
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094551670852943873/0/3130332e3130352e3230322e302f32342d3234203d3e20313337373634.roa
File: 3130332e3130352e3230322e302f32342d3234203d3e20313337373634.roa (raw, json)
Hash identifier: yVxOUCxwSQgdQ2Vm2tB9MZclhRZA4b88sSbFOq2CQHY=
Subject key identifier: 21:BA:3E:88:D1:04:90:CB:BC:5C:2A:CD:46:1A:61:DE:8A:14:10:8E
Certificate issuer: /CN=6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72
Certificate serial: 2D430521579DDCF1F6D87AE3AA463A1B7CE05C2D
Authority key identifier: 6B:86:BD:3F:A0:FB:0B:37:BA:C6:4D:6C:8D:2D:9F:66:36:53:6E:72
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/3130332e3130352e3230322e302f32342d3234203d3e20313337373634.roa
Signing time: Thu 16 Apr 2026 06:39:26 +0000
ROA not before: Thu 16 Apr 2026 06:34:26 +0000
ROA not after: Thu 15 Apr 2027 06:39:26 +0000
asID: 137764
IP address blocks: 103.105.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl
rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 03:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:43:05:21:57:9d:dc:f1:f6:d8:7a:e3:aa:46:3a:1b:7c:e0:5c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72
Validity
Not Before: Apr 16 06:34:26 2026 GMT
Not After : Apr 15 06:39:26 2027 GMT
Subject: CN=21BA3E88D10490CBBC5C2ACD461A61DE8A14108E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:45:c4:b2:15:0a:d8:8e:ca:92:70:88:a1:78:
9c:b6:49:15:ef:ef:62:21:a9:20:4a:ba:3a:ed:ea:
7b:31:44:17:9f:cf:e7:1f:bf:1a:b3:af:d5:2d:9e:
8c:1e:63:4d:1e:b3:87:ae:78:af:48:f7:8c:f8:02:
40:73:3f:a5:b9:94:76:f5:38:71:60:3b:0d:a4:ab:
fb:34:f3:0b:d6:41:c7:8a:9a:dc:78:22:91:ca:a6:
c2:b2:89:1c:10:47:31:1f:4e:96:bd:7c:2b:a9:21:
fd:0b:c9:4a:03:85:c4:20:34:27:4d:82:e7:13:25:
1e:38:24:ae:4f:ee:cc:b4:2e:cc:fc:24:54:42:80:
2d:9b:25:8c:52:1e:de:8d:80:8b:9c:8f:73:9f:2d:
be:39:08:d6:48:f9:5a:b6:d7:44:4e:90:9b:18:e8:
61:c8:de:0f:f0:ef:ef:5d:6c:f9:f9:b5:2e:53:6c:
c5:a6:ab:5f:c4:e4:d5:49:32:f1:96:ad:30:ac:61:
f8:9b:05:52:e4:43:68:88:e2:1f:2a:3a:63:6a:da:
91:cc:73:eb:c4:b7:29:f7:3b:a2:19:9e:24:18:49:
28:86:8a:9c:fb:37:60:ca:84:a1:22:23:01:36:c8:
ba:3d:a9:84:bb:c3:fe:30:b7:fa:9e:53:72:5b:25:
28:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BA:3E:88:D1:04:90:CB:BC:5C:2A:CD:46:1A:61:DE:8A:14:10:8E
X509v3 Authority Key Identifier:
keyid:6B:86:BD:3F:A0:FB:0B:37:BA:C6:4D:6C:8D:2D:9F:66:36:53:6E:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/3130332e3130352e3230322e302f32342d3234203d3e20313337373634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.105.202.0/24
Signature Algorithm: sha256WithRSAEncryption
