
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3130332e37372e37332e302f32342d3234203d3e203633363331.roa
File: 3130332e37372e37332e302f32342d3234203d3e203633363331.roa (raw, json)
Hash identifier: qzRlWsrI6PetcGa/KoRszsGPl8m2KxKVGBHbcN8k8R8=
Subject key identifier: EE:14:6F:57:90:23:A7:A8:94:23:77:4E:23:1A:62:CD:8A:5A:77:EA
Certificate issuer: /CN=D9EB5C6DC17682949F5243587DA38740C3EEA953
Certificate serial: 2967A5992AF60ACED398048DDC918BFEF8CEA7A9
Authority key identifier: D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3130332e37372e37332e302f32342d3234203d3e203633363331.roa
Signing time: Thu 16 Apr 2026 07:09:23 +0000
ROA not before: Thu 16 Apr 2026 07:04:23 +0000
ROA not after: Thu 15 Apr 2027 07:09:23 +0000
asID: 63631
IP address blocks: 103.77.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 08:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:67:a5:99:2a:f6:0a:ce:d3:98:04:8d:dc:91:8b:fe:f8:ce:a7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9EB5C6DC17682949F5243587DA38740C3EEA953
Validity
Not Before: Apr 16 07:04:23 2026 GMT
Not After : Apr 15 07:09:23 2027 GMT
Subject: CN=EE146F579023A7A89423774E231A62CD8A5A77EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d3:af:57:ee:4b:4b:bb:c1:b3:15:06:19:4b:
2a:f9:b7:46:32:7a:5d:06:d3:5d:d9:19:b0:95:52:
a6:ba:aa:fb:75:70:bc:d7:69:4b:57:39:72:cb:4a:
8a:ee:68:a5:a2:16:ad:cf:71:ed:a1:68:ad:12:ee:
44:de:2f:28:48:5f:6a:3f:c6:a1:89:05:df:7c:f9:
5c:8b:7d:2b:91:d7:25:68:da:23:1e:37:cf:b5:63:
bf:37:0a:1e:a6:f9:69:d4:a3:b4:0c:69:45:3b:c5:
6e:53:64:86:bd:13:85:cc:c9:c5:eb:31:85:18:62:
66:47:41:ee:83:9f:49:a3:94:c0:ba:f3:fb:93:f6:
ca:f2:85:d5:ac:c8:b5:5d:86:cc:91:67:b4:74:68:
0d:2b:cd:57:3d:79:db:60:ac:c5:0b:50:01:c1:d2:
b6:3b:71:1f:d2:7a:b9:62:fa:02:c0:ec:67:07:e4:
15:0b:11:b2:68:34:8c:2d:03:dc:fa:e6:1b:25:89:
4f:63:c3:d7:dc:ae:f1:ee:c3:d8:c7:05:d5:11:69:
75:bd:c6:18:93:6c:05:83:e9:c2:cb:fc:fa:65:93:
a6:f3:b4:9b:ad:c9:8c:01:17:f5:bb:85:99:5f:bc:
af:4d:11:cf:e9:36:47:98:af:e7:29:a5:9d:8b:9c:
46:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:14:6F:57:90:23:A7:A8:94:23:77:4E:23:1A:62:CD:8A:5A:77:EA
X509v3 Authority Key Identifier:
keyid:D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3130332e37372e37332e302f32342d3234203d3e203633363331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.77.73.0/24
Signature Algorithm: sha256WithRSAEncryption
46:9b:16:0d:ab:c8:f7:8b:6a:64:d0:70:af:f4:9b:db:1b:3f:
