
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1084666797904363523/0/3130332e32382e3230342e302f32322d3232203d3e2033343333.roa
File: 3130332e32382e3230342e302f32322d3232203d3e2033343333.roa (raw, json)
Hash identifier: S4LI7F5/nKJonKbl1JWtK8auVNwfL73FgDTRMFWqL1Q=
Subject key identifier: 86:A2:C3:0A:EF:F1:BE:5F:53:31:12:9E:A2:26:3C:85:50:FF:9E:20
Certificate issuer: /CN=573895035A5FB9C94F33AC71886002E21C9EE894
Certificate serial: 6FE4EF55497A427DC624D577AE4FCF7F6820841F
Authority key identifier: 57:38:95:03:5A:5F:B9:C9:4F:33:AC:71:88:60:02:E2:1C:9E:E8:94
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/3130332e32382e3230342e302f32322d3232203d3e2033343333.roa
Signing time: Tue 14 Apr 2026 09:49:33 +0000
ROA not before: Tue 14 Apr 2026 09:44:33 +0000
ROA not after: Tue 13 Apr 2027 09:49:33 +0000
asID: 3433
IP address blocks: 103.28.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.crl
rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:e4:ef:55:49:7a:42:7d:c6:24:d5:77:ae:4f:cf:7f:68:20:84:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573895035A5FB9C94F33AC71886002E21C9EE894
Validity
Not Before: Apr 14 09:44:33 2026 GMT
Not After : Apr 13 09:49:33 2027 GMT
Subject: CN=86A2C30AEFF1BE5F5331129EA2263C8550FF9E20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f1:b0:ed:c3:dc:0f:33:93:8d:ce:cc:cb:0a:
71:5b:ac:e9:49:13:20:67:21:24:60:05:fb:6e:f0:
20:7b:6f:fa:4e:58:6a:26:6b:9e:cf:56:4f:35:dc:
e5:25:3a:98:a6:17:8e:61:a1:62:f7:f9:ca:d1:4a:
92:44:7d:60:53:d7:2d:cc:84:c2:cc:f4:90:89:64:
ac:a5:ec:a6:c1:78:0f:4e:09:51:91:af:11:d4:ef:
54:8a:90:28:74:d2:58:34:a5:43:c3:7a:a0:4c:5d:
cd:2e:45:ce:67:12:d5:a2:be:91:83:84:86:00:03:
d5:d4:12:15:25:be:05:bc:cc:60:0d:32:a3:eb:9f:
0c:d7:91:5c:a6:e0:e0:18:3c:46:4a:9d:eb:08:90:
1c:53:20:10:64:57:0c:21:a8:54:e2:69:26:9c:4e:
86:c1:f0:4f:12:84:9e:87:3b:1e:30:58:11:b5:0c:
97:87:89:c6:6f:50:5a:55:85:75:f9:73:8d:37:3a:
dc:94:57:b9:31:62:f6:02:59:26:be:70:68:93:b1:
7b:93:4e:26:57:d4:8d:08:e6:69:59:ee:12:bd:eb:
9a:79:5c:5a:e1:a8:14:7b:a7:04:cf:95:f9:8e:ce:
9b:40:0c:54:bf:a5:ee:e9:9c:1d:5f:d6:89:a5:ee:
11:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A2:C3:0A:EF:F1:BE:5F:53:31:12:9E:A2:26:3C:85:50:FF:9E:20
X509v3 Authority Key Identifier:
keyid:57:38:95:03:5A:5F:B9:C9:4F:33:AC:71:88:60:02:E2:1C:9E:E8:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/3130332e32382e3230342e302f32322d3232203d3e2033343333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.28.204.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:ef:66:73:75:96:7d:18:c7:1e:b7:59:c2:05:6c:f6:03:9b:
9c:c6:ec:da:8a:e7:2e:cb:a4:15:47:b3:b0:eb:d7:af:44:b7:
fa:ee:cf:22:8a:28:05:9f:6c:ca:d7:57:3d:b2:22:4b:2e:0f:
a1:05:8e:a3:2b:38:b2:80:7b:4d:02:b3:d7:09:bf:41:df:06:
84:11:5a:95:18:b2:23:82:93:22:cf:de:88:72:f6:58:42:e7:
3f:da:61:d4:3a:7a:e7:db:31:7f:d8:f2:a8:2f:ef:bf:76:86:
2e:1c:ca:ca:f1:c8:fe:64:21:5d:1c:5d:d6:90:ad:79:f8:ca:
de:95:99:7b:52:18:30:c3:9c:7c:70:fc:44:9e:de:27:ca:2f:
4a:d1:cd:1a:42:af:1f:c7:35:34:e5:92:9a:5d:e0:40:8c:4c:
ca:09:d2:94:4c:bd:53:a7:2f:cc:b0:a4:78:a7:c4:46:3a:ed:
3d:cb:5d:31:b2:c6:b7:75:f8:d9:b1:32:8d:d9:55:c5:6b:08:
65:c6:ba:0c:d6:27:37:ad:c3:0b:21:3d:8d:02:09:80:04:b5:
3f:74:4c:c6:6a:45:ba:85:3a:03:a4:86:8d:c1:87:c4:8d:33:
dc:3a:ab:31:d1:09:95:68:b3:fc:1f:4b:fa:a3:b6:a7:1d:37:
6b:6a:fa:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 09:10:28 2026 by rpki-client