17:11:08:e4:27:33:fd:96:41:a2:75:22:b9:a5:f8:ff:b3:3c:
4f:dc:2c:ad:8f:de:70:1c:c2:7d:88:fc:c4:c9:13:84:0d:11:
c5:a3:4a:fc:04:cb:6b:da:27:57:26:5a:bb:da:b0:42:0d:31:
66:1e:0d:fc:ec:67:44:2d:3a:09:73:2e:2c:7e:6f:7f:b9:10:
45:cc:9a:a7:9f:4a:c0:32:68:a5:67:ee:c7:29:aa:c2:c1:74:
6e:ee:bb:e8:6f:70:df:6e:25:f8:8e:1f:f7:34:cc:66:68:20:
45:f2:f3:00:34:49:69:46:42:4e:bb:51:d7:fb:95:c0:3f:8c:
b7:48:82:6e:ab:00:78:73:d9:45:6b:ae:34:6b:17:f2:39:70:
4b:a2:9d:74:34:1f:65:32:c9:c2:26:d4:75:30:07:39:f2:e6:
4b:ea:bb:c6:c9:a6:cc:ad:d8:57:bd:f2:d8:27:08:40:7e:10:
b4:75:16:e8:24:18:9e:d4:bb:eb:9e:a9:1b:f3:b0:b6:05:1d:
26:a8:ef:7c:86:c3:94:ee:79:84:c8:30:50:e4:04:90:c9:22:
ac:04:88:f2:6e:a8:a2:51:94:8b:49:42:43:b4:a2:13:44:e3:
85:d6:73:27:97:3c:eb:4b:70:9a:40:96:7b:46:52:9b:f3:ac:
6f:eb:49:2a
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIULUMFIVed3PH22HrjqkY6G3zgXC0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI4NkJEM0ZBMEZCMEIzN0JBQzY0RDZDOEQyRDlGNjYz
NjUzNkU3MjAeFw0yNjA0MTYwNjM0MjZaFw0yNzA0MTUwNjM5MjZaMDMxMTAvBgNV
BAMTKDIxQkEzRTg4RDEwNDkwQ0JCQzVDMkFDRDQ2MUE2MURFOEExNDEwOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFRcSyFQrYjsqScIiheJy2SRXv
72IhqSBKujrt6nsxRBefz+cfvxqzr9UtnoweY00es4eueK9I94z4AkBzP6W5lHb1
OHFgOw2kq/s08wvWQceKmtx4IpHKpsKyiRwQRzEfTpa9fCupIf0LyUoDhcQgNCdN
gucTJR44JK5P7sy0Lsz8JFRCgC2bJYxSHt6NgIucj3OfLb45CNZI+Vq210ROkJsY
6GHI3g/w7+9dbPn5tS5TbMWmq1/E5NVJMvGWrTCsYfibBVLkQ2iI4h8qOmNq2pHM
c+vEtyn3O6IZniQYSSiGipz7N2DKhKEiIwE2yLo9qYS7w/4wt/qeU3JbJShpAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUIbo+iNEEkMu8XCrNRhph3ooUEI4wHwYDVR0j
BBgwFoAUa4a9P6D7Cze6xk1sjS2fZjZTbnIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDU1MTY3MDg1Mjk0Mzg3My8wLzZCODZCRDNGQTBGQjBCMzdCQUM2NEQ2QzhEMkQ5
RjY2MzY1MzZFNzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkI4NkJEM0ZBMEZCMEIzN0JBQzY0RDZDOEQyRDlGNjYzNjUzNkU3Mi5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDk0NTUxNjcwODUyOTQzODczLzAvMzEzMDMzMmUz
MTMwMzUyZTMyMzAzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNzM3MzYz
NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGdpyjANBgkqhkiG9w0BAQsFAAOCAQEAFxEI5Ccz/ZZBonUi
uaX4/7M8T9wsrY/ecBzCfYj8xMkThA0RxaNK/ATLa9onVyZau9qwQg0xZh4N/Oxn
RC06CXMuLH5vf7kQRcyap59KwDJopWfuxymqwsF0bu676G9w324l+I4f9zTMZmgg
RfLzADRJaUZCTrtR1/uVwD+Mt0iCbqsAeHPZRWuuNGsX8jlwS6KddDQfZTLJwibU
dTAHOfLmS+q7xsmmzK3YV73y2CcIQH4QtHUW6CQYntS7656pG/OwtgUdJqjvfIbD
lO55hMgwUOQEkMkirASI8m6oolGUi0lCQ7SiE0TjhdZzJ5c860twmkCWe0ZSm/Os
b+tJKg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:02:06 2026 by rpki-client