
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3130312e3133322e302e302f31352d3234203d3e203337393633.roa
File: 3130312e3133322e302e302f31352d3234203d3e203337393633.roa (raw, json)
Hash identifier: PgEayyjblxwmQtn5/ykMvfP/SGAD+IM6RqvWkL7jT/M=
Subject key identifier: 98:2D:FD:EB:64:DF:E6:0E:BE:7D:AE:4B:1B:50:2C:87:1C:36:9D:59
Certificate issuer: /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E
Certificate serial: 46249B3BD082583E7AB8575752C2A32346E6A5E2
Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3130312e3133322e302e302f31352d3234203d3e203337393633.roa
Signing time: Thu 16 Apr 2026 02:04:08 +0000
ROA not before: Thu 16 Apr 2026 01:59:08 +0000
ROA not after: Thu 15 Apr 2027 02:04:08 +0000
asID: 37963
IP address blocks: 101.132.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 11:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:24:9b:3b:d0:82:58:3e:7a:b8:57:57:52:c2:a3:23:46:e6:a5:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E
Validity
Not Before: Apr 16 01:59:08 2026 GMT
Not After : Apr 15 02:04:08 2027 GMT
Subject: CN=982DFDEB64DFE60EBE7DAE4B1B502C871C369D59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a2:8f:fa:0c:0d:d2:8b:cc:83:15:94:bb:d5:
69:f6:c5:59:65:c2:5b:68:ca:d1:ba:53:f6:f0:ec:
ac:1e:12:2f:8c:f4:a9:dd:17:a2:68:49:d3:d8:9d:
10:4b:e4:d5:74:0f:f0:dc:bd:eb:2d:50:29:88:a2:
b5:41:a5:36:f7:b9:69:a3:2e:c0:88:c5:e3:45:4a:
cf:96:96:27:17:9d:ba:f7:a0:bc:bd:57:69:bb:43:
36:01:7a:e7:4b:87:0b:ab:e8:ea:22:79:dd:5d:a2:
24:1a:6d:ad:be:88:45:f1:1c:5f:f2:7e:67:91:56:
7c:1b:ab:5c:30:dc:fd:88:08:66:d0:2d:98:4f:30:
c4:53:b4:df:ab:32:71:71:22:55:9f:35:1c:9a:29:
99:09:82:38:b3:f1:d7:3e:42:dd:43:d3:36:ab:b8:
dd:28:83:55:e4:df:89:d0:94:4c:d7:da:5b:7a:bd:
be:58:3c:b4:64:cc:99:37:0e:53:2a:3b:88:3c:7b:
6b:d1:4a:af:8b:19:97:4c:8c:96:15:25:0e:e6:c1:
ee:ea:bf:02:e1:ec:d8:a2:f4:d9:7a:a7:30:33:a6:
5c:3f:5c:cc:82:4d:9c:74:c0:0b:61:bd:06:bc:9f:
b5:c4:cc:43:8e:67:77:72:6e:bd:f7:eb:33:6c:32:
8f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2D:FD:EB:64:DF:E6:0E:BE:7D:AE:4B:1B:50:2C:87:1C:36:9D:59
X509v3 Authority Key Identifier:
keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3130312e3133322e302e302f31352d3234203d3e203337393633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.132.0.0/15
Signature Algorithm: sha256WithRSAEncryption
3d:5e:35:cb:8e:9d:3b:fa:c4:c7:3c:4c:e4:23:3c:22:a8:dd:
43:6f:6f:40:1f:00:0d:86:f1:63:c4:51:5e:9d:c1:40:8b:e3:
ff:8b:91:1a:be:94:ea:a4:48:4d:d4:09:a3:37:99:51:fd:f8:
5b:c3:43:0f:80:91:46:50:54:54:96:15:95:80:43:c5:01:89:
27:85:3d:24:e0:8b:ab:c4:10:cc:df:05:7e:be:45:c3:62:eb:
83:cb:68:fe:31:2e:2b:0f:25:ef:32:13:79:4f:e3:2c:9a:54:
a2:80:d5:ac:09:33:d5:fc:a0:07:16:69:eb:a9:4f:df:7c:da:
b0:e4:63:42:f0:12:96:65:cf:17:3c:e8:39:bc:a9:58:9a:32:
13:37:38:cc:a3:ea:a3:c9:96:1d:6a:2c:4f:5a:f7:c0:c1:6a:
91:22:e0:05:e7:78:d7:f2:18:4c:90:9c:4b:9b:a9:53:6f:a0:
db:1d:0b:b9:8e:ba:a3:37:38:04:14:37:da:cb:c3:bc:fb:25:
22:13:c1:49:c5:d7:1f:20:cc:9a:05:20:ca:8d:a9:ab:29:ca:
ec:a1:70:c1:95:05:8f:2b:32:22:4e:c0:02:62:4e:d3:59:cd:
88:18:02:87:76:bb:92:3f:d8:ba:e5:14:f0:9a:5e:cf:50:a3:
11:25:37:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:19:55 2026 by rpki-client