28:67:78:a1:ea:44:31:65:ab:6e:0a:e8:16:f4:c2:7b:60:19:
8d:8b:12:9f:4c:3e:cd:c8:f3:99:33:39:61:f7:8c:ce:65:c4:
d7:18:5f:6e:a7:7c:a7:e9:d3:79:6b:79:35:cb:56:ff:16:12:
73:c1:b1:56:22:00:13:54:e9:8b:38:2c:0c:5d:b6:93:3d:3d:
f2:a4:22:ed:74:fd:9e:28:35:e0:4c:fb:3e:1b:e3:5c:fc:14:
6d:8c:77:d2:df:4f:86:ae:72:4b:46:9e:61:6c:98:76:f6:17:
ed:68:14:f1:ba:cb:65:f9:3e:95:e2:c4:3e:7c:48:f7:fc:4e:
96:72:00:ec:49:0b:4b:9c:7f:84:e8:42:42:a6:ad:26:c0:37:
77:5e:26:90:1a:f1:dd:21:d1:ba:2b:0c:d3:d8:d4:22:1e:a6:
a2:2f:84:b0:f6:f0:14:2a:6d:13:f9:74:ee:32:a5:0f:85:12:
e1:e5:4d:ec:e4:ef:07:a9:e9:76:db:81:ec:d3:c8:9d:76:02:
5f:6e:88:ab:c8:7c:6b:ce:13:d8:b2:f8:ae:8e:f4:8c:b3:e2:
47:28:2f:a6:34:c5:6b:52:da:55:f9:e6:45:d4:8f:30:ee:1e:
6c:3f:23:eb
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUKWelmSr2Cs7TmASN3JGL/vjOp6kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDlFQjVDNkRDMTc2ODI5NDlGNTI0MzU4N0RBMzg3NDBD
M0VFQTk1MzAeFw0yNjA0MTYwNzA0MjNaFw0yNzA0MTUwNzA5MjNaMDMxMTAvBgNV
BAMTKEVFMTQ2RjU3OTAyM0E3QTg5NDIzNzc0RTIzMUE2MkNEOEE1QTc3RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs069X7ktLu8GzFQYZSyr5t0Yy
el0G013ZGbCVUqa6qvt1cLzXaUtXOXLLSoruaKWiFq3Pce2haK0S7kTeLyhIX2o/
xqGJBd98+VyLfSuR1yVo2iMeN8+1Y783Ch6m+WnUo7QMaUU7xW5TZIa9E4XMycXr
MYUYYmZHQe6Dn0mjlMC68/uT9sryhdWsyLVdhsyRZ7R0aA0rzVc9edtgrMULUAHB
0rY7cR/Serli+gLA7GcH5BULEbJoNIwtA9z65hsliU9jw9fcrvHuw9jHBdURaXW9
xhiTbAWD6cLL/Pplk6bztJutyYwBF/W7hZlfvK9NEc/pNkeYr+cppZ2LnEbVAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU7hRvV5Ajp6iUI3dOIxpizYpad+owHwYDVR0j
BBgwFoAU2etcbcF2gpSfUkNYfaOHQMPuqVMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MjMzMDM0Njg2NDY0MS8wL0Q5RUI1QzZEQzE3NjgyOTQ5RjUyNDM1ODdEQTM4
NzQwQzNFRUE5NTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRDlFQjVDNkRDMTc2ODI5NDlGNTI0MzU4N0RBMzg3NDBDM0VFQTk1My5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTgyMzMwMzQ2ODY0NjQxLzAvMzEzMDMzMmUzNzM3
MmUzNzMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzMzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGdNSTANBgkqhkiG9w0BAQsFAAOCAQEARpsWDavI94tqZNBwr/Sb2xs/KGd4
oepEMWWrbgroFvTCe2AZjYsSn0w+zcjzmTM5YfeMzmXE1xhfbqd8p+nTeWt5NctW
/xYSc8GxViIAE1TpizgsDF22kz098qQi7XT9nig14Ez7PhvjXPwUbYx30t9Phq5y
S0aeYWyYdvYX7WgU8brLZfk+leLEPnxI9/xOlnIA7EkLS5x/hOhCQqatJsA3d14m
kBrx3SHRuisM09jUIh6moi+EsPbwFCptE/l07jKlD4US4eVN7OTvB6npdtuB7NPI
nXYCX26Iq8h8a84T2LL4ro70jLPiRygvpjTFa1LaVfnmRdSPMO4ebD8j6w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:56:16 2026 by rpki-client