
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3130332e34332e31392e302f32342d3234203d3e20313332383833.roa
File: 3130332e34332e31392e302f32342d3234203d3e20313332383833.roa (raw, json)
Hash identifier: 8Eq0oLTh31AxDX0nHXIbnNmbdSMznta0FdMSV4iVE/g=
Subject key identifier: E8:28:B1:AD:1F:CD:E1:73:87:09:AE:5C:AD:02:4C:FC:30:D7:E9:3E
Certificate issuer: /CN=727F645FC8FE158EB2755D7F914A4325882E78A0
Certificate serial: 016B3CB2E3CCC91F23A6153D65B88BB4AFC35576
Authority key identifier: 72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3130332e34332e31392e302f32342d3234203d3e20313332383833.roa
Signing time: Wed 08 Apr 2026 05:59:10 +0000
ROA not before: Wed 08 Apr 2026 05:54:10 +0000
ROA not after: Wed 07 Apr 2027 05:59:10 +0000
asID: 132883
IP address blocks: 103.43.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 07:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:6b:3c:b2:e3:cc:c9:1f:23:a6:15:3d:65:b8:8b:b4:af:c3:55:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727F645FC8FE158EB2755D7F914A4325882E78A0
Validity
Not Before: Apr 8 05:54:10 2026 GMT
Not After : Apr 7 05:59:10 2027 GMT
Subject: CN=E828B1AD1FCDE1738709AE5CAD024CFC30D7E93E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d1:50:70:8d:fa:5e:83:d1:66:02:81:3d:7e:
d6:0a:fb:2d:5f:9c:47:c9:09:ae:4b:7f:14:05:2f:
aa:2f:36:4f:ef:5c:73:85:eb:ac:9e:69:fd:77:ba:
3b:6b:04:7a:c7:95:98:8a:75:92:00:07:8f:46:69:
2c:27:e2:ef:80:ab:12:a0:77:3b:13:07:f9:00:54:
44:d5:08:89:d7:82:12:30:b9:a3:13:18:52:48:c2:
63:3d:f1:04:72:ee:77:b4:ee:1d:9b:e0:37:e1:66:
ae:69:ad:7a:8f:30:20:3a:4e:d0:4c:fb:0d:5a:24:
67:85:a3:8d:dc:ea:3e:0b:6e:1c:90:af:c5:d5:94:
4e:40:33:98:5e:79:58:a1:f7:7c:f4:d6:0d:ed:03:
77:42:f6:50:ff:5f:2f:33:a0:f0:c6:35:b0:2f:75:
6d:26:52:86:47:3a:4a:dd:10:2c:45:a6:30:e6:fb:
01:13:f7:51:a6:3d:dd:6c:6a:ee:2e:78:a5:75:1c:
2d:06:90:f9:54:ce:20:e5:30:dc:10:60:a0:5d:fd:
1d:f9:66:7b:6b:8c:63:8b:3b:b2:8f:85:08:de:a0:
10:2e:67:c4:28:28:e7:db:e6:2a:78:f9:69:63:4e:
57:75:f0:69:a0:b2:8b:95:93:f4:ca:32:35:3b:34:
15:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:28:B1:AD:1F:CD:E1:73:87:09:AE:5C:AD:02:4C:FC:30:D7:E9:3E
X509v3 Authority Key Identifier:
keyid:72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3130332e34332e31392e302f32342d3234203d3e20313332383833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.43.19.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:63:19:a1:55:f4:94:14:63:65:d2:74:fb:b7:6e:a0:51:70:
