
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3130332e3135362e32382e302f32332d3233203d3e2030.roa
File: 3130332e3135362e32382e302f32332d3233203d3e2030.roa (raw, json)
Hash identifier: +VVpx31pwBvvIP+WOqafuvAUPfgnSZrW1dYgV4mfWVc=
Subject key identifier: 5E:11:4C:B5:F9:E3:A8:8C:69:B5:5F:1B:68:5F:C1:3A:5B:FE:FE:9D
Certificate issuer: /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Certificate serial: 5CF5FC9CCEDDD1685B460FD7AA9C99338D5E4AF9
Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3130332e3135362e32382e302f32332d3233203d3e2030.roa
Signing time: Wed 15 Apr 2026 03:19:34 +0000
ROA not before: Wed 15 Apr 2026 03:14:34 +0000
ROA not after: Wed 14 Apr 2027 03:19:34 +0000
asID: 0
IP address blocks: 103.156.28.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 17:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:f5:fc:9c:ce:dd:d1:68:5b:46:0f:d7:aa:9c:99:33:8d:5e:4a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Validity
Not Before: Apr 15 03:14:34 2026 GMT
Not After : Apr 14 03:19:34 2027 GMT
Subject: CN=5E114CB5F9E3A88C69B55F1B685FC13A5BFEFE9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:61:86:84:3d:cb:4e:8f:1a:43:bf:27:ff:71:
93:e7:01:4b:6a:32:ab:db:a1:7f:83:53:a6:d4:33:
81:3e:8d:04:0e:5f:b7:f2:5f:c4:9a:d9:4c:9c:83:
b9:20:fe:e1:50:c5:d7:0f:9c:00:9b:c2:78:36:1a:
c3:2f:d0:67:18:e2:49:50:12:25:e1:19:fc:35:4d:
27:9e:cd:93:c2:2b:03:f8:88:38:ca:f6:85:25:66:
23:9a:99:4a:c6:cb:42:f0:52:64:d1:3e:ee:63:bc:
fd:5f:3a:2b:77:94:1a:f9:59:dd:cb:4c:9f:cf:3e:
8e:62:57:42:81:49:63:28:fd:e3:63:3e:5c:1b:d0:
28:35:b9:d8:4a:4b:97:6e:a3:52:43:46:11:01:67:
9d:23:3e:65:4c:15:43:b9:37:6f:60:d8:31:23:f8:
6f:f8:6a:c0:a1:6b:8a:00:ec:58:24:4a:c2:8e:78:
bd:a7:8b:52:8d:3f:cb:82:e0:6b:c1:7b:de:29:ad:
fc:b5:9b:c0:8c:4c:8d:fc:0a:70:a4:37:4a:ce:59:
6c:7e:3c:3c:27:4e:e8:d5:95:ed:79:ae:9e:c4:1c:
a3:e4:fa:19:ca:9e:2b:98:61:eb:c7:f2:4c:13:77:
1d:8b:9b:e6:0b:50:03:01:6d:89:b2:e0:95:cb:1f:
a9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:11:4C:B5:F9:E3:A8:8C:69:B5:5F:1B:68:5F:C1:3A:5B:FE:FE:9D
X509v3 Authority Key Identifier:
keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3130332e3135362e32382e302f32332d3233203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.156.28.0/23
Signature Algorithm: sha256WithRSAEncryption
39:4c:1a:4f:ba:d8:8b:cb:c2:bb:ad:60:8d:d5:b7:73:a8:88:
ee:40:8a:e0:2d:aa:3d:75:c1:b9:e9:8a:c3:10:c8:9c:dd:df:
fe:b1:77:02:bf:e7:c5:58:f2:c1:2d:e3:a5:a1:a4:7f:41:66:
41:fc:86:15:a0:5a:ee:04:41:87:3f:bf:8e:f5:d8:d2:de:e0:
ef:df:ea:62:60:11:39:7c:1c:da:5b:fa:10:c0:dd:01:bf:a6:
7d:08:ca:85:d5:7e:08:10:21:04:9a:10:e1:58:c4:88:5f:6e:
18:51:fe:be:de:0b:9a:74:5b:17:42:21:48:c4:bf:ce:c5:c3:
e4:38:17:ca:02:0f:bb:55:02:d8:5b:ac:44:37:0d:87:28:61:
9a:3b:75:80:5b:bd:82:3e:ce:56:2d:eb:12:80:95:fb:d0:d3:
c4:13:00:50:27:3b:9e:04:ad:c8:f7:4b:2b:2f:d9:a8:07:41:
e0:31:a1:aa:e2:40:4e:92:8c:0f:f6:6d:8c:5b:6e:9a:95:96:
fc:ca:9e:50:60:5b:4b:8b:26:ae:ba:6b:2c:02:56:7d:57:a5:
d6:34:ad:94:28:a8:f1:a7:1d:99:74:57:c4:94:5c:9c:05:67:
d3:29:f4:8b:ad:ee:6d:5e:e6:cc:99:ae:8d:d0:4d:00:3b:cf:
66:24:7d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:35:43 2026 by rpki-client