
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525036033/0/3130332e3234312e3232302e302f32322d3232203d3e2030.roa
File: 3130332e3234312e3232302e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier: vffwqsc1y5fLsjUwVEkmdZ5MIluj2AqYi6xrs73+I0k=
Subject key identifier: EB:DF:CF:3B:20:E7:35:BF:F4:31:12:89:E3:8C:BB:96:D2:07:A7:47
Certificate issuer: /CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359
Certificate serial: 50B5837DA156E2BF514CB4B0C71862F8DE75BD56
Authority key identifier: EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/3130332e3234312e3232302e302f32322d3232203d3e2030.roa
Signing time: Thu 16 Apr 2026 06:37:29 +0000
ROA not before: Thu 16 Apr 2026 06:32:29 +0000
ROA not after: Thu 15 Apr 2027 06:37:29 +0000
asID: 0
IP address blocks: 103.241.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 07:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:b5:83:7d:a1:56:e2:bf:51:4c:b4:b0:c7:18:62:f8:de:75:bd:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359
Validity
Not Before: Apr 16 06:32:29 2026 GMT
Not After : Apr 15 06:37:29 2027 GMT
Subject: CN=EBDFCF3B20E735BFF4311289E38CBB96D207A747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e1:70:24:2a:8b:48:43:ae:20:3d:c8:c0:9b:
d2:92:a5:65:51:ba:d4:11:a8:ad:40:31:ee:ee:2a:
14:e4:13:44:98:59:1f:9b:cf:e4:83:0c:99:06:ba:
f6:1a:7f:28:3c:e7:4f:3d:40:8f:5c:25:14:3d:39:
8d:09:f6:a8:40:b1:b5:58:68:c5:f9:80:a9:e9:3c:
08:40:a2:bb:5e:f7:29:05:ff:51:10:6c:0b:ef:d4:
58:41:c7:63:26:58:78:1a:53:24:b8:fb:d7:3b:22:
1b:34:8c:9d:a4:2f:ec:04:01:95:a3:9d:3c:c7:bc:
22:16:3d:a1:24:98:89:a4:65:5f:13:e4:41:7a:84:
57:f6:12:85:5b:03:02:96:12:14:0f:cb:eb:dc:37:
c9:95:f7:f8:a7:92:22:1c:89:37:28:0c:20:7f:4b:
92:6b:c1:ec:c5:68:c2:2c:0e:46:18:fb:32:1a:66:
77:f7:4e:51:1c:f4:e7:7d:18:e7:e7:5c:17:05:6b:
e5:ea:40:d3:ba:21:26:2a:6b:17:f9:63:bc:53:af:
3c:cd:ca:ae:3e:da:b5:df:ea:c5:4b:a5:8f:64:2b:
f2:70:6f:21:fe:40:7b:7e:54:6a:b1:8e:68:d7:b2:
a8:30:dc:24:7b:a6:0f:59:06:8f:7d:54:d8:d7:1e:
6b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DF:CF:3B:20:E7:35:BF:F4:31:12:89:E3:8C:BB:96:D2:07:A7:47
X509v3 Authority Key Identifier:
keyid:EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/3130332e3234312e3232302e302f32322d3232203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.241.220.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:e3:e5:04:41:7c:6c:92:12:64:0c:6f:d1:28:92:e4:96:1b:
0f:66:96:03:5e:e9:fb:25:12:43:3a:6f:5e:07:43:16:e9:f8:
14:58:8e:53:02:43:2c:53:9c:a1:bb:26:4e:e2:bd:51:52:5c:
40:24:14:f3:c5:5c:e9:02:98:bb:5d:c3:79:1b:e6:e7:b4:2b:
f0:38:86:2a:af:1b:0b:a8:6e:d8:b7:40:6d:3f:d3:22:05:bd:
56:3d:57:8e:a0:7e:95:10:f6:44:e1:b4:82:c1:7c:e7:ec:1d:
39:b6:b5:5b:a6:f0:39:7f:3f:b3:38:99:fa:54:d6:9b:78:58:
3c:0d:ed:2d:31:f4:80:6b:ad:62:be:6b:16:a0:5e:87:4f:cc:
12:c3:9b:7a:2f:43:3b:21:1b:04:f6:b1:40:b7:c0:a2:5b:ab:
a7:c8:ce:55:54:40:ad:c0:46:96:84:d6:8b:da:5f:46:7f:02:
93:f3:4d:2f:63:d4:6c:73:db:9a:ee:5b:d1:fb:82:c8:c7:35:
d6:ec:bb:d1:49:16:9f:62:23:2f:b5:2e:f5:98:b8:07:df:8a:
05:c4:5e:09:ef:0e:23:cf:2c:48:21:75:5a:66:1b:de:12:19:
1e:8a:6b:f4:92:cb:c8:fd:9a:3f:ef:7d:d7:fd:5f:37:5d:f4:
3c:4d:e2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:35:40 2026 by rpki-client