
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091362986968219649/0/3130332e3136362e35322e302f32342d3234203d3e20313532333230.roa
File: 3130332e3136362e35322e302f32342d3234203d3e20313532333230.roa (raw, json)
Hash identifier: E7QlYHDSttb4N2W5AMGTOJwqynTI9lm4x0smn+C1yF4=
Subject key identifier: 2A:3E:43:F7:16:93:45:17:8B:FA:5F:B7:5C:E2:32:7C:11:80:03:51
Certificate issuer: /CN=9B5519650F0653145F5D42879890BE1251C8F463
Certificate serial: 03BF7332906AC4A27BF73E86FA3AEFABF4254E1B
Authority key identifier: 9B:55:19:65:0F:06:53:14:5F:5D:42:87:98:90:BE:12:51:C8:F4:63
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B5519650F0653145F5D42879890BE1251C8F463.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/3130332e3136362e35322e302f32342d3234203d3e20313532333230.roa
Signing time: Tue 07 Apr 2026 06:56:40 +0000
ROA not before: Tue 07 Apr 2026 06:51:40 +0000
ROA not after: Tue 06 Apr 2027 06:56:40 +0000
asID: 152320
IP address blocks: 103.166.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.crl
rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B5519650F0653145F5D42879890BE1251C8F463.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:bf:73:32:90:6a:c4:a2:7b:f7:3e:86:fa:3a:ef:ab:f4:25:4e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B5519650F0653145F5D42879890BE1251C8F463
Validity
Not Before: Apr 7 06:51:40 2026 GMT
Not After : Apr 6 06:56:40 2027 GMT
Subject: CN=2A3E43F7169345178BFA5FB75CE2327C11800351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:03:c2:ad:b6:35:00:77:90:e9:c3:57:75:63:
f7:d2:39:ee:8c:e2:12:6a:4a:c8:4f:9e:98:9d:b5:
31:ba:59:6e:80:bd:69:25:b1:84:5f:4d:bd:8a:36:
a2:f5:e8:29:fd:40:c0:14:b5:65:72:3e:da:72:a0:
01:10:bc:df:6d:a4:9c:53:b2:b9:d3:c0:1d:0b:21:
2e:f3:0c:e3:57:44:92:50:49:64:c9:f2:cd:0b:65:
2c:41:08:54:fa:f9:8b:02:51:41:74:39:87:ba:e3:
5e:1c:cf:2d:c3:2e:80:1d:18:6a:dd:3c:3e:f8:25:
c7:dc:54:21:27:04:f8:69:4d:f5:40:0d:ab:4d:3f:
ee:aa:d1:7d:6a:3f:2f:31:ec:8e:0a:be:8b:0c:eb:
83:73:62:1e:ec:00:2d:dc:b8:c5:9c:b2:3b:03:e5:
b2:d0:49:49:98:a0:64:dc:26:54:42:a9:6f:7e:1b:
f2:d0:f1:7b:f0:dc:26:ba:0d:2f:b4:ee:fd:bd:fd:
c2:3f:c4:35:d8:33:0d:7d:b3:2f:9d:a9:20:60:66:
7c:22:17:05:29:cc:fc:78:fd:68:43:0e:8c:2d:97:
68:46:7d:b2:3c:4d:de:ea:4a:2c:44:f0:fe:6a:37:
ec:6b:de:a7:47:9c:fa:d9:05:80:22:1a:b3:0f:ca:
e6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3E:43:F7:16:93:45:17:8B:FA:5F:B7:5C:E2:32:7C:11:80:03:51
X509v3 Authority Key Identifier:
keyid:9B:55:19:65:0F:06:53:14:5F:5D:42:87:98:90:BE:12:51:C8:F4:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B5519650F0653145F5D42879890BE1251C8F463.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/3130332e3136362e35322e302f32342d3234203d3e20313532333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.166.52.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:7c:0a:69:48:c2:e2:a2:c5:fe:be:74:b4:9c:5b:44:6e:6a:
68:dd:ce:e4:8f:db:9b:0e:3b:9c:b0:03:8b:92:ed:23:ad:51:
dd:7a:38:4c:4f:30:a7:93:2e:1a:f3:11:54:5a:19:73:bf:a3:
73:00:e2:b2:2d:4a:5a:b1:c9:30:33:5b:23:fd:61:7f:7d:2a:
e9:43:58:44:43:c6:2d:91:fe:52:56:62:dc:f5:75:8c:4e:f6:
ab:d0:71:1a:40:da:18:a9:a1:43:45:7b:b3:44:b6:12:0e:f4:
8b:e8:e6:a1:02:bc:5f:1e:ce:a2:98:bc:3d:91:18:85:a6:51:
49:ea:d3:f5:19:b5:04:c6:53:b9:08:13:39:34:5f:b3:c6:47:
6e:a0:a1:d4:08:3b:48:7a:7a:cc:01:c2:9e:4c:4d:0f:d6:a1:
72:70:d1:2b:c5:d2:87:04:c4:bc:d4:3f:d0:b6:99:1b:35:bf:
8f:74:cd:5b:09:6c:e2:a3:f5:43:71:e4:8e:92:e0:50:19:21:
73:cb:ee:0c:e4:e3:5b:71:64:09:2d:88:cc:9d:58:41:49:e6:
09:ac:2e:31:12:c3:e1:e3:a4:a7:28:6a:41:2e:a0:2c:e5:f8:
e9:4e:5f:62:d1:f2:c6:a8:f1:02:7e:41:29:c2:fd:2f:20:78:
10:5b:69:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:32:36 2026 by rpki-client