
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3130332e3131362e39342e302f32342d3234203d3e20313337373938.roa
File: 3130332e3131362e39342e302f32342d3234203d3e20313337373938.roa (raw, json)
Hash identifier: CTEEIolxeEFxbcV2QU7eZmf13XfbhC8EVr+uwwVUjuY=
Subject key identifier: 28:FB:82:AF:62:4D:6F:1F:7D:30:88:F7:68:26:F3:70:4D:5D:CC:C4
Certificate issuer: /CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6
Certificate serial: 642DB94D21DC34C559176FC2F0FC21FC1D632D88
Authority key identifier: 45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3130332e3131362e39342e302f32342d3234203d3e20313337373938.roa
Signing time: Thu 16 Apr 2026 08:42:50 +0000
ROA not before: Thu 16 Apr 2026 08:37:50 +0000
ROA not after: Thu 15 Apr 2027 08:42:50 +0000
asID: 137798
IP address blocks: 103.116.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 07:27:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:2d:b9:4d:21:dc:34:c5:59:17:6f:c2:f0:fc:21:fc:1d:63:2d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6
Validity
Not Before: Apr 16 08:37:50 2026 GMT
Not After : Apr 15 08:42:50 2027 GMT
Subject: CN=28FB82AF624D6F1F7D3088F76826F3704D5DCCC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:95:c6:6e:a4:19:df:bb:cf:1e:52:69:8a:5f:
91:5d:66:5f:e0:59:54:de:5b:18:24:a7:2b:90:ce:
4d:bb:29:a5:5f:e6:3c:b5:2b:a1:24:d0:22:90:fc:
5f:70:b3:d8:e0:cf:cf:7f:fc:4c:ea:48:75:57:a5:
e2:7b:fc:dc:d2:c7:e9:f8:33:15:ec:a8:fd:c1:2e:
ce:d8:9d:9a:3a:ce:74:35:77:a9:ff:75:ff:7a:62:
8e:75:fb:ec:d4:6b:25:91:37:fc:f0:bf:d7:64:5f:
f9:f7:0d:ef:0f:6f:8e:b3:b5:eb:b8:1e:91:74:0a:
9f:7c:c4:3a:3b:44:7b:c5:3e:14:4a:8d:47:41:6d:
38:4f:dd:e5:76:e9:88:31:bc:8f:7a:7b:b6:25:d6:
56:1b:e5:30:3e:a2:44:0b:55:76:17:e9:29:19:d0:
9b:65:04:61:4a:32:55:31:b1:c3:17:08:2f:14:13:
3f:2a:88:6b:80:5c:23:e5:ae:42:d4:6d:35:6b:a5:
b9:43:73:73:9a:db:8a:5a:9b:f6:f9:c6:6b:16:e2:
ad:d0:71:c2:67:de:36:50:77:09:6f:5f:bc:65:41:
8f:ea:25:ba:61:ba:85:86:f6:c5:38:a5:dd:da:6b:
d7:85:c8:e2:fc:94:48:b9:49:02:f8:46:a7:19:e7:
74:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FB:82:AF:62:4D:6F:1F:7D:30:88:F7:68:26:F3:70:4D:5D:CC:C4
X509v3 Authority Key Identifier:
keyid:45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3130332e3131362e39342e302f32342d3234203d3e20313337373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.116.94.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:ed:55:9d:21:2b:e7:e1:4e:87:aa:40:f6:f8:65:f1:fa:31:
f1:b7:f1:3a:1b:20:ae:5d:94:75:eb:68:2f:5e:b9:d9:62:b4:
15:a4:76:c2:64:77:7e:ef:ac:ca:2c:3d:a4:8b:6f:ec:01:9a:
d5:8b:e8:64:f3:9b:07:69:65:76:c6:c7:b7:36:e1:c8:8a:22:
fa:1e:4d:0b:44:2f:cb:a4:9e:36:53:63:f3:04:94:54:cf:31:
5f:da:ba:11:bf:6a:2e:8c:cd:4d:42:49:83:0f:0b:25:4a:0f:
7e:46:0f:11:fb:f8:15:cf:ac:cd:30:73:38:c6:21:ea:f3:63:
a2:e3:33:9d:46:d1:b8:ee:1c:1a:fc:ca:8e:54:b5:d0:b3:6d:
a1:e7:3a:ac:dc:d9:ae:1d:54:c8:9f:35:e7:fa:06:a2:b6:eb:
6f:6c:68:37:a2:ae:1c:94:cd:09:56:80:d4:e0:17:a4:2f:30:
b0:42:9d:fd:82:53:37:23:a3:74:cd:b7:8e:d4:03:32:5e:e0:
3e:1c:d4:69:88:90:92:1a:8d:1d:bc:31:57:59:2f:54:8f:54:
bb:0a:9e:fa:c9:64:24:1d:71:51:a8:3b:b1:89:aa:7a:39:9b:
3c:87:c9:18:7f:11:82:41:9a:02:74:82:76:a4:dc:64:ce:66:
eb:2c:8b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:23:20 2026 by rpki-client