
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577400322/0/3130332e35362e3130302e302f32322d3232203d3e203535393931.roa
File: 3130332e35362e3130302e302f32322d3232203d3e203535393931.roa (raw, json)
Hash identifier: U00Rs/DfaBM8oQSZxv8Kvu4Q3MPtjO43KKG0d8r3TTQ=
Subject key identifier: E5:83:8D:E1:BD:CB:34:8B:35:F8:90:FD:3E:58:8C:33:D0:E0:CF:C3
Certificate issuer: /CN=1133679B2C104A0446FA0C3764EEE246C5D21075
Certificate serial: 446E9A67056916931B8013490B04C202DE683D1A
Authority key identifier: 11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/3130332e35362e3130302e302f32322d3232203d3e203535393931.roa
Signing time: Wed 15 Apr 2026 08:21:45 +0000
ROA not before: Wed 15 Apr 2026 08:16:45 +0000
ROA not after: Wed 14 Apr 2027 08:21:45 +0000
asID: 55991
IP address blocks: 103.56.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 20:43:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:6e:9a:67:05:69:16:93:1b:80:13:49:0b:04:c2:02:de:68:3d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1133679B2C104A0446FA0C3764EEE246C5D21075
Validity
Not Before: Apr 15 08:16:45 2026 GMT
Not After : Apr 14 08:21:45 2027 GMT
Subject: CN=E5838DE1BDCB348B35F890FD3E588C33D0E0CFC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:28:a2:85:9a:6b:9b:cf:b1:a9:4a:25:a9:ec:
87:80:95:c1:a9:35:5a:5c:c5:05:6b:53:cb:df:4e:
90:43:35:c8:f5:35:f0:c5:12:c8:5c:59:10:50:0c:
b5:bd:cc:7c:c1:b4:7b:3f:7a:b2:ee:26:56:e9:27:
80:ea:06:ed:65:c6:e5:c0:5d:62:ea:ae:d0:c6:62:
ef:ac:9c:ea:f2:54:e8:3b:93:a3:6e:b6:50:92:d7:
ed:48:17:b8:95:f3:7c:ca:4e:d8:88:1a:4d:1c:de:
b8:b6:3f:09:a1:19:eb:20:08:70:5e:72:ed:55:c6:
22:6f:d4:bb:d7:32:63:79:53:4b:09:ed:6f:5c:a4:
f6:b9:2b:7b:b3:5b:7f:9d:1e:05:2b:bc:84:5e:bf:
f3:ec:f3:17:6f:e3:43:56:dd:5c:cd:8a:ac:4d:e9:
e2:1b:46:b6:69:3b:99:11:34:7b:e1:1f:2a:40:62:
5e:30:bd:8c:6e:9d:09:e5:14:29:e0:8a:93:3d:8a:
9e:83:a4:45:0e:62:6c:87:79:d2:a6:5f:c9:1a:59:
79:91:a0:74:04:d2:56:46:74:cd:9b:1e:39:4a:69:
d6:74:88:d1:9e:01:9a:8b:5a:83:24:03:c7:0a:98:
79:35:fc:70:39:92:a4:5c:51:89:7d:47:ad:09:55:
a4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:83:8D:E1:BD:CB:34:8B:35:F8:90:FD:3E:58:8C:33:D0:E0:CF:C3
X509v3 Authority Key Identifier:
keyid:11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/3130332e35362e3130302e302f32322d3232203d3e203535393931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.56.100.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:ad:19:28:60:03:3a:79:2c:ea:20:86:28:88:b2:3b:d8:5e:
4f:ac:0f:10:cb:d1:a1:0c:11:dc:fa:ac:7d:14:6e:9a:b4:ab:
b8:7f:af:8a:52:23:52:95:83:a8:11:ce:9d:3d:1a:a0:7f:dd:
01:be:e5:10:ae:ba:26:81:c1:76:65:dd:c0:93:7a:5e:3e:f7:
05:db:bb:d9:42:17:95:ee:0b:87:af:ab:b3:af:31:d5:4e:25:
fe:93:13:75:45:be:1e:93:c0:73:8d:6d:3b:ef:3e:2c:7d:3c:
c9:93:00:de:4c:0d:22:cd:82:82:a3:13:c0:67:1e:28:8d:64:
01:92:0b:0b:d4:8d:30:d0:1c:b3:69:d1:4b:ef:59:d7:82:03:
14:3b:ca:ce:75:5c:a6:06:ae:e1:aa:2e:e5:28:6d:4a:9f:18:
80:8d:2e:ab:7a:6b:8e:ee:72:30:d6:d8:73:45:f7:db:3d:8f:
36:37:c4:ac:b0:66:4d:6e:06:5f:1d:e6:ba:be:dd:c2:9d:5b:
0a:28:56:f4:00:22:4d:69:2e:f3:13:32:5c:44:ab:bb:7f:af:
e7:1a:7f:4d:5f:18:0c:88:32:28:0e:07:d3:7d:8d:fb:57:ee:
67:cf:1d:d1:1a:8d:a7:10:81:52:d2:a8:bf:bc:66:99:23:6e:
b3:06:4d:1e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:49:26 2026 by rpki-client