
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265682433/0/3130332e3231362e3133382e302f32342d3234203d3e20313531323935.roa
File: 3130332e3231362e3133382e302f32342d3234203d3e20313531323935.roa (raw, json)
Hash identifier: 795M1pb0jQwcgoLJvZEPFCAMB3MJiYLqo/HMVpljzN0=
Subject key identifier: D7:E8:5F:9C:F1:CD:40:0D:0D:C8:C6:0F:93:FB:E9:E4:0A:87:28:51
Certificate issuer: /CN=EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5
Certificate serial: 72802620EE21CB31CFBFFEE8F8CDEEDCE2FC5E8E
Authority key identifier: EF:71:80:BB:CF:EE:6A:47:CF:C4:29:C1:F6:1B:F4:C2:69:F8:19:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/3130332e3231362e3133382e302f32342d3234203d3e20313531323935.roa
Signing time: Fri 17 Apr 2026 08:10:08 +0000
ROA not before: Fri 17 Apr 2026 08:05:08 +0000
ROA not after: Fri 16 Apr 2027 08:10:08 +0000
asID: 151295
IP address blocks: 103.216.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 09:58:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:80:26:20:ee:21:cb:31:cf:bf:fe:e8:f8:cd:ee:dc:e2:fc:5e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5
Validity
Not Before: Apr 17 08:05:08 2026 GMT
Not After : Apr 16 08:10:08 2027 GMT
Subject: CN=D7E85F9CF1CD400D0DC8C60F93FBE9E40A872851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:79:b9:ed:31:c7:da:ae:f8:8f:35:48:4c:6f:
da:91:f8:b7:25:29:03:c4:db:44:9c:93:04:ae:7d:
88:1f:74:43:2d:2e:29:72:e8:2b:2c:3b:d7:01:7d:
58:11:db:df:4a:ed:81:1c:a0:dd:52:87:d6:9e:dd:
0c:43:8f:6e:07:f5:8c:b2:ac:ca:f0:91:1c:b8:34:
56:b6:59:49:11:f6:f8:dc:32:88:72:54:54:dd:e9:
b6:e7:41:89:4b:43:e0:ff:f1:f8:85:bb:52:10:cc:
f6:ed:af:cc:ff:e0:7b:e7:25:3e:eb:65:b3:b9:da:
45:8a:5e:3b:a8:37:b3:7f:5f:cf:9c:50:86:ba:f1:
f7:cd:ee:60:a4:1c:0d:41:28:23:08:1b:14:19:0a:
b1:58:83:cc:90:68:96:97:05:e8:04:1a:6b:1d:a9:
2f:df:c0:98:9b:72:ac:74:ef:1a:5f:6f:22:9b:78:
ca:5c:40:be:c0:ab:4f:b8:17:10:76:00:c9:91:7b:
cc:27:b4:3a:60:2d:9a:52:ec:a5:6f:f5:bb:26:3b:
23:f8:b1:90:89:7c:3d:0a:2b:e6:a5:d5:e0:85:0d:
21:4a:0a:36:f0:e5:ec:02:54:0e:a4:e9:0b:1c:7b:
a4:36:9b:03:7e:de:40:1e:a8:36:90:f9:1d:e3:92:
75:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E8:5F:9C:F1:CD:40:0D:0D:C8:C6:0F:93:FB:E9:E4:0A:87:28:51
X509v3 Authority Key Identifier:
keyid:EF:71:80:BB:CF:EE:6A:47:CF:C4:29:C1:F6:1B:F4:C2:69:F8:19:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/3130332e3231362e3133382e302f32342d3234203d3e20313531323935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.216.138.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:ed:7c:91:79:d3:b4:e9:e9:ac:73:72:d2:11:bb:a0:a1:90:
d6:e4:aa:d4:f7:4c:08:60:d0:d8:1a:7c:d9:f8:d6:72:a8:bd:
5d:09:19:b6:f1:d9:20:7b:f8:83:a5:b8:75:db:aa:bb:65:ae:
67:75:f5:15:eb:7a:fb:25:b5:c0:f7:5e:4c:c1:d9:34:49:9a:
3c:11:af:ce:9f:31:e2:a9:a6:4e:00:05:3e:97:58:7d:87:39:
c0:5a:5c:1a:52:03:0f:12:36:6f:4b:77:77:73:ef:88:fb:7a:
7d:43:d0:3e:af:b3:5a:42:c7:b1:56:fd:f0:ce:94:b8:4b:a1:
27:ba:27:0b:bd:fa:6d:d4:89:9b:3e:f8:51:db:55:19:32:94:
a4:d1:65:55:82:c5:57:6d:51:81:49:d4:63:55:be:65:c5:57:
b9:bd:fc:77:4d:37:09:cd:e9:54:9e:ee:1d:3a:5a:9a:05:bc:
98:18:80:8e:1c:8c:ee:ec:e0:bd:47:d1:a8:3f:4b:36:a1:d3:
3b:a8:62:c7:21:99:bc:4e:9e:c6:58:7e:47:7a:19:70:03:a9:
d0:23:5c:51:70:78:d9:ac:f8:30:6d:de:4f:10:e6:04:8e:c6:
29:6d:ee:a7:76:a3:37:98:9e:22:03:cd:5f:e6:81:65:d2:99:
e7:13:88:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:00:33 2026 by rpki-client