
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345757186/0/3130332e36302e33322e302f32322d3332203d3e20313039.roa
File: 3130332e36302e33322e302f32322d3332203d3e20313039.roa (raw, json)
Hash identifier: MzSW+d1QZG9GRLvksmbq6oNyDTlfux+PnhU3TrTlXko=
Subject key identifier: 09:32:EF:05:2C:EE:17:0D:CD:6F:F0:86:D5:DD:C0:50:5A:68:BE:F6
Certificate issuer: /CN=848188DBA8D369CB93B918182269D397DE354F44
Certificate serial: 02F4867F1A68F194E09357CB59B252767356CB40
Authority key identifier: 84:81:88:DB:A8:D3:69:CB:93:B9:18:18:22:69:D3:97:DE:35:4F:44
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/3130332e36302e33322e302f32322d3332203d3e20313039.roa
Signing time: Wed 15 Apr 2026 08:00:49 +0000
ROA not before: Wed 15 Apr 2026 07:55:49 +0000
ROA not after: Wed 14 Apr 2027 08:00:49 +0000
asID: 109
IP address blocks: 103.60.32.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 12:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:f4:86:7f:1a:68:f1:94:e0:93:57:cb:59:b2:52:76:73:56:cb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=848188DBA8D369CB93B918182269D397DE354F44
Validity
Not Before: Apr 15 07:55:49 2026 GMT
Not After : Apr 14 08:00:49 2027 GMT
Subject: CN=0932EF052CEE170DCD6FF086D5DDC0505A68BEF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e2:03:2e:cc:cb:86:6f:68:5e:20:4c:ec:05:
7e:e0:12:84:b4:20:7a:24:93:7d:c9:ac:fb:cf:be:
f9:f7:c7:ef:ec:ca:00:d3:69:fe:fc:df:d6:15:79:
59:14:97:3d:53:2f:a7:4e:47:48:62:cd:fa:c5:e9:
31:a9:97:b7:aa:02:1e:51:91:d2:1a:e1:8e:25:8f:
59:01:53:cf:c3:0e:9e:b1:e4:3d:c6:e5:97:a3:ad:
1e:2d:f9:c6:c5:f7:b5:58:7c:2c:28:f3:9f:36:fc:
c9:aa:0e:ff:2f:63:66:cd:3a:e3:a9:4f:02:c8:1b:
8a:9e:b2:55:b0:83:c0:c4:a4:e4:c1:4b:d7:85:17:
fd:cd:0b:53:6b:af:59:0d:f3:e8:35:47:85:41:6a:
c5:33:a9:73:2d:76:38:d3:63:16:b9:5e:84:55:ad:
4f:de:8e:60:a1:e1:4b:23:2e:ef:2a:b2:8f:f8:cc:
a9:1d:a2:03:0a:3b:e4:ff:e1:c6:b2:df:b7:34:37:
a4:ff:35:1f:86:02:43:a5:08:ae:df:2e:49:03:1e:
74:f7:9b:fb:db:d0:ba:71:48:70:fd:cd:c4:26:ae:
01:47:7b:7f:13:70:26:77:b4:ff:24:97:ed:4b:2b:
da:1a:c4:63:0a:e9:66:f7:da:03:79:89:ce:a7:78:
a1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:32:EF:05:2C:EE:17:0D:CD:6F:F0:86:D5:DD:C0:50:5A:68:BE:F6
X509v3 Authority Key Identifier:
keyid:84:81:88:DB:A8:D3:69:CB:93:B9:18:18:22:69:D3:97:DE:35:4F:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/3130332e36302e33322e302f32322d3332203d3e20313039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.60.32.0/22
Signature Algorithm: sha256WithRSAEncryption
77:59:d9:54:36:0f:d9:c0:50:af:27:65:ec:c4:e4:e8:fe:3b:
e2:7f:31:1b:d4:fc:42:1f:c3:b8:4f:64:7e:1d:ec:90:8e:90:
43:0f:4f:6f:37:99:32:65:49:59:fd:78:16:12:ce:ba:51:54:
4b:c2:4b:ce:5f:9c:97:56:8f:7d:2d:15:60:55:be:e4:b6:71:
1f:f1:17:0e:0d:0c:1c:c9:e3:77:f8:9b:a6:68:6b:33:e7:d3:
37:63:2c:99:a8:73:32:53:f1:83:f2:7e:bc:18:7c:90:6b:26:
60:01:10:fc:5d:45:fe:1a:57:40:00:ad:ac:94:59:53:36:cf:
84:55:ca:08:af:d3:ae:9d:99:1f:73:57:44:d0:3d:dd:6e:91:
69:8c:1d:97:81:af:86:97:63:fc:bd:76:e8:2f:31:a0:9a:75:
c9:55:a2:bf:e9:a5:97:1b:86:dc:e3:4c:84:0b:79:e5:5e:38:
32:68:87:2a:da:d6:ea:0c:d3:49:f5:e1:e9:09:2f:a9:de:6f:
bd:0c:98:8d:57:db:d2:78:42:e5:a7:6a:80:25:76:25:40:5e:
e7:e7:31:53:c4:c8:3c:01:5d:41:0e:e1:a6:7f:a8:26:36:e5:
1c:7d:34:ae:3b:8f:53:3b:a4:e4:fe:5e:1f:50:c4:d4:51:9e:
bb:54:80:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:28:00 2026 by rpki-client