
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091362986968219649/0/3130332e3136362e35332e302f32342d3234203d3e20313532333230.roa
File: 3130332e3136362e35332e302f32342d3234203d3e20313532333230.roa (raw, json)
Hash identifier: Gf1xZTaiFs2sYarVKh+0+XtExjMUBVsVOE19dnVKZUs=
Subject key identifier: 07:AD:C0:52:4B:D4:8A:40:DF:29:C9:6B:81:AC:63:FF:D7:AE:6B:22
Certificate issuer: /CN=9B5519650F0653145F5D42879890BE1251C8F463
Certificate serial: 6B8BCC97B3A692725A7C4EBDB92FC0C76D7BA526
Authority key identifier: 9B:55:19:65:0F:06:53:14:5F:5D:42:87:98:90:BE:12:51:C8:F4:63
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B5519650F0653145F5D42879890BE1251C8F463.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/3130332e3136362e35332e302f32342d3234203d3e20313532333230.roa
Signing time: Tue 07 Apr 2026 06:56:40 +0000
ROA not before: Tue 07 Apr 2026 06:51:40 +0000
ROA not after: Tue 06 Apr 2027 06:56:40 +0000
asID: 152320
IP address blocks: 103.166.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.crl
rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B5519650F0653145F5D42879890BE1251C8F463.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:8b:cc:97:b3:a6:92:72:5a:7c:4e:bd:b9:2f:c0:c7:6d:7b:a5:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B5519650F0653145F5D42879890BE1251C8F463
Validity
Not Before: Apr 7 06:51:40 2026 GMT
Not After : Apr 6 06:56:40 2027 GMT
Subject: CN=07ADC0524BD48A40DF29C96B81AC63FFD7AE6B22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e0:8e:a8:15:c2:bb:d4:aa:75:67:ca:ff:e5:
06:83:6f:da:84:dc:b2:2a:b3:24:06:5e:45:38:0c:
41:b0:fd:0b:61:cf:a9:17:a7:ee:95:d9:7b:26:cd:
ca:9c:f0:d5:55:88:90:57:44:1c:ac:95:1e:61:ec:
2b:32:57:c3:e2:2b:23:98:7d:92:e6:0f:ab:8e:0e:
5a:27:6d:70:e5:43:d4:24:8c:93:27:96:2d:30:b2:
d2:d2:e6:f9:97:ef:0e:9f:9e:5a:f1:ef:d8:4a:7d:
df:a6:9c:e4:1b:04:3a:fe:a8:af:54:07:15:0d:87:
90:6a:b5:73:a5:31:59:04:4b:59:6e:cc:a9:62:2d:
cd:f1:54:78:26:28:fb:64:e5:12:10:f8:35:30:ba:
8e:30:47:8c:c2:1c:5d:1f:cc:81:55:70:f5:d9:5a:
84:fd:97:9f:b2:2b:9a:b3:cf:0e:81:cf:e0:17:eb:
6a:33:be:b6:8a:47:26:f3:12:8c:45:0c:ae:88:2d:
ea:84:bb:c0:a7:65:e0:15:42:c7:73:4d:0f:82:37:
93:20:82:60:22:b0:a3:01:f9:fd:af:59:a4:8f:6e:
cf:7a:4e:d1:b1:d7:ab:f9:03:86:2e:66:dc:b9:9e:
8b:7f:d6:80:60:ec:54:23:08:8b:0f:d4:17:48:c4:
e9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AD:C0:52:4B:D4:8A:40:DF:29:C9:6B:81:AC:63:FF:D7:AE:6B:22
X509v3 Authority Key Identifier:
keyid:9B:55:19:65:0F:06:53:14:5F:5D:42:87:98:90:BE:12:51:C8:F4:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B5519650F0653145F5D42879890BE1251C8F463.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/3130332e3136362e35332e302f32342d3234203d3e20313532333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.166.53.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:ab:0a:4a:2e:4a:6d:68:b2:75:a8:ec:64:38:c3:6d:e5:cf:
4e:73:10:df:ea:73:e7:3a:b8:ec:7d:44:43:c5:ac:8e:02:c5:
7f:64:4a:18:12:19:c8:48:85:bd:f8:9a:74:1c:ab:07:ad:e7:
43:4e:0f:f6:fb:46:57:c2:64:6f:2f:6e:8f:43:ac:dc:bb:ca:
bd:2e:a8:e1:13:4b:da:c4:cc:13:ce:d8:b2:88:c9:56:6c:79:
9d:0b:a7:69:36:2d:4c:bf:16:4d:d1:e4:0c:dd:bf:0c:6f:bb:
81:ab:08:52:96:b3:b2:88:91:70:4f:ce:a4:95:d5:6f:01:43:
4a:61:e9:81:d7:ec:c1:a6:8a:ee:b5:dd:a8:f5:5d:96:c4:9b:
a6:11:26:71:4e:4f:31:0b:23:22:3f:73:9e:c3:c3:86:2f:a7:
61:4c:1f:9b:c3:a0:6e:6c:c1:6c:30:c3:d0:0a:8f:8b:f6:56:
28:12:b5:ed:43:e0:09:4f:b8:7a:9a:21:f0:84:cf:a3:3a:48:
86:33:fd:af:34:be:31:2b:f2:b1:62:e6:87:24:42:56:ce:96:
fd:d9:b7:77:ce:ad:d2:ad:4c:42:74:4d:3b:38:6b:ba:a3:98:
b0:6c:d6:51:9f:d5:f3:66:26:83:80:87:8e:47:4e:63:bc:16:
11:ef:5d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:29:27 2026 by rpki-client