
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347388929/0/3130332e3135362e37382e302f32332d3233203d3e20313436383334.roa
File: 3130332e3135362e37382e302f32332d3233203d3e20313436383334.roa (raw, json)
Hash identifier: fu7L0rmKYwgHzfVKmHdDaBxA79W3IfTKnrKsSuayS2Y=
Subject key identifier: AB:60:7C:3F:4A:47:55:2B:DE:4C:80:A2:48:85:7F:A6:BA:8F:3B:AB
Certificate issuer: /CN=E23C4800CA452B1A8E6214923C01540E30830232
Certificate serial: 5EBCC106906F67A037FF6F91F10BE27A79335CA6
Authority key identifier: E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/3130332e3135362e37382e302f32332d3233203d3e20313436383334.roa
Signing time: Thu 16 Apr 2026 05:58:49 +0000
ROA not before: Thu 16 Apr 2026 05:53:49 +0000
ROA not after: Thu 15 Apr 2027 05:58:49 +0000
asID: 146834
IP address blocks: 103.156.78.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:bc:c1:06:90:6f:67:a0:37:ff:6f:91:f1:0b:e2:7a:79:33:5c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E23C4800CA452B1A8E6214923C01540E30830232
Validity
Not Before: Apr 16 05:53:49 2026 GMT
Not After : Apr 15 05:58:49 2027 GMT
Subject: CN=AB607C3F4A47552BDE4C80A248857FA6BA8F3BAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:cf:df:d0:31:19:0e:4c:e0:db:f8:3e:70:5c:
30:ec:e7:e6:18:a0:e7:9f:37:95:8b:7b:de:ad:43:
12:a8:0b:91:71:a1:b8:d5:74:88:a6:6a:c0:51:70:
9f:4a:d0:8d:8d:04:db:93:b4:36:26:ee:89:ff:d6:
59:b0:4b:a9:32:68:ec:78:83:98:7f:ba:35:dd:66:
bb:7f:e7:39:3e:d3:5c:f1:62:a8:06:30:65:ca:16:
c4:16:87:d6:71:12:3b:7e:83:8f:ed:4f:03:dc:a6:
99:c9:29:66:3f:e0:46:8b:2e:c5:30:53:6f:07:7e:
c4:7e:c3:1c:bc:18:67:1a:fc:65:dd:74:00:37:5a:
58:f0:77:78:c4:8e:b5:c9:3f:66:4b:74:10:62:62:
0b:cb:ce:6a:3a:7a:a8:ef:96:09:18:46:35:57:52:
e8:13:83:4d:44:1a:8a:95:f4:96:ec:58:31:bf:0a:
6e:e9:ee:48:8e:1e:73:8a:17:84:38:ab:c0:ab:b9:
b3:b0:66:51:d4:90:5d:20:aa:cd:23:18:01:ee:1e:
c1:91:a2:7b:0b:dc:1a:b5:43:d8:de:2a:a3:5a:f4:
4c:59:57:d5:c2:59:8a:67:ef:15:ce:2d:68:01:54:
c0:d9:21:bc:1f:f7:5b:6c:28:5b:8a:11:c5:40:3b:
46:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:60:7C:3F:4A:47:55:2B:DE:4C:80:A2:48:85:7F:A6:BA:8F:3B:AB
X509v3 Authority Key Identifier:
keyid:E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/3130332e3135362e37382e302f32332d3233203d3e20313436383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.156.78.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:f9:77:35:a5:03:8a:cf:6e:8d:21:f9:d9:64:1b:13:12:fb:
9a:19:f9:a4:a5:32:11:34:dd:52:66:83:30:bb:40:91:bf:ad:
22:f7:f7:86:0f:f9:0b:5d:42:ce:4a:7b:92:a3:db:5d:24:ad:
a1:cb:70:ee:57:5e:ea:7f:97:7e:7a:b3:d2:c6:26:79:06:93:
d7:eb:c6:1a:8d:5d:e7:8b:b1:57:41:ac:13:9b:8b:be:9c:b0:
cb:72:f3:0e:f4:7f:97:e3:b5:d6:09:d5:15:97:93:7c:a9:53:
b2:24:39:92:dc:ad:04:60:5d:0b:1a:db:9c:c0:36:84:97:0c:
4a:b2:3c:b6:a1:9f:3a:61:51:96:4c:76:8f:94:b1:fe:f7:9c:
a0:aa:e1:17:93:1d:48:25:b4:de:02:0d:05:70:a3:d4:3a:d8:
45:4d:d0:f7:4e:a5:9b:76:7a:47:a3:72:48:7d:a3:ef:a3:3f:
7f:ce:de:05:5d:57:d7:e7:2d:ba:9d:08:88:93:12:f7:be:65:
71:8d:17:70:8b:88:48:ab:b8:8b:54:61:8c:7a:d5:e3:bd:2f:
c0:75:67:d9:9d:6b:f2:cf:ec:12:a4:56:b2:db:5e:44:24:4e:
32:91:39:e7:98:67:96:ac:22:11:dc:e9:bc:31:68:6c:fd:d9:
c8:8b:a5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:55:32 2026 by rpki-client