
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094527815195295745/0/3130332e36302e3233302e302f32332d3233203d3e2030.roa
File: 3130332e36302e3233302e302f32332d3233203d3e2030.roa (raw, json)
Hash identifier: Ue8/vIfgsSnN4LW/5kCPAbghCplvny1P0iX59/D578Q=
Subject key identifier: D9:99:76:95:60:13:A4:D1:15:68:F3:BE:C1:F2:16:92:58:EC:69:BC
Certificate issuer: /CN=98AA7A42F1AD88F64241535778555B0FE42637EA
Certificate serial: 43EA8CEBFA8A0D0A4F0B4F9419FDA6075AE2EE82
Authority key identifier: 98:AA:7A:42:F1:AD:88:F6:42:41:53:57:78:55:5B:0F:E4:26:37:EA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/3130332e36302e3233302e302f32332d3233203d3e2030.roa
Signing time: Thu 16 Apr 2026 07:00:15 +0000
ROA not before: Thu 16 Apr 2026 06:55:15 +0000
ROA not after: Thu 15 Apr 2027 07:00:15 +0000
asID: 0
IP address blocks: 103.60.230.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.crl
rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 09:22:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:ea:8c:eb:fa:8a:0d:0a:4f:0b:4f:94:19:fd:a6:07:5a:e2:ee:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98AA7A42F1AD88F64241535778555B0FE42637EA
Validity
Not Before: Apr 16 06:55:15 2026 GMT
Not After : Apr 15 07:00:15 2027 GMT
Subject: CN=D99976956013A4D11568F3BEC1F2169258EC69BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:de:10:89:0d:36:68:be:4e:f1:74:92:77:98:
55:fd:1c:6d:3b:4c:c4:63:33:14:6d:13:4b:df:1e:
77:bc:16:6d:25:a2:c1:94:d4:14:82:1c:32:19:2b:
03:b0:91:ac:46:ef:78:91:68:31:12:10:72:21:8c:
d4:71:76:65:6c:e4:59:66:c4:42:31:67:74:73:bc:
0d:09:bd:59:7b:d3:58:13:09:a7:ca:a5:43:66:10:
fe:d1:49:12:2c:3b:83:9c:b6:47:7f:43:a2:ce:3b:
5a:22:86:93:1d:f8:ee:4f:16:71:b5:88:0d:70:96:
8b:7f:2e:d1:9d:d0:dd:16:82:8a:c6:db:a0:cc:fe:
48:1c:b9:05:fa:d1:40:56:e0:dd:27:fe:4e:28:46:
04:1e:25:cd:60:ae:46:65:bb:bd:2f:ec:33:85:7a:
34:f5:cb:e5:b8:e1:33:d1:a9:7f:4c:1b:79:a7:99:
08:19:54:7e:7d:0c:46:16:42:7d:a1:3d:d1:81:93:
4a:e8:e8:a4:df:4d:2b:b9:33:c9:74:6c:46:91:88:
1e:42:32:fe:ab:72:a3:a0:65:e7:5b:2e:f0:e0:56:
9c:c0:ca:bf:ba:e2:50:9b:a6:57:56:98:02:07:37:
80:b0:5f:43:88:eb:8d:41:cb:60:6e:a8:8d:19:59:
b7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:99:76:95:60:13:A4:D1:15:68:F3:BE:C1:F2:16:92:58:EC:69:BC
X509v3 Authority Key Identifier:
keyid:98:AA:7A:42:F1:AD:88:F6:42:41:53:57:78:55:5B:0F:E4:26:37:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/3130332e36302e3233302e302f32332d3233203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.60.230.0/23
Signature Algorithm: sha256WithRSAEncryption
06:fc:30:90:77:06:c6:51:12:ad:19:39:ab:2e:75:e1:71:a8:
87:0e:48:8a:6e:b3:89:5e:24:48:38:ff:04:f1:ba:1f:5d:e6:
49:96:c0:eb:e2:c2:60:64:17:26:68:a2:9a:75:be:06:38:5d:
48:6c:6d:d3:9d:3c:8f:c0:ac:ab:4c:5c:9c:d6:15:48:fc:d6:
12:fa:96:4a:11:16:66:b3:e4:b3:82:dc:dd:6c:57:05:c3:27:
42:bc:c2:f7:70:3c:0e:d3:cd:e2:3c:d0:53:af:b8:ca:db:f3:
18:5d:c4:eb:6f:21:a9:85:03:4b:5e:fe:54:aa:c6:b5:cb:99:
2a:69:51:2f:21:ed:3d:f4:47:df:f7:b0:d2:c2:b1:15:40:b2:
fc:10:5b:11:ce:2a:a2:0c:8c:b9:86:ce:94:2e:e2:d1:bf:ae:
0a:f4:f2:5d:09:31:5c:84:c3:95:20:0a:4b:0a:2e:f0:59:c2:
91:7e:83:03:b6:da:ef:36:68:6d:a2:b0:95:7b:3d:92:ec:0b:
42:b2:42:c8:66:57:7f:2c:06:46:23:cb:d8:e4:6a:d1:21:51:
8a:ce:0f:ed:a3:07:db:60:2a:a2:56:f2:77:44:d3:39:66:b9:
3e:66:32:02:e1:19:09:08:fc:8a:92:5f:08:76:65:83:a1:2f:
0f:51:89:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:35:41 2026 by rpki-client