
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577400322/0/3130332e34342e3134342e302f32322d3232203d3e2030.roa
File: 3130332e34342e3134342e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier: klFN41A0uvAJdjRg1oKMM4/qQe8qoMbFRL2E1I1JvbY=
Subject key identifier: 7F:E1:00:D6:82:9D:6E:B0:1E:42:3F:B8:15:3D:C9:A2:ED:91:C6:5A
Certificate issuer: /CN=1133679B2C104A0446FA0C3764EEE246C5D21075
Certificate serial: 0553750B28D299F10D2DFABC3B829AFC2CABD38B
Authority key identifier: 11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/3130332e34342e3134342e302f32322d3232203d3e2030.roa
Signing time: Wed 15 Apr 2026 09:15:43 +0000
ROA not before: Wed 15 Apr 2026 09:10:43 +0000
ROA not after: Wed 14 Apr 2027 09:15:43 +0000
asID: 0
IP address blocks: 103.44.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 17:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:53:75:0b:28:d2:99:f1:0d:2d:fa:bc:3b:82:9a:fc:2c:ab:d3:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1133679B2C104A0446FA0C3764EEE246C5D21075
Validity
Not Before: Apr 15 09:10:43 2026 GMT
Not After : Apr 14 09:15:43 2027 GMT
Subject: CN=7FE100D6829D6EB01E423FB8153DC9A2ED91C65A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4e:70:7f:73:8d:0d:c9:5e:62:86:96:a0:1e:
58:9c:6e:46:0e:99:c3:ed:18:0c:a1:a1:fd:d2:1c:
06:00:68:24:28:61:68:bd:8a:cf:08:c4:c1:52:c6:
e8:ee:54:63:04:a2:ef:a8:b4:0a:39:d0:7d:c6:2a:
d6:dc:9a:14:f7:4c:20:4e:18:14:c0:ab:3e:ea:d0:
65:ce:59:a0:01:2a:3a:93:ec:d1:2d:8a:77:06:6a:
79:37:2c:5b:65:72:2b:80:c0:5e:70:6c:ba:68:da:
b9:0b:24:da:f9:cc:72:96:0f:df:ea:57:69:51:16:
31:b2:9c:dd:98:f8:dd:e4:85:a6:e1:da:7b:4b:5c:
dd:e3:f8:61:bb:67:82:1c:83:02:b6:ff:9e:25:00:
d0:e9:24:c0:f0:b0:bc:1f:93:ac:63:86:0c:22:21:
48:c1:ca:23:0a:c7:dd:74:34:c3:4f:44:82:43:06:
70:1c:f9:3c:3e:5d:d3:71:8a:eb:46:d8:81:1c:68:
d5:04:a8:a6:ad:ac:8b:c7:ba:4d:20:68:44:18:06:
94:4d:f6:09:be:7c:d3:b0:1e:56:b5:15:40:77:a4:
9d:8a:84:22:fe:77:bd:1b:bf:ef:4d:26:b0:29:02:
50:31:ae:27:8b:32:14:d4:af:ed:3f:fd:33:4f:30:
e5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E1:00:D6:82:9D:6E:B0:1E:42:3F:B8:15:3D:C9:A2:ED:91:C6:5A
X509v3 Authority Key Identifier:
keyid:11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/3130332e34342e3134342e302f32322d3232203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.44.144.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:cc:fa:55:43:93:34:7c:6d:52:3d:8d:e1:bc:5f:9f:8f:a4:
62:83:8b:8e:35:2b:d4:0e:70:09:f0:96:74:ed:8a:5d:37:48:
92:21:ee:dc:62:f0:b4:73:1f:b2:1e:fc:31:ba:99:ea:32:19:
e6:fd:c3:46:43:f4:21:ba:3f:e0:c9:13:13:b9:5a:c9:92:b0:
92:21:7c:d8:9e:d0:0b:ea:e7:98:0e:a0:f3:63:fb:89:9c:36:
ce:36:be:20:60:10:08:05:c4:fc:7f:0c:cc:c1:9a:a9:24:0a:
de:7d:ab:65:c1:7e:9b:bc:e2:fc:28:d6:49:06:09:b9:40:66:
3a:f9:15:9e:8c:c7:c6:98:3c:e5:1f:d9:64:f0:30:96:f9:78:
62:8c:6d:34:f7:ba:9d:8e:9c:43:e9:bd:57:68:e6:55:0d:56:
28:dc:8b:99:0b:37:dd:44:fe:41:f2:64:4a:b0:c0:09:6e:e6:
d4:4b:b5:7a:5e:15:8f:9a:79:c9:11:14:ac:5b:86:cd:0b:47:
1f:a8:01:02:26:60:9a:72:65:0e:d3:d9:bf:8c:68:24:26:e8:
54:57:81:f3:4b:a4:7a:2b:a1:b2:1a:48:26:55:f9:cc:89:bf:
25:84:b2:76:f4:6a:4d:88:8a:5c:f4:04:9b:fd:dd:ff:79:57:
25:1e:6e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:35:39 2026 by rpki-client