
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577400322/0/3130332e35362e3130342e302f32322d3232203d3e203535393931.roa
File: 3130332e35362e3130342e302f32322d3232203d3e203535393931.roa (raw, json)
Hash identifier: Xx3438ml27BwMKWjax5Et9SPWqEU02J5BKCONck0i14=
Subject key identifier: 55:0A:CB:F2:8C:83:4C:B9:7B:C5:77:D9:BE:D3:63:D4:6A:E4:4E:DC
Certificate issuer: /CN=1133679B2C104A0446FA0C3764EEE246C5D21075
Certificate serial: 3E79C6DB302F7C71187134316A99A94A2122E2FC
Authority key identifier: 11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/3130332e35362e3130342e302f32322d3232203d3e203535393931.roa
Signing time: Wed 15 Apr 2026 08:21:45 +0000
ROA not before: Wed 15 Apr 2026 08:16:45 +0000
ROA not after: Wed 14 Apr 2027 08:21:45 +0000
asID: 55991
IP address blocks: 103.56.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 20:43:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:79:c6:db:30:2f:7c:71:18:71:34:31:6a:99:a9:4a:21:22:e2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1133679B2C104A0446FA0C3764EEE246C5D21075
Validity
Not Before: Apr 15 08:16:45 2026 GMT
Not After : Apr 14 08:21:45 2027 GMT
Subject: CN=550ACBF28C834CB97BC577D9BED363D46AE44EDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3c:04:cc:42:64:10:98:4e:cb:b0:c1:81:5c:
54:2a:9b:e8:e9:71:d2:e5:5f:d4:0d:b8:f7:99:02:
c9:18:79:63:78:a7:27:13:80:44:2b:49:cd:c8:4d:
52:0a:2b:13:01:da:bf:f9:3c:39:84:f4:7a:4a:63:
6e:f2:a4:1c:81:67:21:74:9d:2e:3e:ac:8d:3e:fb:
0c:30:50:42:50:ed:16:cf:04:e9:04:04:ec:db:03:
5f:a7:b8:8e:91:e7:36:f9:ea:f7:87:61:88:a5:15:
6f:56:c4:9a:37:4c:8b:68:3e:c7:c5:94:fb:0e:d2:
20:ea:3d:21:4b:9b:38:ae:a6:e9:6c:89:67:af:c6:
86:a3:f0:43:0e:62:3a:2d:b4:80:1f:41:78:f7:2e:
37:22:68:bf:9b:1a:3d:5c:c4:00:4d:b7:6b:91:61:
96:e0:41:21:4c:5f:f9:0f:c6:79:3e:53:b5:88:ff:
f9:02:e5:6c:39:55:1e:96:cc:1a:c1:44:27:a4:d8:
f7:87:52:79:40:cf:8d:d1:6e:66:34:81:4b:40:aa:
36:35:77:0c:ad:fb:9a:db:03:18:5f:05:9e:02:c7:
9c:0b:a9:9b:9c:c5:a6:21:f5:fb:3f:ec:e3:28:b6:
9c:5a:ee:8f:4f:d0:ea:03:1e:7d:3d:3b:c5:13:cf:
5c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0A:CB:F2:8C:83:4C:B9:7B:C5:77:D9:BE:D3:63:D4:6A:E4:4E:DC
X509v3 Authority Key Identifier:
keyid:11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/3130332e35362e3130342e302f32322d3232203d3e203535393931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.56.104.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:b3:9d:84:f0:5f:82:66:d8:4a:d9:8d:9e:d2:d8:c9:78:ea:
