
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131322e36382e302f32332d3234203d3e20323135333035.roa
File: 3130332e3131322e36382e302f32332d3234203d3e20323135333035.roa (raw, json)
Hash identifier: 6nSNvQ3QfqXOWy11OtMkAu71X2kAADw6mRxV+wCCxTk=
Subject key identifier: 87:C5:E5:00:9B:0E:AF:95:36:50:82:C2:E7:03:D6:0A:13:1A:11:DF
Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial: 1DD0BC3E2819AE5E95F5DCB644BD6EC4F378EE20
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131322e36382e302f32332d3234203d3e20323135333035.roa
Signing time: Mon 13 Apr 2026 12:03:17 +0000
ROA not before: Mon 13 Apr 2026 11:58:17 +0000
ROA not after: Mon 12 Apr 2027 12:03:17 +0000
asID: 215305
IP address blocks: 103.112.68.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 07:45:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:d0:bc:3e:28:19:ae:5e:95:f5:dc:b6:44:bd:6e:c4:f3:78:ee:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
Validity
Not Before: Apr 13 11:58:17 2026 GMT
Not After : Apr 12 12:03:17 2027 GMT
Subject: CN=87C5E5009B0EAF95365082C2E703D60A131A11DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:08:ca:07:f6:5c:ee:f9:79:e8:17:77:fc:98:
bb:92:d3:34:dc:17:28:d9:3c:61:17:26:78:54:cf:
95:74:76:c4:c9:3c:55:1a:2f:c0:3b:94:bf:9d:5d:
1c:7e:d2:83:fa:3e:8c:f1:64:b0:be:87:4b:6a:df:
e2:32:c3:fb:37:e6:06:b1:80:df:e0:be:c5:2a:d0:
57:27:d4:78:40:44:c0:59:d0:ce:74:27:81:c3:a2:
d4:35:11:5d:b9:ca:f4:3e:a6:63:92:90:a4:e9:c9:
4c:7f:d8:24:69:56:0b:b4:a0:e3:78:37:bb:5f:03:
f4:8a:07:28:a0:a2:05:d2:61:d7:77:bc:5c:3e:28:
02:98:c6:cb:d0:b7:77:2f:3a:49:1c:12:65:bf:23:
5b:46:34:97:d3:9d:5e:1c:76:27:98:50:72:72:a9:
69:3e:09:66:6a:44:1d:b3:c1:0b:30:ad:56:e5:da:
25:9d:99:23:79:15:38:ed:1c:09:4c:19:99:59:8c:
4e:0c:c8:bf:98:27:ff:d6:2d:b1:e5:00:d0:35:f6:
0f:8a:54:a4:6f:74:5f:71:99:05:69:f4:46:9f:11:
45:ad:96:b1:32:2f:15:d8:f9:76:36:c5:98:c1:f2:
38:ca:be:c0:29:fc:04:14:51:02:e8:35:74:70:c6:
61:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C5:E5:00:9B:0E:AF:95:36:50:82:C2:E7:03:D6:0A:13:1A:11:DF
X509v3 Authority Key Identifier:
keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131322e36382e302f32332d3234203d3e20323135333035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.112.68.0/23
Signature Algorithm: sha256WithRSAEncryption
d1:d4:1e:1a:a5:10:53:37:77:fc:f0:ae:19:42:a5:9b:90:92:
bc:ee:c2:44:ca:72:df:94:3a:d1:6b:94:1d:3a:64:69:ca:d3:
45:4b:bf:0c:56:e0:4c:04:12:40:59:de:a3:9d:2d:1d:ba:7e:
90:87:fd:3b:81:5f:aa:47:76:4d:0f:2b:9f:b6:03:b3:4c:fd:
59:fe:e5:3a:7d:bf:6d:c3:80:5e:be:87:75:39:8f:5e:a9:c5:
5c:e3:bc:36:4c:bb:de:f8:49:3a:db:27:90:79:98:68:27:34:
26:da:05:c8:66:85:ac:4b:69:60:2b:b3:67:6b:a7:07:31:b7:
0e:8f:60:ff:5b:ac:62:5e:ae:4e:64:00:b5:2a:e7:13:7f:c4:
d8:23:13:b5:26:37:fc:4a:38:88:38:79:9b:24:ef:59:24:db:
7e:e9:e7:f5:4e:43:45:07:d3:14:74:5f:f2:7b:df:9a:d4:36:
ab:64:9e:11:27:a3:fe:f5:38:24:70:ea:72:6a:18:99:4a:a8:
b8:05:e0:42:72:ec:a1:ec:12:52:43:88:cd:d5:6f:bb:e4:8a:
04:10:d1:dc:46:0d:1b:41:bf:99:9a:0b:bc:e9:48:17:67:87:
05:18:91:8c:62:8e:45:60:37:a8:fd:72:ba:08:46:6a:b2:07:
4a:fe:dd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:41:28 2026 by rpki-client