
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3130332e35362e31372e302f32342d3234203d3e20313332383833.roa
File: 3130332e35362e31372e302f32342d3234203d3e20313332383833.roa (raw, json)
Hash identifier: e95du5dQAXHhRcCTJIAb2GAlVK1fBfDxgvojfnogAHM=
Subject key identifier: 9E:C1:18:76:D5:E1:43:05:FB:F9:4E:26:DD:BB:AB:08:72:6E:39:86
Certificate issuer: /CN=727F645FC8FE158EB2755D7F914A4325882E78A0
Certificate serial: 6343879DD88E8D8B52604D613A673E15277B5E26
Authority key identifier: 72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3130332e35362e31372e302f32342d3234203d3e20313332383833.roa
Signing time: Wed 08 Apr 2026 05:59:10 +0000
ROA not before: Wed 08 Apr 2026 05:54:10 +0000
ROA not after: Wed 07 Apr 2027 05:59:10 +0000
asID: 132883
IP address blocks: 103.56.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 07:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:43:87:9d:d8:8e:8d:8b:52:60:4d:61:3a:67:3e:15:27:7b:5e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727F645FC8FE158EB2755D7F914A4325882E78A0
Validity
Not Before: Apr 8 05:54:10 2026 GMT
Not After : Apr 7 05:59:10 2027 GMT
Subject: CN=9EC11876D5E14305FBF94E26DDBBAB08726E3986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ca:7e:3b:f2:c4:29:d5:b3:17:24:88:ec:55:
d7:21:57:87:5c:0d:7d:4d:56:ed:d5:dc:cf:d4:08:
a7:c5:95:bb:02:36:96:7c:b4:52:cc:94:2d:ff:b0:
7e:df:bc:b0:f8:d0:4d:8c:08:5b:9c:82:31:23:e7:
4e:65:1d:2c:32:83:e5:0d:d9:3a:6f:61:74:85:15:
2c:e2:60:85:ff:3c:3f:1e:16:31:ab:20:3c:61:c3:
74:3b:27:5d:33:78:6f:e8:13:7f:cd:30:3a:85:ab:
a3:a6:22:b8:ed:d4:8a:bd:76:48:19:15:83:77:a6:
a1:78:f1:b4:c8:75:2f:d7:db:e3:61:23:c5:42:25:
fc:28:7f:01:a2:93:1d:92:4b:7a:cd:e1:85:c6:3b:
31:31:4f:97:df:4e:6f:33:3c:a1:a1:89:7e:99:8e:
da:90:75:d5:b6:bb:c5:65:c0:d7:88:fc:f0:66:9c:
04:bc:53:a5:f0:39:06:5e:26:8e:ea:a4:f3:9d:5f:
19:e5:ea:68:d5:16:6c:85:a1:2f:85:f9:30:34:ef:
0c:9f:06:ae:f4:40:12:03:59:59:8c:de:a5:6f:82:
d5:01:1c:3b:b8:b2:6a:5e:9c:72:4b:57:ac:80:b4:
09:03:5c:93:75:dc:01:d4:3f:6b:29:e3:1d:c8:07:
a7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C1:18:76:D5:E1:43:05:FB:F9:4E:26:DD:BB:AB:08:72:6E:39:86
X509v3 Authority Key Identifier:
keyid:72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3130332e35362e31372e302f32342d3234203d3e20313332383833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.56.17.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:2d:3d:e6:04:2e:86:5b:64:48:fe:d3:43:9f:53:83:fb:88:
f1:69:7a:d9:44:14:a2:2f:91:b7:b3:30:f2:c0:74:35:42:cd:
2a:d1:cf:b9:da:6e:ee:93:14:0e:52:3a:41:1d:a0:b2:fe:12:
cd:f4:f8:c7:35:90:82:ac:dd:0e:c4:16:4c:aa:a0:2a:2b:97:
6d:f7:c9:82:b2:a5:56:a6:cd:f2:69:5c:1c:53:fb:73:3a:a6:
3b:e2:84:61:10:d3:3a:fb:67:96:eb:4f:ca:54:9b:27:89:27:
34:34:85:4c:81:94:eb:bf:f2:20:14:57:d7:66:cf:cf:e4:53:
b2:df:7a:53:27:3d:e2:a5:24:dd:26:45:3e:26:e7:37:10:12:
83:f9:63:ea:af:2f:4a:0f:60:ac:ad:68:6d:e7:cf:31:28:69:
c3:af:bd:92:21:f2:2b:5a:94:1a:05:33:6b:0b:c8:b5:47:1c:
d8:a1:c0:c7:7a:0f:75:4c:61:a3:84:09:d3:e5:38:b2:1d:6a:
6e:7d:3c:11:4e:f3:00:d6:50:9b:70:e8:de:a0:75:3a:b6:dd:
61:92:f3:a1:9e:4c:38:89:51:c6:76:23:11:8d:60:1a:62:c3:
46:08:8b:ad:ec:0d:ae:19:d4:05:79:37:c5:92:d3:ce:eb:85:
6b:98:75:52
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:20:34 2026 by rpki-client