f0:9f:9a:06:05:4b:d1:df:12:a6:1a:84:bd:cc:46:cb:1f:3e:
fd:1b:96:61:cc:31:74:a4:b8:56:fe:62:c2:c9:48:67:d3:3d:
39:70:b3:db:fb:05:57:ce:c8:56:68:87:a4:fb:95:2b:b4:20:
8e:a6:fe:1e:d4:aa:1b:90:ff:eb:0d:5e:63:46:55:85:0c:84:
c0:bb:9c:77:3e:46:1f:1d:d4:c3:fb:69:3d:22:07:52:7f:27:
e0:d1:36:08:58:0c:d5:31:51:5a:4a:b4:ac:8a:29:5c:9f:13:
d4:f0:4b:4c:b5:86:c1:89:6b:64:25:b2:5c:49:9a:18:b0:38:
bd:1f:43:e2:e1:6a:0d:43:d2:22:98:22:2b:42:95:7d:e9:ea:
52:3e:b1:e2:a4:c1:3a:2c:50:36:36:27:bf:f6:a1:b1:dd:7a:
d3:43:23:91:3b:9e:9c:23:75:a5:a8:c0:6f:0e:5e:8d:20:7d:
d7:5a:a4:c4:70:e2:40:79:c0:18:f1:69:33:19:8e:5c:5c:b7:
11:2b:28:3f:56:ba:21:75:d2:33:44:31:a8:74:ab:78:dd:86:
37:44:ad:9e:b6:a6:86:4e:e9:27:10:c8:58:ec:81:89:ad:1d:
f2:db:6c:4a
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUPnnG2zAvfHEYcTQxapmpSiEi4vwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTEzMzY3OUIyQzEwNEEwNDQ2RkEwQzM3NjRFRUUyNDZD
NUQyMTA3NTAeFw0yNjA0MTUwODE2NDVaFw0yNzA0MTQwODIxNDVaMDMxMTAvBgNV
BAMTKDU1MEFDQkYyOEM4MzRDQjk3QkM1NzdEOUJFRDM2M0Q0NkFFNDRFREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgPATMQmQQmE7LsMGBXFQqm+jp
cdLlX9QNuPeZAskYeWN4pycTgEQrSc3ITVIKKxMB2r/5PDmE9HpKY27ypByBZyF0
nS4+rI0++wwwUEJQ7RbPBOkEBOzbA1+nuI6R5zb56veHYYilFW9WxJo3TItoPsfF
lPsO0iDqPSFLmziupulsiWevxoaj8EMOYjottIAfQXj3LjciaL+bGj1cxABNt2uR
YZbgQSFMX/kPxnk+U7WI//kC5Ww5VR6WzBrBRCek2PeHUnlAz43RbmY0gUtAqjY1
dwyt+5rbAxhfBZ4Cx5wLqZucxaYh9fs/7OMotpxa7o9P0OoDHn09O8UTz1xhAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUVQrL8oyDTLl7xXfZvtNj1GrkTtwwHwYDVR0j
BBgwFoAUETNnmywQSgRG+gw3ZO7iRsXSEHUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4Mjc0MTU3NzQwMDMyMi8wLzExMzM2NzlCMkMxMDRBMDQ0NkZBMEMzNzY0RUVF
MjQ2QzVEMjEwNzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTEzMzY3OUIyQzEwNEEwNDQ2RkEwQzM3NjRFRUUyNDZDNUQyMTA3NS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4Mjc0MTU3NzQwMDMyMi8wLzMxMzAzMzJlMzUz
NjJlMzEzMDM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzNTM5MzkzMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmc4aDANBgkqhkiG9w0BAQsFAAOCAQEAf7OdhPBfgmbYStmNntLYyXjq
8J+aBgVL0d8SphqEvcxGyx8+/RuWYcwxdKS4Vv5iwslIZ9M9OXCz2/sFV87IVmiH
pPuVK7Qgjqb+HtSqG5D/6w1eY0ZVhQyEwLucdz5GHx3Uw/tpPSIHUn8n4NE2CFgM
1TFRWkq0rIopXJ8T1PBLTLWGwYlrZCWyXEmaGLA4vR9D4uFqDUPSIpgiK0KVfenq
Uj6x4qTBOixQNjYnv/ahsd1600MjkTuenCN1pajAbw5ejSB911qkxHDiQHnAGPFp
MxmOXFy3ESsoP1a6IXXSM0QxqHSreN2GN0Stnramhk7pJxDIWOyBia0d8ttsSg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:49:21 2026 by rpki-client