a:ee:c1:
72:31:7d:75:2d:9d:96:7e:0b:4c:a2:90:67:b3:e3:ce:26:e3:
03:5a:1a:c7:5b:c1:79:b2:be:14:b5:3a:fc:68:93:3e:08:cf:
20:54:f1:15
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIURwkkcGearQMPG/8jFHh3HwJB0mIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlBQ0NBRDQ0OTE1MjlFREEzODE3MEYzNEE1ODg0RDJB
MEY0MzJCRjAeFw0yNjA0MTcwNzU0MTBaFw0yNzA0MTYwNzU5MTBaMDMxMTAvBgNV
BAMTKDI0MTQ2OTEwNzEwQTZEQzA3NTdBNUUyRjk3OENEQTc3MzlEMjNBRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1FaReJ7789ii5NTvaiyYjmSaW
FvXG4kYcDMuMwJRegJ1+ImxISCI6bJf24f+XnNuI+1vcu+N60nRuFc0jzcTKzdb3
5YihGmZyq8QAZ6ueAJnDkUS2GHZek7tfa8O/eXEQkllecX3WeEntAit4UPEY1nNb
3BXYfoHoFO+Rlcc+/awb5OJXA++t1McFfTteMwLKhHODrV7Iu3Xy444sQhCu25L0
zu6yNtDo4oF/PIe5ijkVOUxWdPaVz+LNIg7gRYjcUkXkQknByJlWyQdQywVjo9Vm
8VrAucd6AWrAMZnbkJo6MW7xqTgN5VnVYciDZEJqNk8BpvJCzFb8jmtp73OFAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUJBRpEHEKbcB1el4vl4zadznSOuIwHwYDVR0j
BBgwFoAUeazK1EkVKe2jgXDzSliE0qD0Mr8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDg4MTAyNS8wLzc5QUNDQUQ0NDkxNTI5RURBMzgxNzBGMzRBNTg4
NEQyQTBGNDMyQkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzlBQ0NBRDQ0OTE1MjlFREEzODE3MEYzNEE1ODg0RDJBMEY0MzJCRi5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0ODgxMDI1LzAvMzEzMDMzMmUzOTJl
MzIzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzUzMTMyMzkzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmcJGDANBgkqhkiG9w0BAQsFAAOCAQEAnVsI96I4YsNYmBkeKMEFM62ISZsu
qet3kVz6dw+j0lYTcWqlawDau2FMH7lHteBMe/MnC/4BDtSPS5Nhqsgdx8RLT7xj
qRfezmyD8d8P1aT2uXOFBUMC9pXlgIrNIVaUo2ZPA40qoqW+UepGK3WmHnpW2DZS
SfVjZ45Lq0x+bL9n+92znQSXVrf3ubujWY1TBj+6RaZbCpH6hfn4LVVmsuw0u87B
0vqE2zZePKC9xCSDp8odLK/wnoz28fOdsDzC5GjnX2w0+6HDbnQko+SAKlboPEAk
Wu7BcjF9dS2dln4LTKKQZ7PjzibjA1oax1vBebK+FLU6/GiTPgjPIFTxFQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:32:23 2026 by rpki-client