
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3130332e34332e31382e302f32342d3234203d3e20313332383833.roa
File: 3130332e34332e31382e302f32342d3234203d3e20313332383833.roa (raw, json)
Hash identifier: 5mwMibMLPPK4nG8lkrPfet4YTWk4RP5rDtRZx3ikwqQ=
Subject key identifier: B6:A1:A0:94:63:53:0A:00:E1:8E:AA:7C:AC:10:F6:17:0A:CC:5A:B9
Certificate issuer: /CN=727F645FC8FE158EB2755D7F914A4325882E78A0
Certificate serial: 1C3A0BF3315D1593076B54106E98062B34813F60
Authority key identifier: 72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3130332e34332e31382e302f32342d3234203d3e20313332383833.roa
Signing time: Wed 08 Apr 2026 05:59:10 +0000
ROA not before: Wed 08 Apr 2026 05:54:10 +0000
ROA not after: Wed 07 Apr 2027 05:59:10 +0000
asID: 132883
IP address blocks: 103.43.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 07:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:3a:0b:f3:31:5d:15:93:07:6b:54:10:6e:98:06:2b:34:81:3f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727F645FC8FE158EB2755D7F914A4325882E78A0
Validity
Not Before: Apr 8 05:54:10 2026 GMT
Not After : Apr 7 05:59:10 2027 GMT
Subject: CN=B6A1A09463530A00E18EAA7CAC10F6170ACC5AB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:63:7b:0e:2f:96:17:92:83:58:f3:58:97:ef:
ff:de:43:f1:82:1a:91:f7:36:ef:4f:04:99:cc:16:
cf:19:4d:d3:d8:36:6d:ec:fb:13:16:f7:fd:dc:0f:
96:ea:83:8a:d9:e6:f1:69:1e:50:d9:3b:ce:6e:c3:
96:4a:9c:35:87:ae:f9:cc:a5:8e:38:47:91:a5:ed:
ec:5b:82:63:ea:0f:a0:65:76:af:f8:b2:f6:46:6a:
cc:cd:c4:6f:9f:0e:02:48:83:2f:b1:49:4b:60:d3:
c8:f0:92:02:40:c7:d0:79:2d:a2:74:f3:3b:9a:d5:
b2:d3:b0:e9:22:08:be:8a:ce:fd:75:06:21:d8:d1:
2e:38:dd:98:48:9a:8a:92:aa:ed:98:48:a1:62:8a:
34:4c:00:02:ab:28:d2:cf:14:b1:5e:a2:98:01:34:
d5:45:27:fb:f4:e7:3a:86:f6:48:70:2f:69:44:80:
48:80:c0:b4:a6:7e:32:ee:6c:85:e6:b1:97:b8:0c:
9a:f5:44:4c:23:47:97:29:0e:ad:64:65:51:1d:1e:
8f:f9:38:69:96:bc:ab:36:b9:e7:6f:f5:c8:30:7b:
a7:d7:c0:33:55:a6:33:87:8b:1a:cd:68:1e:7f:e3:
ac:98:ab:67:5d:b4:9f:2f:e4:6e:e7:88:d5:d8:3b:
7e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A1:A0:94:63:53:0A:00:E1:8E:AA:7C:AC:10:F6:17:0A:CC:5A:B9
X509v3 Authority Key Identifier:
keyid:72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3130332e34332e31382e302f32342d3234203d3e20313332383833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.43.18.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:14:b5:45:f4:6c:c5:e6:92:51:d7:91:fb:4a:86:51:38:83:
65:00:4c:ad:d9:c0:b2:ca:38:9b:9d:a8:bf:66:b9:7d:e5:ef:
78:66:c1:be:d2:b6:1a:07:87:36:d7:77:6d:58:1f:58:f7:7b:
cf:f4:1e:50:1b:37:da:6a:ae:73:22:33:d9:f9:0e:f7:2e:9e:
5e:37:b6:12:72:a4:3a:d5:b2:e8:da:3e:fd:56:37:d9:e2:1d:
d2:05:38:f4:1b:4e:b8:d1:87:1e:3b:2f:39:67:9b:95:1f:24:
ed:1d:54:f5:6b:7a:95:40:b7:f0:d6:dc:3a:e1:5d:95:bf:ef:
92:fb:19:82:e7:fc:5b:95:65:c4:ee:db:32:94:ec:88:5d:6c:
ef:74:df:69:e6:60:a7:43:e6:3b:49:1e:ba:1f:fd:e6:37:42:
cb:a6:79:eb:f5:67:07:c0:7b:0b:95:bc:43:58:6b:f5:04:4e:
2c:46:3a:ee:32:e1:52:13:a6:a0:e7:04:6f:7e:c5:ed:30:06:
16:16:65:54:d5:51:6b:e5:a4:11:60:81:78:0d:d0:4d:cc:d2:
47:3c:7c:61:36:d5:c4:78:4f:94:8f:ff:a8:78:96:ea:90:a3:
3d:07:c5:ea:df:b8:81:41:c8:eb:1a:23:82:5f:88:62:65:c8:
45:76:25:19
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:19:45 2026 by rpki-client