
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135332e302f32342d3234203d3e2034383337.roa
File: 3130332e3234382e3135332e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier: YySm2cg/E+3trgCgazleVF/zeEgC2VFWmTffoSCCZPM=
Subject key identifier: EE:25:AF:99:1E:FD:F2:5D:F2:C3:CD:E1:DE:E2:25:07:DC:74:99:CE
Certificate issuer: /CN=25C6596195B162409A5AFAA92570F258BAD3C42D
Certificate serial: 18D21AD7471F80ED0A93D87C41B1E25560AE2D68
Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135332e302f32342d3234203d3e2034383337.roa
Signing time: Wed 15 Apr 2026 14:51:09 +0000
ROA not before: Wed 15 Apr 2026 14:46:09 +0000
ROA not after: Wed 14 Apr 2027 14:51:09 +0000
asID: 4837
IP address blocks: 103.248.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 14:52:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:d2:1a:d7:47:1f:80:ed:0a:93:d8:7c:41:b1:e2:55:60:ae:2d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D
Validity
Not Before: Apr 15 14:46:09 2026 GMT
Not After : Apr 14 14:51:09 2027 GMT
Subject: CN=EE25AF991EFDF25DF2C3CDE1DEE22507DC7499CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:92:19:00:4e:c6:35:b4:48:e9:df:1c:63:91:
27:2d:81:49:7f:29:db:5c:82:fe:37:04:cd:7a:98:
dc:ff:07:d3:1c:4d:65:e1:98:c6:51:2b:77:84:6e:
be:dc:94:1e:87:29:37:68:44:a3:cb:e4:b7:c5:ef:
e6:5f:bf:be:e5:0d:2b:56:c7:db:f2:64:5e:1f:b8:
07:c7:18:0a:e5:4d:de:54:bf:ac:e8:2f:ec:15:e2:
67:e8:ed:8e:fe:45:a6:74:24:65:66:a5:82:b7:a0:
29:0c:98:fc:a5:d9:93:6a:77:69:b6:ff:09:55:71:
ec:d8:03:8a:9f:43:7f:3d:71:39:ac:c0:e4:fa:5d:
31:27:3a:ed:03:c3:83:77:3b:45:8b:1a:c1:f6:b6:
f8:81:f4:3a:c1:53:fb:ef:a6:ba:cb:62:78:bf:04:
71:49:3d:6e:10:d7:f4:83:4e:98:c9:6c:44:49:1e:
0a:18:28:3f:f3:27:77:b2:24:d1:27:c9:58:d4:8a:
f3:85:5d:76:bc:5d:54:b5:83:8a:10:86:ef:d0:6a:
53:7e:1b:ca:c1:90:09:ac:f6:21:c0:66:ef:4b:5d:
ff:d5:bf:65:18:a8:23:e2:9e:a5:e5:19:54:a4:04:
7f:8c:19:3c:a7:b3:ef:5a:f7:f7:32:59:f3:cb:09:
10:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:25:AF:99:1E:FD:F2:5D:F2:C3:CD:E1:DE:E2:25:07:DC:74:99:CE
X509v3 Authority Key Identifier:
keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135332e302f32342d3234203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.248.153.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:03:59:5f:ca:67:d1:ac:09:32:be:28:97:93:3a:56:9c:77:
11:ea:48:c7:87:b2:e2:4d:3d:9d:06:2e:d3:3d:39:68:95:03:
f2:a5:b3:2d:4a:32:97:02:3d:54:ab:21:bd:67:0f:cf:24:3c:
97:77:d6:8e:31:32:79:71:b5:cb:b0:67:e0:44:3d:75:be:42:
ad:47:5c:b5:14:18:d2:3f:6a:1f:d7:da:80:8b:d4:52:c7:4b:
39:95:5d:c0:fc:d9:ca:db:7f:08:93:2a:bb:51:ba:55:66:42:
7a:09:be:dd:85:4e:74:be:a4:76:cb:01:8a:b9:12:9b:7a:be:
57:88:bb:68:6a:bb:ad:46:b1:7f:5d:ad:9d:2e:5a:d3:0c:d8:
75:82:4b:11:17:cd:45:39:72:84:03:03:bf:cb:fb:41:75:cb:
38:a5:c3:78:3c:0e:81:fd:8c:af:f3:2a:01:82:ef:87:3d:26:
ef:21:bb:3b:e4:fe:8a:2b:1f:71:62:90:43:81:a5:92:10:9c:
cb:32:58:0d:ed:e1:75:46:6b:29:a1:f1:95:0a:b9:68:a0:32:
ab:76:91:89:4f:9f:06:a5:92:82:9a:47:b3:9a:86:9c:14:1e:
c8:6c:26:e2:4c:2e:9b:e3:b4:09:2e:d7:fe:cc:62:a7:af:85:
97:c1:96:a2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:52:05 2026 by rpki-client