
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135342e302f32342d3234203d3e20313333303333.roa
File: 3130332e3234382e3135342e302f32342d3234203d3e20313333303333.roa (raw, json)
Hash identifier: ayxs+w4/JeX6PHaC3sPkLMgzAQlZveMnqBCO9/aNy4o=
Subject key identifier: 31:EE:83:63:CB:23:4F:CF:8C:F2:CE:7E:2C:F8:1C:43:29:5D:55:B0
Certificate issuer: /CN=25C6596195B162409A5AFAA92570F258BAD3C42D
Certificate serial: 39A862AB20A6E3F59748F3F80D65A1A744AE43C1
Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135342e302f32342d3234203d3e20313333303333.roa
Signing time: Wed 15 Apr 2026 14:51:10 +0000
ROA not before: Wed 15 Apr 2026 14:46:10 +0000
ROA not after: Wed 14 Apr 2027 14:51:10 +0000
asID: 133033
IP address blocks: 103.248.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 14:52:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:a8:62:ab:20:a6:e3:f5:97:48:f3:f8:0d:65:a1:a7:44:ae:43:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D
Validity
Not Before: Apr 15 14:46:10 2026 GMT
Not After : Apr 14 14:51:10 2027 GMT
Subject: CN=31EE8363CB234FCF8CF2CE7E2CF81C43295D55B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c2:81:30:2d:a5:da:76:93:02:74:ba:c6:eb:
f9:3f:da:3f:bf:f8:98:b1:14:59:1e:ab:dd:fc:50:
a5:94:93:20:3b:bc:3b:d9:d4:94:31:7d:8d:47:c1:
18:5c:f1:ab:39:44:3b:1c:ee:85:59:0f:4f:a5:29:
4d:24:95:93:39:29:07:a2:c1:a2:81:84:18:10:b5:
36:95:9f:39:6c:00:66:3e:3d:14:1c:4a:38:f8:6d:
58:92:e0:c3:eb:8b:bd:3e:b4:0c:fc:97:52:19:56:
93:89:0a:52:fb:f3:a8:fe:f3:f7:3e:46:f9:df:fe:
d7:de:a3:6e:f4:39:ed:a0:4f:92:7e:fa:e3:df:1c:
58:32:62:5c:b1:90:87:b0:a6:2e:ef:92:ea:86:43:
24:9f:9f:0d:fd:9d:32:19:31:28:04:d2:6b:17:db:
d9:6b:c1:a2:33:91:6c:0c:87:c4:3d:e2:7d:61:fa:
a6:7e:c6:fa:c7:e8:e1:09:ba:cc:54:e0:56:19:4d:
32:bb:1a:fc:50:73:78:c9:9e:f8:f1:d9:eb:9b:1b:
ce:40:d8:f3:48:cf:42:73:0f:9e:2c:81:0f:21:40:
21:f8:3b:39:a5:9a:da:04:c0:86:2f:ef:a1:28:8f:
20:a2:d1:e1:5e:1a:c3:4c:73:95:38:85:a0:b8:ad:
b0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EE:83:63:CB:23:4F:CF:8C:F2:CE:7E:2C:F8:1C:43:29:5D:55:B0
X509v3 Authority Key Identifier:
keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135342e302f32342d3234203d3e20313333303333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.248.154.0/24
Signature Algorithm: sha256WithRSAEncryption
55:70:56:d7:b0:69:87:d8:99:77:08:81:70:14:18:7d:a0:fc:
c3:7b:31:89:b1:04:89:2b:f9:79:81:2e:88:20:fb:a5:43:22:
e6:75:3e:13:b7:72:b3:14:06:79:f0:8d:84:41:d7:1e:0e:48:
8d:1e:fa:c2:6c:00:83:9a:60:c4:47:b2:f4:1e:ad:b9:32:ab:
91:99:b1:01:05:40:b4:6e:73:8f:be:ee:3e:da:58:71:e9:27:
3b:bf:a3:57:6e:b4:37:73:9f:0f:c1:67:a4:ed:bd:62:4c:f7:
0d:f9:53:1d:c1:51:ce:e7:ab:ce:f5:84:ef:5e:a9:8d:59:8f:
85:1c:73:c6:a9:ef:53:99:7f:76:55:cc:71:06:0f:48:ed:37:
bc:e5:ad:b3:9e:da:47:cd:d8:83:3d:f9:16:33:92:90:1f:f1:
dd:91:7e:ab:d4:ea:e3:5e:95:63:e3:75:29:66:2c:a4:09:36:
2a:79:39:d6:3e:43:4c:49:dd:37:3c:86:89:c8:d4:de:0f:59:
61:c4:4a:6e:b8:f7:7d:6d:63:06:38:f6:00:82:8c:3a:af:56:
87:eb:7b:02:d2:2a:e1:f2:1c:5b:68:3f:a5:30:69:fd:6a:46:
d5:ef:d0:a0:cd:9a:6a:6f:7e:84:70:e2:6d:27:5d:6a:87:e6:
0f:2e:41:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:05:29 2026 by rpki-client