
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577400322/0/3130332e34312e3131362e302f32322d3232203d3e203535393931.roa
File: 3130332e34312e3131362e302f32322d3232203d3e203535393931.roa (raw, json)
Hash identifier: AG763JgzLnCax1h82iKqPfAHIhWbgVBR2u2s+SqTVuQ=
Subject key identifier: BC:84:16:1C:7B:92:D5:5A:DA:45:A5:AD:D7:4B:70:5B:DA:7F:09:F2
Certificate issuer: /CN=1133679B2C104A0446FA0C3764EEE246C5D21075
Certificate serial: 4DE5B8A825C388CD932281E05A473AACBEBDE2A7
Authority key identifier: 11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/3130332e34312e3131362e302f32322d3232203d3e203535393931.roa
Signing time: Wed 15 Apr 2026 08:21:45 +0000
ROA not before: Wed 15 Apr 2026 08:16:45 +0000
ROA not after: Wed 14 Apr 2027 08:21:45 +0000
asID: 55991
IP address blocks: 103.41.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:e5:b8:a8:25:c3:88:cd:93:22:81:e0:5a:47:3a:ac:be:bd:e2:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1133679B2C104A0446FA0C3764EEE246C5D21075
Validity
Not Before: Apr 15 08:16:45 2026 GMT
Not After : Apr 14 08:21:45 2027 GMT
Subject: CN=BC84161C7B92D55ADA45A5ADD74B705BDA7F09F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a7:6c:b6:cf:81:b6:b9:43:6f:59:c5:ae:b4:
9b:88:cb:6f:65:03:1b:15:c5:97:91:d8:e6:bd:ba:
7f:7f:2e:78:0c:d8:6c:f0:cd:82:6a:52:c7:a4:11:
04:de:e5:17:7e:a2:c3:43:f9:23:cf:e2:a0:f0:f0:
1b:d5:b3:fc:d5:94:12:33:2f:0e:1a:95:51:5b:6d:
9f:b7:d1:28:9b:7e:40:5c:96:c2:8e:21:58:89:d3:
bf:64:f0:2f:b0:ff:e7:3a:02:b1:ef:f3:b1:71:76:
d9:28:f0:95:66:5a:e8:b9:7f:a9:c1:7a:ff:5f:81:
ba:f6:18:04:5f:5e:51:47:a2:c5:04:39:c8:c8:52:
94:78:22:7c:c8:24:a7:9c:bf:86:d1:1c:2f:64:e9:
eb:a8:dd:f8:3b:7e:78:2d:97:bc:79:c9:9d:76:a7:
17:f1:00:1b:4c:8c:99:1d:40:52:df:8e:da:5e:3c:
d1:cf:0e:e7:94:78:0d:b2:d2:57:cd:e4:f6:ef:ab:
3d:d0:69:a4:c4:d1:ae:2b:9e:c9:f9:bb:52:01:b9:
3b:2e:3c:ef:8a:8c:f4:b9:bb:e0:64:0f:80:45:c7:
5d:1a:ad:2b:8a:ca:ce:9f:17:ff:66:32:e0:1d:5e:
6e:3e:fc:25:2b:38:11:d8:e5:9b:46:f9:a1:71:98:
74:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:84:16:1C:7B:92:D5:5A:DA:45:A5:AD:D7:4B:70:5B:DA:7F:09:F2
X509v3 Authority Key Identifier:
keyid:11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/3130332e34312e3131362e302f32322d3232203d3e203535393931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.41.116.0/22
Signature Algorithm: sha256WithRSAEncryption
16:5d:0f:09:18:af:d4:f9:8b:f0:71:25:25:7b:6c:92:d3:bf:
8d:7f:73:17:46:9d:50:53:b4:03:b1:99:b4:14:8a:21:bf:a3:
58:2a:4f:c5:ae:52:a0:00:63:62:4e:87:fb:88:fd:b8:03:44:
4e:53:c8:15:7c:2d:e4:14:e2:4a:ed:3a:70:95:d4:d8:73:1b:
53:d0:36:76:3c:7f:15:fa:df:e8:70:e8:fc:5d:c9:5d:3f:5f:
3f:bb:bc:d8:9c:fd:f6:75:65:87:af:c2:ee:b8:f0:57:6c:38:
bb:e2:b2:a5:93:bd:82:93:72:08:5b:10:f1:aa:f3:65:de:9e:
ce:c3:85:23:5a:e3:fc:34:b7:f7:37:9b:7a:ba:67:ab:a2:3c:
82:95:dd:56:cb:d8:e4:05:72:cd:7c:7f:0e:62:40:0b:50:66:
2d:d3:52:1b:2e:af:74:70:de:b8:1e:9e:bb:a0:2a:e0:15:0d:
dc:bb:2b:3d:41:55:03:ac:4e:8b:23:a2:df:da:2c:aa:86:ab:
a2:94:e3:95:dc:be:18:1b:2f:34:21:e3:06:d2:75:10:ea:a0:
1b:98:77:e5:f1:58:64:43:52:54:26:0b:80:6b:11:e4:67:39:
52:7d:f8:45:c7:af:15:23:b4:53:98:c6:4b:a2:de:41:0f:c9:
e3:62:df:7f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:09:49 2026 by rpki-client