
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094551670852943873/0/3130332e3133392e3231322e302f32342d3234203d3e2034383437.roa
File: 3130332e3133392e3231322e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier: fgedEchRrP66KqqHCaA1a1U1d7AKMe+NspTQhBPC/H4=
Subject key identifier: 72:C7:74:11:B3:5A:CB:BD:5D:B4:3C:47:B1:7E:22:9F:76:F1:82:65
Certificate issuer: /CN=6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72
Certificate serial: 363A59CBD969F9379C3845AF733BD6591B907F72
Authority key identifier: 6B:86:BD:3F:A0:FB:0B:37:BA:C6:4D:6C:8D:2D:9F:66:36:53:6E:72
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/3130332e3133392e3231322e302f32342d3234203d3e2034383437.roa
Signing time: Thu 16 Apr 2026 07:01:26 +0000
ROA not before: Thu 16 Apr 2026 06:56:26 +0000
ROA not after: Thu 15 Apr 2027 07:01:26 +0000
asID: 4847
IP address blocks: 103.139.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl
rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 08:54:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:3a:59:cb:d9:69:f9:37:9c:38:45:af:73:3b:d6:59:1b:90:7f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72
Validity
Not Before: Apr 16 06:56:26 2026 GMT
Not After : Apr 15 07:01:26 2027 GMT
Subject: CN=72C77411B35ACBBD5DB43C47B17E229F76F18265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:25:91:28:a3:e1:7b:c4:0b:92:cd:07:77:34:
ea:c6:94:8d:98:01:85:77:f2:fd:19:c4:d2:b8:54:
bb:93:77:c6:8a:ea:33:f5:81:65:c9:9d:36:ee:0c:
21:7a:5b:ef:87:f1:3a:c8:3f:92:cc:57:42:2c:4e:
54:67:33:3a:53:f2:69:ee:13:4c:42:c5:22:aa:17:
63:01:dd:63:e1:ba:eb:81:be:8f:85:b1:4c:b3:7b:
5d:5a:66:7e:3e:dc:65:6a:b3:90:cc:df:00:98:1c:
fd:ae:24:61:e6:93:ac:b5:3b:75:f8:a2:9b:96:07:
1b:0e:48:8d:4c:19:70:58:13:b8:b3:37:1e:0c:cd:
a3:68:47:13:15:d3:28:32:5f:65:a6:98:eb:6e:12:
d7:0d:55:80:cc:78:0a:df:18:91:fe:9e:87:db:52:
63:4e:44:ee:9c:46:3e:bc:51:19:5a:64:35:f3:67:
10:b1:fa:c3:53:25:98:c4:04:c9:eb:56:16:68:d3:
2b:04:85:39:39:4e:3e:39:62:e9:48:fc:53:19:7d:
c3:3b:54:de:98:24:17:65:66:b5:ae:83:3a:37:00:
7b:51:e0:9c:d2:61:9a:9b:fd:b3:e3:76:8e:9a:ba:
13:68:52:ad:74:19:46:04:1a:fb:91:5e:34:56:ed:
4a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C7:74:11:B3:5A:CB:BD:5D:B4:3C:47:B1:7E:22:9F:76:F1:82:65
X509v3 Authority Key Identifier:
keyid:6B:86:BD:3F:A0:FB:0B:37:BA:C6:4D:6C:8D:2D:9F:66:36:53:6E:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/3130332e3133392e3231322e302f32342d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.139.212.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:13:8c:fb:1a:76:f6:dc:cd:ec:dd:76:05:90:b6:40:a8:45:
91:0b:98:3e:2e:35:8e:f7:fd:cb:2e:fe:e5:2d:bd:df:b8:54:
2e:1b:5b:79:aa:ac:fe:ef:63:fb:f9:ea:e1:eb:5d:60:a0:e7:
55:04:95:cd:a7:ed:2e:87:1a:70:4e:f5:25:41:17:c7:1d:66:
5e:25:c4:62:4b:ea:bb:75:22:34:70:fe:41:97:f7:25:23:da:
cd:8c:67:23:cc:63:b0:a1:4f:fc:e9:36:85:ae:af:f0:99:92:
31:df:54:b1:28:c5:b1:6c:48:44:9d:93:13:b0:b4:14:3a:4b:
3e:b9:38:8a:dc:d7:f4:68:24:12:10:e5:a9:43:f9:17:01:0a:
84:3e:39:32:3f:2f:82:a0:4b:7d:ff:c8:87:ad:8a:9b:62:17:
79:41:79:71:2c:d7:c5:e4:5a:d7:72:8a:0c:be:8d:f2:d5:5a:
71:0e:7a:e3:56:72:49:38:9f:03:9a:cc:2d:c9:82:02:2a:53:
b8:d6:8a:93:5a:2f:0a:c7:f5:40:d8:5a:c9:d8:ee:64:d5:fa:
f6:6a:8d:33:3b:ed:95:9a:5e:aa:eb:4f:4b:92:2f:67:94:95:
55:04:4b:4c:ad:b1:77:6e:83:20:6a:36:40:6a:47:f2:dd:47:
1f:3b:c7:12
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:49:29 2026 by rpki-client