
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3130332e33382e3233322e302f32322d3232203d3e203137363231.roa
File: 3130332e33382e3233322e302f32322d3232203d3e203137363231.roa (raw, json)
Hash identifier: yQ/XRcjmRlXmh2AusE3sZH/N3CF7gYNE6v3YW9lNckM=
Subject key identifier: 76:8B:44:66:BA:FF:27:58:54:72:6E:B9:40:DE:0C:4F:01:B5:3D:52
Certificate issuer: /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Certificate serial: 03499693C1DD8CFAA859EAD7BFF2DB4F635D5ABC
Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3130332e33382e3233322e302f32322d3232203d3e203137363231.roa
Signing time: Wed 15 Apr 2026 04:13:00 +0000
ROA not before: Wed 15 Apr 2026 04:08:00 +0000
ROA not after: Wed 14 Apr 2027 04:13:00 +0000
asID: 17621
IP address blocks: 103.38.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 12:18:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:49:96:93:c1:dd:8c:fa:a8:59:ea:d7:bf:f2:db:4f:63:5d:5a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Validity
Not Before: Apr 15 04:08:00 2026 GMT
Not After : Apr 14 04:13:00 2027 GMT
Subject: CN=768B4466BAFF275854726EB940DE0C4F01B53D52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b1:2e:9f:1e:75:c4:48:67:d8:98:9e:8d:62:
d4:7d:5d:f9:ce:90:f2:08:bf:7e:66:a3:d5:cf:45:
45:42:11:fd:5e:f4:ab:0d:58:fd:f6:34:36:0f:36:
e6:7b:56:13:fd:1b:e1:f4:dd:e5:ba:72:5d:e2:cc:
65:72:75:cb:b8:1e:73:00:a1:63:b0:32:99:57:ed:
e0:60:60:c3:a4:6c:89:a6:2b:91:57:ba:13:df:e3:
58:54:e0:64:0a:c8:80:36:ad:4a:63:31:82:5e:1e:
d2:b1:1e:b9:04:fe:fa:17:2c:9f:48:16:0d:75:96:
f0:1b:0d:04:e4:98:61:9b:50:1a:1d:5f:30:bd:6e:
c8:ff:b7:3a:66:7f:95:22:32:aa:89:10:4f:5f:cd:
1c:5e:be:d5:31:e1:0e:b9:96:84:c9:fb:bb:1a:2a:
9a:2a:54:9d:63:8f:d8:08:07:84:64:24:8b:dd:1f:
68:36:4c:0c:3e:bd:ec:62:36:a3:27:8e:1e:f0:2f:
b8:32:d8:35:6a:a9:8e:04:eb:3b:cf:0f:ff:c8:6a:
21:52:e3:0b:a3:d5:14:d4:75:e6:f2:51:79:a8:6f:
d1:97:a7:17:46:e8:e2:33:e8:a5:42:d3:c2:0a:97:
33:cf:86:ca:e5:12:55:a1:dd:99:de:ec:c8:f4:ca:
48:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8B:44:66:BA:FF:27:58:54:72:6E:B9:40:DE:0C:4F:01:B5:3D:52
X509v3 Authority Key Identifier:
keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3130332e33382e3233322e302f32322d3232203d3e203137363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.38.232.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:04:4f:67:a8:07:ad:1c:37:f1:1c:47:44:0e:25:4b:96:88:
df:bf:ea:12:97:81:ad:5a:09:f6:dc:af:9e:71:81:b3:19:2c:
08:19:09:80:e0:9a:ad:b1:80:fc:7d:f3:ed:0d:33:76:4f:a5:
2a:53:0b:d7:8e:6c:e2:8d:65:78:03:fd:89:98:97:cb:3b:eb:
a2:e0:59:e5:80:b0:4b:c4:00:71:89:e5:ad:5d:a2:7e:fe:8d:
ab:4e:6e:5c:0c:79:96:b3:00:f9:1d:58:8d:0f:43:42:f4:f8:
38:ad:8a:5c:46:db:47:4c:fb:81:08:a0:22:1c:c1:2c:01:9b:
b2:0b:0e:f2:b8:c4:43:93:00:a0:5f:8d:ef:b0:f1:f0:3b:1b:
b5:31:0a:82:90:3e:28:97:4a:53:41:03:53:65:06:aa:ea:90:
7a:61:40:73:53:09:c8:d3:0c:74:54:bd:52:ab:10:71:dc:fb:
4e:a8:c7:a2:75:9b:7d:05:e3:cb:6b:ec:a9:39:c8:8e:b7:48:
a9:c4:69:e0:31:fd:b1:d6:e0:73:0d:0e:60:b1:d6:38:61:fe:
2c:66:4f:40:61:9b:c3:b7:80:01:8c:0b:27:94:41:bc:7f:69:
e0:11:b0:a7:2d:e5:07:49:e3:39:6d:29:d2:de:da:26:08:07:
09:0b:ac:24
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:13:32 2026 by rpki-client