
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3130332e34332e31372e302f32342d3234203d3e20313332383833.roa
File: 3130332e34332e31372e302f32342d3234203d3e20313332383833.roa (raw, json)
Hash identifier: Y4bLyzOvB8vpCyqmm35FxBPPUZj7MRs9fRKs/nZam7U=
Subject key identifier: 2D:53:31:1F:58:38:61:89:25:56:A8:70:DF:A3:4D:0B:B2:69:11:C8
Certificate issuer: /CN=727F645FC8FE158EB2755D7F914A4325882E78A0
Certificate serial: 493D7C85F187F83DEB80B25B65C5C8BE6DD45233
Authority key identifier: 72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3130332e34332e31372e302f32342d3234203d3e20313332383833.roa
Signing time: Wed 08 Apr 2026 05:59:10 +0000
ROA not before: Wed 08 Apr 2026 05:54:10 +0000
ROA not after: Wed 07 Apr 2027 05:59:10 +0000
asID: 132883
IP address blocks: 103.43.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 07:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:3d:7c:85:f1:87:f8:3d:eb:80:b2:5b:65:c5:c8:be:6d:d4:52:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727F645FC8FE158EB2755D7F914A4325882E78A0
Validity
Not Before: Apr 8 05:54:10 2026 GMT
Not After : Apr 7 05:59:10 2027 GMT
Subject: CN=2D53311F583861892556A870DFA34D0BB26911C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7b:85:66:6a:b6:b8:38:94:eb:4b:fc:d7:39:
e4:13:12:51:a0:33:1a:78:c3:38:75:2c:05:8e:8c:
c3:ae:54:e5:43:a8:73:00:5a:c8:60:1b:bd:bf:e3:
1a:e2:34:42:11:cb:2c:bf:6c:ad:47:0a:b6:68:e6:
44:d7:bb:59:5d:ff:74:12:e4:35:dd:15:81:4a:2f:
80:cf:f5:37:8c:8b:81:48:86:82:85:06:c6:0b:70:
5c:75:b6:c6:f6:30:12:b6:fc:94:bb:d4:91:6c:17:
5b:19:b8:a4:ed:69:39:b3:64:8a:e4:1a:ad:4d:ad:
71:6f:fa:88:23:54:06:3e:09:5c:f6:c3:ba:8f:fd:
ba:dc:f9:ba:0c:1e:8a:d6:f1:18:a0:0e:49:08:04:
f2:36:bb:b5:f4:e8:46:27:1d:93:06:80:83:4d:64:
b6:4d:56:e4:87:b0:44:53:33:ca:45:4f:50:9a:d7:
b9:24:0a:87:10:b5:16:10:29:b6:bb:08:74:de:cd:
4f:5b:30:c7:b7:51:22:80:c9:f7:bf:b5:cc:63:0a:
d2:09:a1:ec:62:83:87:64:0d:5c:87:8d:17:fa:13:
0b:07:57:36:47:7a:52:79:1d:f3:b5:de:cd:e3:35:
83:c3:9e:88:46:4d:93:82:16:4a:45:4a:2f:ce:88:
5d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:53:31:1F:58:38:61:89:25:56:A8:70:DF:A3:4D:0B:B2:69:11:C8
X509v3 Authority Key Identifier:
keyid:72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3130332e34332e31372e302f32342d3234203d3e20313332383833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.43.17.0/24
Signature Algorithm: sha256WithRSAEncryption
92:71:df:5d:ff:75:4b:e0:f0:b0:0e:06:66:6c:c4:1d:1a:31:
26:9d:ae:ad:ae:e9:d5:2d:18:4b:49:99:bd:97:9a:87:a5:43:
24:53:a3:31:ab:88:30:56:66:8c:1d:80:a8:b4:29:fb:fd:8e:
9b:bf:69:ac:5d:98:21:26:40:bf:1b:63:b0:38:45:92:e0:ff:
1f:e0:2f:d2:dd:5f:8d:85:ae:01:d8:ea:8f:cb:70:3c:88:15:
04:2f:b9:c5:3c:cb:cc:aa:18:ba:ef:ae:00:03:8b:79:21:5c:
ef:8f:68:18:f8:82:22:86:34:7e:af:87:78:7e:ac:76:13:99:
f3:a9:67:23:bb:68:95:28:93:2f:54:0b:90:c1:0a:4c:e0:ff:
aa:1b:aa:9b:b3:64:d4:c8:09:46:09:dc:96:0e:9a:79:21:e9:
68:ce:74:96:b1:fc:9f:c1:99:83:df:98:19:9a:7e:81:3c:88:
aa:5f:ea:50:1f:4f:70:d3:4b:4b:2e:15:c0:4a:8d:0e:bc:07:
fb:45:0e:2d:38:82:3c:fa:e2:96:7b:88:aa:c9:88:b9:18:e7:
50:7c:20:74:22:b5:76:0c:f9:02:7c:3b:dd:8b:ae:4d:b6:f5:
b1:95:6a:b8:96:e4:ec:36:c1:c7:52:43:32:be:d7:3c:3a:f3:
d9:39:ec:e5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:01:50 2026 by rpki-client