
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265682433/0/3130332e3231362e3133362e302f32322d3232203d3e20313531323935.roa
File: 3130332e3231362e3133362e302f32322d3232203d3e20313531323935.roa (raw, json)
Hash identifier: BnRwU7chHYIIGouHIczgpLM7dAInCSB+/HmUy3rXXck=
Subject key identifier: 01:25:3C:3F:0F:1F:05:E7:39:DB:3F:94:54:80:4D:58:AE:FB:7C:FA
Certificate issuer: /CN=EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5
Certificate serial: 7601A3AEB6A3E29E6CDD811D6B8A93BA88FDD995
Authority key identifier: EF:71:80:BB:CF:EE:6A:47:CF:C4:29:C1:F6:1B:F4:C2:69:F8:19:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/3130332e3231362e3133362e302f32322d3232203d3e20313531323935.roa
Signing time: Fri 17 Apr 2026 08:10:08 +0000
ROA not before: Fri 17 Apr 2026 08:05:08 +0000
ROA not after: Fri 16 Apr 2027 08:10:08 +0000
asID: 151295
IP address blocks: 103.216.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 09:58:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:01:a3:ae:b6:a3:e2:9e:6c:dd:81:1d:6b:8a:93:ba:88:fd:d9:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5
Validity
Not Before: Apr 17 08:05:08 2026 GMT
Not After : Apr 16 08:10:08 2027 GMT
Subject: CN=01253C3F0F1F05E739DB3F9454804D58AEFB7CFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:39:6b:c8:3c:7f:42:31:4c:f3:f1:8b:53:95:
c4:4f:03:50:45:a6:df:93:2e:8c:8e:13:dc:2e:57:
c6:dd:67:75:53:4c:7a:85:da:31:60:3b:bd:d7:16:
27:07:56:b2:21:7c:f6:72:81:aa:a6:ef:90:d1:d4:
8c:69:11:16:79:ee:78:66:3f:cd:ed:5d:cb:53:b9:
96:03:02:23:a4:73:d7:ba:38:fc:6c:a7:30:5a:35:
9b:c8:70:df:7e:8b:58:80:47:73:13:df:31:91:f2:
50:fb:c2:4c:7a:42:ba:d3:8f:16:ed:c3:ff:2e:c6:
c9:d8:34:09:de:6c:70:07:9d:ed:e1:94:9f:25:88:
3a:71:f4:cf:e7:f2:06:8b:cd:b3:65:f1:48:c0:7a:
db:7c:43:5c:ba:e0:4e:c5:06:65:12:5d:04:b5:f5:
81:cd:d7:88:94:11:68:07:41:75:da:d7:81:18:e3:
c6:ba:21:d0:15:6e:6b:4c:b9:b8:4a:7d:af:6e:f9:
1b:00:75:87:09:1e:36:32:30:33:f1:64:72:80:f7:
c5:5c:7d:7e:49:61:f1:1d:54:8f:ad:a3:27:bd:f8:
e1:40:89:48:c9:9d:0c:c8:22:38:6d:32:d6:4e:03:
bc:96:97:5d:80:af:a3:cc:0d:94:e3:2d:c3:77:c8:
4d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:25:3C:3F:0F:1F:05:E7:39:DB:3F:94:54:80:4D:58:AE:FB:7C:FA
X509v3 Authority Key Identifier:
keyid:EF:71:80:BB:CF:EE:6A:47:CF:C4:29:C1:F6:1B:F4:C2:69:F8:19:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/3130332e3231362e3133362e302f32322d3232203d3e20313531323935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.216.136.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:54:54:db:3d:2e:28:06:89:df:04:66:d8:49:42:47:c8:ab:
67:e4:64:e4:63:7b:a2:21:fc:5f:46:29:0e:8f:5c:5e:1b:42:
ac:ed:37:88:6d:68:a9:f0:e5:97:f2:91:d6:f8:71:2a:9d:30:
1d:9b:59:d6:a9:74:08:05:59:cf:b0:3c:27:e4:76:c0:ab:a3:
bf:06:2a:d7:8b:60:1a:10:ef:40:13:cf:8a:5b:b8:64:ca:87:
10:00:2f:c8:eb:cf:2f:ea:91:7f:d8:22:66:64:6d:53:39:8e:
42:8a:2c:9b:22:5b:d3:e7:ea:f9:b6:ca:08:da:e5:1d:1d:f3:
4c:18:3d:73:7c:0c:7e:4a:7a:5e:a8:d9:70:d3:b1:1f:c1:6c:
bc:30:6c:0f:51:1f:5d:d7:05:93:a9:64:a5:cd:aa:fb:e2:55:
d7:8c:94:60:72:e9:a3:28:2d:77:1f:7d:89:e3:29:11:48:b7:
10:9b:40:0f:9c:6c:8e:16:ff:77:2c:4e:13:5e:00:27:30:0c:
c0:9d:e5:a3:74:6c:3f:6c:1d:7c:ac:9b:42:35:88:89:05:7a:
a7:c2:1c:43:ab:63:e1:0f:7c:34:5c:82:e8:ba:ea:cc:4d:96:
64:2b:ce:ef:67:ef:62:a8:f9:9d:d8:cb:e5:98:5b:4a:34:1d:
8b:db:0e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:00:34 2026 by rpki-client