
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3130332e3231362e3235322e302f32342d3234203d3e2034383136.roa
File: 3130332e3231362e3235322e302f32342d3234203d3e2034383136.roa (raw, json)
Hash identifier: aO+DkS0zTHdPvPxlggzUbAE4Lu26a9KguQs3DYxkPts=
Subject key identifier: EA:84:BC:0F:37:A2:5F:A2:AD:B5:E4:AC:1E:E6:20:07:EE:0B:19:AE
Certificate issuer: /CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8
Certificate serial: 7A1F9A0D86EF13B32EE8ABB7CCA1F357FA5CE3BC
Authority key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3130332e3231362e3235322e302f32342d3234203d3e2034383136.roa
Signing time: Thu 16 Apr 2026 04:04:30 +0000
ROA not before: Thu 16 Apr 2026 03:59:30 +0000
ROA not after: Thu 15 Apr 2027 04:04:30 +0000
asID: 4816
IP address blocks: 103.216.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:1f:9a:0d:86:ef:13:b3:2e:e8:ab:b7:cc:a1:f3:57:fa:5c:e3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8
Validity
Not Before: Apr 16 03:59:30 2026 GMT
Not After : Apr 15 04:04:30 2027 GMT
Subject: CN=EA84BC0F37A25FA2ADB5E4AC1EE62007EE0B19AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0c:31:ef:ec:86:ad:db:17:12:b4:b5:fb:95:
a2:a6:24:0d:40:39:66:79:a8:64:50:3a:8d:5b:29:
9a:a4:bb:a0:48:a3:1b:bb:3e:ee:50:fd:cc:ff:ed:
59:3e:c8:c4:1c:e9:0d:58:ea:8f:d7:d1:93:36:4c:
c4:8b:dd:ee:cc:8b:12:0d:fe:74:ca:5d:b6:a8:1e:
7f:2b:aa:8c:d8:f5:65:ec:2d:83:73:1d:ba:ab:33:
69:5f:97:69:93:c5:a4:aa:fa:2b:ff:50:0c:9c:67:
5e:e1:4e:a7:50:4e:65:c3:dd:eb:e7:0e:e0:30:ce:
d1:b1:cf:3d:9f:35:c2:77:a4:23:7b:57:c9:b5:07:
10:f6:c9:7e:fb:f6:66:df:a6:85:34:1c:d3:12:93:
fc:26:1b:62:09:60:00:1a:b2:ba:61:42:01:c3:ba:
da:61:e0:91:60:7f:87:45:39:df:7c:10:71:b2:30:
04:ea:54:5f:71:e2:3e:e4:75:eb:34:39:87:4d:e3:
5a:42:ee:9c:ae:55:3e:20:32:89:ee:16:e9:4d:f2:
ac:4e:ab:fe:a2:a7:03:c5:7d:dc:ba:8a:c6:ca:dd:
a5:7b:12:af:df:88:93:66:b3:69:d6:3d:01:f1:3e:
53:f7:f8:7f:80:c3:97:09:56:48:a8:dd:35:05:53:
61:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:84:BC:0F:37:A2:5F:A2:AD:B5:E4:AC:1E:E6:20:07:EE:0B:19:AE
X509v3 Authority Key Identifier:
keyid:3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3130332e3231362e3235322e302f32342d3234203d3e2034383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.216.252.0/24
Signature Algorithm: sha256WithRSAEncryption
61:58:f2:23:36:6a:95:79:bc:f2:ec:f3:b9:cb:b5:08:e2:69:
ae:bd:4e:5d:0e:73:54:5b:46:df:76:22:75:0c:73:cd:a3:3f:
20:05:fa:ef:6c:c0:29:55:09:96:49:1d:93:e8:ba:10:e5:26:
5b:b2:a0:ea:46:1f:5a:8b:31:9e:3e:28:e1:32:01:17:1f:7e:
6c:2f:ec:f1:22:18:e1:f7:09:80:40:77:24:f0:e2:9b:f9:80:
0f:e0:cf:ae:98:fe:f4:cb:cf:fe:4d:21:ce:f5:cb:ac:86:61:
d2:8a:0a:d8:8d:65:df:e5:8c:97:4d:51:41:dd:12:fa:2f:a0:
3e:d4:d3:56:c9:0a:4f:5b:43:db:68:05:28:67:fb:c8:af:32:
f6:f4:ee:a9:ba:df:d4:2b:38:67:4b:cc:a2:15:51:4d:cf:08:
e4:b0:65:ef:fb:dd:82:6c:e1:29:89:30:37:94:ba:1c:20:e3:
31:e5:e4:c0:fc:5f:d0:13:d1:a6:39:17:52:5e:57:e8:3a:4e:
27:e0:a0:e6:34:fd:bb:1f:16:7e:8c:b7:d6:a3:fb:e5:f3:ed:
8a:b4:0a:1c:dc:cb:f0:e9:80:7a:5b:e2:5a:ec:9a:b4:4e:25:
a4:24:98:30:7f:7b:78:ef:98:c3:e8:9b:bc:d2:4f:df:91:e8:
2f:49:a8:63
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:20:24 2026 by rpki-client