ec:85:12:dd:51:f7:4c:89:34:b9:79:a6:ed:b8:d4:44:bd:a3:
12:0f:f6:cb:6d:99:a3:7c:02:ba:f9:b5:a6:47:5e:ba:24:8d:
e7:39:de:ba:cb:2e:46:fd:2d:ca:43:99:b5:2d:b7:fa:b9:a5:
ec:1e:e4:e6:3b:91:33:a7:a9:35:a4:b4:c3:a0:66:65:6d:a4:
31:f8:6e:06:f1:61:32:f6:b5:fd:a9:5f:4c:f6:68:62:9d:a8:
d2:85:19:00:f7:7e:53:a0:d1:24:34:2f:73:19:e8:48:66:32:
00:f9:54:b4:0d:f0:e8:5a:f3:16:9b:97:1c:bb:de:f4:06:e4:
0f:a1:bd:d6:7e:9d:ef:69:9d:cd:4a:5f:c1:21:04:df:51:60:
11:c9:34:ee:f5:c0:40:d9:42:b8:a4:7b:a6:6d:17:d6:cb:11:
25:57:52:c4:5b:f1:e1:c8:78:36:e2:7a:ed:82:6a:af:2b:27:
a7:5a:67:02:7d:04:93:ba:49:b6:09:1f:de:cd:0d:3e:19:fa:
a6:34:e9:a3:7c:e7:6a:15:89:c6:57:21:56:b1:00:28:4c:a5:
46:4e:09:44:bd:75:bd:d5:26:d1:c2:ef:7a:7e:d9:31:71:b3:
ac:1f:3c:61
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUAWs8suPMyR8jphU9ZbiLtK/DVXYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI3RjY0NUZDOEZFMTU4RUIyNzU1RDdGOTE0QTQzMjU4
ODJFNzhBMDAeFw0yNjA0MDgwNTU0MTBaFw0yNzA0MDcwNTU5MTBaMDMxMTAvBgNV
BAMTKEU4MjhCMUFEMUZDREUxNzM4NzA5QUU1Q0FEMDI0Q0ZDMzBEN0U5M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs0VBwjfpeg9FmAoE9ftYK+y1f
nEfJCa5LfxQFL6ovNk/vXHOF66yeaf13ujtrBHrHlZiKdZIAB49GaSwn4u+AqxKg
dzsTB/kAVETVCInXghIwuaMTGFJIwmM98QRy7ne07h2b4DfhZq5prXqPMCA6TtBM
+w1aJGeFo43c6j4LbhyQr8XVlE5AM5heeVih93z01g3tA3dC9lD/Xy8zoPDGNbAv
dW0mUoZHOkrdECxFpjDm+wET91GmPd1sau4ueKV1HC0GkPlUziDlMNwQYKBd/R35
ZntrjGOLO7KPhQjeoBAuZ8QoKOfb5ip4+WljTld18GmgsouVk/TKMjU7NBWRAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU6CixrR/N4XOHCa5crQJM/DDX6T4wHwYDVR0j
BBgwFoAUcn9kX8j+FY6ydV1/kUpDJYgueKAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODk5MzU0ODI4ODAwMi8wLzcyN0Y2NDVGQzhGRTE1OEVCMjc1NUQ3RjkxNEE0
MzI1ODgyRTc4QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzI3RjY0NUZDOEZFMTU4RUIyNzU1RDdGOTE0QTQzMjU4ODJFNzhBMC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4ODk5MzU0ODI4ODAwMi8wLzMxMzAzMzJlMzQz
MzJlMzEzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMjM4MzgzMy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGcrEzANBgkqhkiG9w0BAQsFAAOCAQEAT2MZoVX0lBRjZdJ0+7duoFFw
7IUS3VH3TIk0uXmm7bjURL2jEg/2y22Zo3wCuvm1pkdeuiSN5zneussuRv0tykOZ
tS23+rml7B7k5juRM6epNaS0w6BmZW2kMfhuBvFhMva1/alfTPZoYp2o0oUZAPd+
U6DRJDQvcxnoSGYyAPlUtA3w6FrzFpuXHLve9AbkD6G91n6d72mdzUpfwSEE31Fg
Eck07vXAQNlCuKR7pm0X1ssRJVdSxFvx4ch4NuJ67YJqrysnp1pnAn0Ek7pJtgkf
3s0NPhn6pjTpo3znahWJxlchVrEAKEylRk4JRL11vdUm0cLven7ZMXGzrB88YQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:29:07 2026 by rpki-client