
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094855333483905026/0/3130332e3131302e3133322e302f32322d3232203d3e2034383337.roa
File: 3130332e3131302e3133322e302f32322d3232203d3e2034383337.roa (raw, json)
Hash identifier: sFd6ssXxC/BDyv1b99yz/NjXY9YA0f3bLOEKaZDzcTc=
Subject key identifier: F8:09:18:6A:E6:9D:1C:66:E3:96:A9:36:2A:65:0E:9B:84:06:61:DE
Certificate issuer: /CN=A5A7A22B773557BAF9107F52071E43CB56973E0C
Certificate serial: 56B0E0DEF067532FABA6D3E53C13DE846816B6BF
Authority key identifier: A5:A7:A2:2B:77:35:57:BA:F9:10:7F:52:07:1E:43:CB:56:97:3E:0C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/3130332e3131302e3133322e302f32322d3232203d3e2034383337.roa
Signing time: Thu 16 Apr 2026 09:19:51 +0000
ROA not before: Thu 16 Apr 2026 09:14:51 +0000
ROA not after: Thu 15 Apr 2027 09:19:51 +0000
asID: 4837
IP address blocks: 103.110.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.crl
rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 05:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:b0:e0:de:f0:67:53:2f:ab:a6:d3:e5:3c:13:de:84:68:16:b6:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5A7A22B773557BAF9107F52071E43CB56973E0C
Validity
Not Before: Apr 16 09:14:51 2026 GMT
Not After : Apr 15 09:19:51 2027 GMT
Subject: CN=F809186AE69D1C66E396A9362A650E9B840661DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e8:49:31:7d:3d:00:28:05:0b:e5:33:48:05:
11:f6:e3:4f:ae:36:cd:0d:58:68:27:0c:0d:d8:cd:
9f:ac:63:1f:2a:0b:b4:51:f2:17:fd:0b:27:cb:3b:
12:34:50:4e:3f:d2:36:3e:bb:3a:9b:3f:25:6d:40:
48:63:a2:59:6b:9e:c7:3c:7f:a0:5b:1c:76:bb:14:
4d:13:f0:02:fe:6b:ba:8e:85:c6:f4:3e:61:2b:31:
9f:be:e6:84:44:57:84:ca:bc:81:95:48:1f:41:a1:
62:bf:6c:3f:5b:0c:52:78:2c:4d:c1:7b:0a:12:f9:
2e:2c:cf:68:7e:47:5a:87:c9:f2:26:97:92:d2:8b:
20:96:dc:68:cb:cf:7c:06:02:3f:b6:6e:a3:95:4d:
fe:9a:f9:56:d1:a3:b5:3b:e0:98:81:b0:4e:a6:29:
cd:f7:65:7b:83:0f:3d:18:4f:d6:9e:24:62:7f:15:
9a:6d:36:ec:95:28:47:00:d8:86:6d:76:4a:db:4b:
4a:56:f8:cb:33:66:d9:26:70:28:33:ce:10:b7:3a:
09:2d:2c:f0:66:7c:c0:f7:7b:13:da:84:dd:f1:a7:
46:c7:a4:74:0e:a2:50:0f:ed:53:13:c4:7b:91:f1:
f1:3c:19:b2:b1:be:0d:b6:cb:aa:72:6c:cd:5f:86:
03:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:09:18:6A:E6:9D:1C:66:E3:96:A9:36:2A:65:0E:9B:84:06:61:DE
X509v3 Authority Key Identifier:
keyid:A5:A7:A2:2B:77:35:57:BA:F9:10:7F:52:07:1E:43:CB:56:97:3E:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/3130332e3131302e3133322e302f32322d3232203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.110.132.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:27:30:e0:92:0e:91:90:a9:0f:50:ca:c9:23:dc:04:f5:d9:
39:99:65:1a:ad:00:55:ba:4c:29:13:d6:b9:25:81:53:34:25:
e0:a7:83:04:08:4f:11:84:1a:db:27:35:f5:65:e5:fe:f4:17:
fb:18:1f:db:be:7e:2c:84:17:44:ff:08:4f:a3:37:e3:04:01:
6e:e4:11:a0:03:42:a1:a9:9e:da:3f:9f:bc:16:9d:ec:9f:8a:
cf:64:bc:93:6d:fb:7d:cf:9e:65:4c:a4:86:30:9e:56:51:57:
4f:cc:e6:52:78:b8:a3:02:2c:53:fa:d7:78:91:43:e3:f9:27:
76:47:df:46:fc:18:42:0c:eb:a0:e2:be:fc:3b:b6:0e:12:62:
16:c3:da:62:3f:60:bc:9f:ee:3a:e7:41:75:d7:ec:9c:56:5a:
37:11:83:f4:66:72:04:bd:e5:79:69:96:a9:4d:05:d9:f5:04:
16:a5:4f:e2:7b:d3:c6:4f:27:fc:65:f2:4d:c8:bf:5f:a5:08:
b0:57:e3:19:e4:5e:19:fd:30:11:98:d6:ca:b9:10:75:fa:c6:
5a:23:93:13:0d:1b:fb:55:a1:a5:75:27:b9:0c:81:14:21:9d:
ee:71:4d:db:33:7b:06:4d:94:1a:1f:eb:69:2c:6c:76:d4:6d:
72:7e:3e:cc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:42:23 2026 by rpki-client