
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3130332e34332e31362e302f32342d3234203d3e20313332383833.roa
File: 3130332e34332e31362e302f32342d3234203d3e20313332383833.roa (raw, json)
Hash identifier: H08bHPcp2tMjVqJhHN2ydkVYNAV8s4aWv5IHR9cqa7I=
Subject key identifier: F4:77:91:BE:12:A8:D8:F5:CE:04:A6:CA:0C:8B:33:AE:71:EB:F2:65
Certificate issuer: /CN=727F645FC8FE158EB2755D7F914A4325882E78A0
Certificate serial: 3B9FA3691DDFB5AABE4858A590CA1C8E75575561
Authority key identifier: 72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3130332e34332e31362e302f32342d3234203d3e20313332383833.roa
Signing time: Wed 08 Apr 2026 05:59:10 +0000
ROA not before: Wed 08 Apr 2026 05:54:10 +0000
ROA not after: Wed 07 Apr 2027 05:59:10 +0000
asID: 132883
IP address blocks: 103.43.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 07:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:9f:a3:69:1d:df:b5:aa:be:48:58:a5:90:ca:1c:8e:75:57:55:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727F645FC8FE158EB2755D7F914A4325882E78A0
Validity
Not Before: Apr 8 05:54:10 2026 GMT
Not After : Apr 7 05:59:10 2027 GMT
Subject: CN=F47791BE12A8D8F5CE04A6CA0C8B33AE71EBF265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:07:d6:da:c5:9a:f6:9b:15:82:89:df:1f:b3:
81:5f:8f:db:99:32:ff:be:9f:3c:57:e4:96:28:d6:
1a:33:0d:df:0c:eb:23:87:dc:af:f3:6d:07:22:6f:
e3:a6:9a:14:18:c1:a2:31:d3:b7:6e:96:32:cf:93:
3b:a5:61:07:dd:92:db:75:fb:73:92:e7:23:54:e5:
ae:80:20:d2:b6:79:3d:64:46:c6:c9:04:98:c2:c9:
3b:fe:65:c7:14:5c:1e:2c:5f:f4:b0:28:3d:49:ed:
5a:26:2f:0b:4b:d3:0f:89:a6:39:71:11:07:e5:39:
64:ba:e0:8a:87:09:ad:dc:98:d4:8e:d2:ae:93:dc:
cd:a1:4a:1b:fd:46:49:fd:2f:3b:ac:1d:84:1b:27:
75:11:73:08:95:4e:43:3f:cf:02:87:6f:b4:64:ab:
a7:f2:4e:69:2e:2f:90:ea:e3:e1:df:21:3a:1b:7f:
3d:83:76:25:d3:52:9e:b6:a3:4c:7f:24:71:10:30:
b0:70:49:03:b4:e5:52:3f:55:95:1f:3f:af:df:c5:
9a:dc:a6:36:12:b5:5e:fa:eb:dc:14:cf:cf:ac:3e:
52:b0:28:9f:37:77:b0:35:25:08:63:6b:92:3e:e0:
eb:1d:48:6f:ff:67:bf:02:3e:aa:34:dd:d9:aa:16:
1c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:77:91:BE:12:A8:D8:F5:CE:04:A6:CA:0C:8B:33:AE:71:EB:F2:65
X509v3 Authority Key Identifier:
keyid:72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3130332e34332e31362e302f32342d3234203d3e20313332383833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.43.16.0/24
Signature Algorithm: sha256WithRSAEncryption
37:b0:9c:fd:1d:e1:fc:76:2d:95:7d:c6:3b:98:5a:89:a5:a8:
c9:8f:fb:4a:7b:ab:2b:e9:15:93:16:7c:ca:e2:15:a7:bc:97:
f3:17:c1:28:37:b9:38:7f:12:b0:c4:05:1a:3c:bf:33:7c:72:
24:14:0f:95:1e:5b:3c:cf:28:cc:fe:e0:61:7b:19:2b:c5:b6:
f7:eb:20:b3:9e:80:ad:3a:00:fb:99:09:6b:92:5e:e8:61:f4:
05:04:bb:b2:6c:83:94:c3:42:f9:ce:df:bf:bc:2f:30:60:16:
51:5e:5c:3e:89:09:66:69:18:af:08:b1:5a:0f:cc:b3:7e:ad:
17:3a:b9:c8:d6:52:db:66:33:40:d7:61:7c:aa:3b:92:62:24:
c0:37:94:77:98:1f:d8:46:1b:1e:b6:99:77:27:32:66:c3:0c:
27:4b:04:bb:7d:e0:e1:e8:9b:78:95:c9:81:57:7e:a7:67:dc:
a7:a2:fb:73:a3:8b:12:92:28:30:53:16:ed:5f:9e:52:c0:9b:
80:92:f1:78:1c:df:51:1b:80:e8:2e:41:10:de:c9:3a:74:17:
f8:e5:40:22:91:8b:97:cc:be:8d:4d:28:58:a9:66:51:b5:ee:
2a:b0:38:9f:c0:50:a1:42:3f:1b:be:b6:03:89:71:9f:77:0e:
32:d1:f2:bf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:20:44 2026 by rpki-client