
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347388929/0/3130332e3135362e37382e302f32332d3233203d3e203231383539.roa
File: 3130332e3135362e37382e302f32332d3233203d3e203231383539.roa (raw, json)
Hash identifier: guHCeGNcndypZ9RT0It28OXAIuLz9aYDjgK5y7y4NYE=
Subject key identifier: 9E:17:DD:F4:4B:B6:BA:B3:C9:FC:78:95:8A:46:37:15:9A:3E:8E:0C
Certificate issuer: /CN=E23C4800CA452B1A8E6214923C01540E30830232
Certificate serial: 5298A2D571ABA1C8FD309D863AF81E8FDBD4F1AB
Authority key identifier: E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/3130332e3135362e37382e302f32332d3233203d3e203231383539.roa
Signing time: Thu 16 Apr 2026 05:58:49 +0000
ROA not before: Thu 16 Apr 2026 05:53:49 +0000
ROA not after: Thu 15 Apr 2027 05:58:49 +0000
asID: 21859
IP address blocks: 103.156.78.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:98:a2:d5:71:ab:a1:c8:fd:30:9d:86:3a:f8:1e:8f:db:d4:f1:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E23C4800CA452B1A8E6214923C01540E30830232
Validity
Not Before: Apr 16 05:53:49 2026 GMT
Not After : Apr 15 05:58:49 2027 GMT
Subject: CN=9E17DDF44BB6BAB3C9FC78958A4637159A3E8E0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f5:93:21:da:bd:30:18:ef:7a:52:03:e6:50:
f4:be:77:e6:8c:3e:56:47:25:47:7c:22:9d:24:02:
0c:58:94:75:69:fc:76:f3:27:31:2d:27:59:d4:41:
82:62:70:75:9a:05:39:19:56:72:c8:36:58:66:fc:
08:39:40:75:8e:d5:fe:3d:2d:a4:16:3d:fc:65:8a:
59:ae:e5:5f:04:76:13:25:af:0c:af:7b:be:21:29:
de:a1:32:7c:b3:24:86:37:99:0b:99:41:9c:55:b3:
16:ef:08:bb:69:6e:f3:90:7f:3b:fa:bc:bc:54:72:
25:5f:a0:ed:af:86:98:59:a3:78:02:c4:89:cd:97:
5d:c0:3a:29:92:09:8b:75:4b:a2:c3:7c:38:f7:23:
54:79:5b:e3:8e:99:0c:f4:ff:59:ba:11:ed:70:fb:
ab:22:ce:d9:c7:f8:f9:cc:6c:77:bb:0d:05:74:cb:
66:b4:b6:89:42:e0:7c:44:11:b3:bf:36:3b:68:09:
9f:8e:73:ff:08:7f:6d:f9:c5:13:7e:7b:b5:27:6a:
66:7d:77:57:9e:e5:08:91:1f:6b:ed:04:47:9b:95:
f3:7a:3e:97:f1:f3:a8:84:95:13:45:ee:b6:d5:2d:
4c:b3:50:1b:a3:38:cc:27:ed:8d:b5:fe:ac:4e:93:
c6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:17:DD:F4:4B:B6:BA:B3:C9:FC:78:95:8A:46:37:15:9A:3E:8E:0C
X509v3 Authority Key Identifier:
keyid:E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/3130332e3135362e37382e302f32332d3233203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.156.78.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:89:9e:ed:d5:07:5d:99:fe:00:e1:16:cc:d8:00:35:20:a0:
44:de:f8:02:11:99:3f:81:11:f7:29:92:1f:5d:71:f3:94:73:
a3:a1:c9:5a:62:ce:c3:d4:a5:65:26:a1:83:6a:9c:24:f3:7d:
81:c4:87:0a:76:0c:07:ad:3b:51:28:fd:71:56:1e:c7:9d:57:
a2:76:14:b8:62:51:94:d8:01:80:45:20:02:68:16:91:f0:4f:
c5:89:f7:d4:c3:76:99:a1:7d:ec:89:64:80:54:b2:3c:3e:38:
85:bb:d7:8f:d7:bb:68:ee:04:a3:9c:ae:e0:2a:03:94:fc:a8:
b3:6f:bc:f5:82:bc:1f:1d:d0:4a:6a:06:10:ee:40:af:9a:30:
9f:ba:12:13:8a:e0:31:18:de:5b:46:d3:8a:57:97:f6:a1:77:
5f:f2:c8:fb:46:a6:74:78:b1:3a:26:9b:1c:ec:f0:b8:d5:d6:
c3:39:22:25:16:f0:bb:aa:4b:ef:5b:f2:ec:d2:84:df:f7:67:
52:b8:80:06:23:f3:7e:04:49:c4:1b:35:0f:8e:8f:18:ce:39:
51:99:19:60:5e:55:74:fc:12:87:31:cc:be:97:57:59:66:cd:
76:33:22:90:00:ce:fd:0f:22:0a:d3:5b:49:96:ab:13:03:09:
dd:b2:d5:ef
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 04:55:31 2026 by rpki-client