
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3130332e35362e31362e302f32342d3234203d3e20313332383833.roa
File: 3130332e35362e31362e302f32342d3234203d3e20313332383833.roa (raw, json)
Hash identifier: VOqIkMc+kKB+0g4MsxguR78fkJ8eSZV8sD7HTViTEJg=
Subject key identifier: 39:7A:ED:BE:69:FD:C6:6B:BD:F7:A4:07:36:24:F8:23:FA:11:46:38
Certificate issuer: /CN=727F645FC8FE158EB2755D7F914A4325882E78A0
Certificate serial: 25C72F2BBB172DF8CEB38ECC351F9B27AE4E795D
Authority key identifier: 72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3130332e35362e31362e302f32342d3234203d3e20313332383833.roa
Signing time: Wed 08 Apr 2026 05:59:10 +0000
ROA not before: Wed 08 Apr 2026 05:54:10 +0000
ROA not after: Wed 07 Apr 2027 05:59:10 +0000
asID: 132883
IP address blocks: 103.56.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 07:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:c7:2f:2b:bb:17:2d:f8:ce:b3:8e:cc:35:1f:9b:27:ae:4e:79:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727F645FC8FE158EB2755D7F914A4325882E78A0
Validity
Not Before: Apr 8 05:54:10 2026 GMT
Not After : Apr 7 05:59:10 2027 GMT
Subject: CN=397AEDBE69FDC66BBDF7A4073624F823FA114638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a3:e5:52:dc:95:d3:e1:19:7d:8c:41:21:ad:
95:6d:ed:8a:bc:32:e9:8c:76:59:b6:df:85:f0:9f:
8a:e4:7b:36:c7:fa:6a:f7:f6:69:1f:af:02:32:c8:
08:bd:a9:9e:f8:cb:2d:c8:19:4f:6d:74:fa:5f:c2:
a8:56:0b:46:a1:a3:61:a0:3a:49:d5:12:83:c9:b3:
1f:0d:c1:a3:62:14:92:ba:b6:15:d2:7e:86:6d:67:
39:2f:d4:91:f2:46:93:27:65:4d:db:5c:cb:d4:a7:
2f:99:e0:f9:e3:18:81:c1:49:10:4d:b9:5c:18:b1:
c4:1b:9e:32:c1:18:12:16:b4:ff:72:1a:a0:95:4b:
88:22:58:f1:ef:65:4a:80:e4:42:06:bf:63:45:d3:
13:65:d0:82:27:09:2c:10:ff:08:70:2f:81:3b:0d:
54:79:d6:a5:eb:0b:28:78:e1:24:84:57:91:b4:64:
78:6f:3c:c8:a4:b5:08:a9:ae:09:17:c6:8c:6f:d2:
3c:04:0b:9c:dc:0c:20:fd:15:56:60:94:1c:c0:a1:
34:5f:bc:b9:5e:1d:87:2f:d2:c3:5a:d9:68:a3:dd:
24:f8:87:f6:9b:a0:2d:7a:fc:67:d3:c5:cb:4d:40:
51:70:3f:60:77:81:a9:95:32:3b:a5:73:8d:3c:4c:
dd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7A:ED:BE:69:FD:C6:6B:BD:F7:A4:07:36:24:F8:23:FA:11:46:38
X509v3 Authority Key Identifier:
keyid:72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3130332e35362e31362e302f32342d3234203d3e20313332383833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.56.16.0/24
Signature Algorithm: sha256WithRSAEncryption
77:a3:37:9a:93:b5:cc:0a:88:87:0d:56:d4:51:45:4c:30:2b:
57:27:50:59:98:d1:86:84:cd:a1:e6:82:4d:83:7b:14:61:b1:
7b:23:a3:9a:da:24:29:d6:56:52:37:ad:bd:35:89:4d:67:b3:
d7:9e:65:6f:c4:2e:39:a0:99:5e:f2:e3:3f:de:ab:2c:19:d9:
c7:ce:07:39:28:b9:e3:89:4f:ad:fc:f4:b5:3e:5c:ec:08:1e:
a6:b4:55:f8:91:00:1c:5c:d2:f1:09:1f:f8:3d:9d:e1:b4:6a:
75:ba:35:b0:5b:f2:4e:87:ff:52:29:0d:29:f5:a7:31:fa:78:
c5:2b:cb:4b:a6:ad:fc:54:74:d4:ad:f2:12:54:c4:5d:59:33:
ec:de:39:33:02:6a:f3:3d:e4:3b:11:6a:66:30:8c:87:b9:55:
d9:13:de:9a:bf:d8:ef:01:4d:9f:ce:d2:ec:ff:c7:a5:ff:3f:
f1:47:d9:92:b0:82:89:f9:36:e4:44:8d:2b:f6:4d:3a:33:bf:
1a:de:22:31:ce:43:5f:57:d7:17:e9:71:98:96:f6:a6:cc:7b:
ae:fe:69:84:de:1c:94:d0:7d:dc:94:e3:24:c2:85:81:cb:18:
21:2b:25:62:8f:af:52:05:30:69:40:a5:9a:d2:c6:b7:34:33:
2a:ab:0d:49
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:20:02 2026 by rpki-client