
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094855333483905026/0/3130332e3131302e3133322e302f32322d3232203d3e2039383038.roa
File: 3130332e3131302e3133322e302f32322d3232203d3e2039383038.roa (raw, json)
Hash identifier: 9YRxcxYb/rcS3Fre/vxl+OluswVsgxbVE+vIx1aWSuc=
Subject key identifier: DC:39:72:B8:1F:EA:A2:98:0E:6D:B5:6E:81:7B:6B:C4:A7:7A:27:30
Certificate issuer: /CN=A5A7A22B773557BAF9107F52071E43CB56973E0C
Certificate serial: 04C7509687667C6A5C00C0E684F0AB42F4BB44AF
Authority key identifier: A5:A7:A2:2B:77:35:57:BA:F9:10:7F:52:07:1E:43:CB:56:97:3E:0C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/3130332e3131302e3133322e302f32322d3232203d3e2039383038.roa
Signing time: Thu 16 Apr 2026 09:19:27 +0000
ROA not before: Thu 16 Apr 2026 09:14:27 +0000
ROA not after: Thu 15 Apr 2027 09:19:27 +0000
asID: 9808
IP address blocks: 103.110.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.crl
rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 05:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:c7:50:96:87:66:7c:6a:5c:00:c0:e6:84:f0:ab:42:f4:bb:44:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5A7A22B773557BAF9107F52071E43CB56973E0C
Validity
Not Before: Apr 16 09:14:27 2026 GMT
Not After : Apr 15 09:19:27 2027 GMT
Subject: CN=DC3972B81FEAA2980E6DB56E817B6BC4A77A2730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:87:51:af:9e:af:59:af:52:a5:19:5b:10:a1:
b8:fd:12:b8:f0:dc:9d:f3:e6:ae:51:4c:9e:1a:77:
6a:f7:2e:78:45:ed:9b:a4:0b:6b:23:4e:20:65:2d:
1d:f0:4a:83:4a:fc:37:ea:92:9c:fe:91:84:a4:95:
28:b7:eb:09:16:38:76:20:29:12:00:de:e6:9f:21:
57:fe:f1:8c:96:1f:ab:93:0a:76:7c:8b:50:5e:99:
e1:93:a1:b2:b1:c8:59:34:83:cf:99:7b:2e:e6:3c:
9d:ea:fb:87:32:71:99:af:8e:aa:7a:3e:95:90:04:
98:da:8a:42:aa:ed:b9:0e:f4:76:81:c5:a0:c2:a6:
9e:2c:9a:8d:0c:7a:94:35:29:8c:e1:df:19:db:c4:
10:40:5e:76:28:e2:01:a5:f5:a2:b3:ba:c5:b8:d2:
96:f6:7c:e0:fc:01:76:69:21:3d:5d:81:95:74:e6:
99:41:96:04:5e:f3:c0:9a:de:16:8b:0c:ad:9a:be:
93:88:0a:f7:d4:50:a0:77:81:27:a8:04:96:c7:fb:
1f:34:f3:3e:c5:04:52:03:d8:3c:a1:03:86:7b:e2:
5c:69:d3:14:96:d2:42:3c:0b:d2:d3:98:24:02:a6:
20:0f:07:b6:60:28:04:a8:b2:a0:bb:b5:15:ea:8c:
95:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:39:72:B8:1F:EA:A2:98:0E:6D:B5:6E:81:7B:6B:C4:A7:7A:27:30
X509v3 Authority Key Identifier:
keyid:A5:A7:A2:2B:77:35:57:BA:F9:10:7F:52:07:1E:43:CB:56:97:3E:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/3130332e3131302e3133322e302f32322d3232203d3e2039383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.110.132.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:aa:cc:95:7a:f5:d7:50:5f:d9:e6:51:43:6b:6e:d1:b4:dc:
92:fc:8f:f3:93:32:0f:17:a4:7f:01:ff:e9:78:54:f4:92:d4:
8c:db:fb:6e:30:11:8f:64:8a:e6:6e:c0:15:77:c9:c8:23:aa:
3d:5c:8d:5c:33:ee:37:af:e1:e5:d4:40:98:a9:15:c6:c1:6c:
c6:0d:6f:e3:9c:1d:fc:15:cf:75:25:8e:5d:41:18:9f:20:20:
1c:11:6b:86:e7:02:a0:5a:39:d7:69:99:8d:77:dd:fc:a7:2d:
ec:e9:7d:56:46:1a:e4:1a:ac:7b:07:eb:ff:5c:a8:ce:40:dc:
a6:e5:78:d7:78:92:a2:22:7d:fa:d5:0a:ec:2f:8b:c8:c5:3a:
90:aa:10:82:a8:4a:9b:9c:83:52:f1:2c:57:db:1e:fa:b8:38:
b3:b6:41:a2:65:2f:e7:f2:74:90:f1:4e:1f:82:a2:ff:2d:2c:
f9:66:e6:1d:9c:63:a9:a5:0c:1a:81:1e:be:ed:75:34:69:53:
dd:d7:91:1a:e6:81:93:7e:58:54:88:d2:59:0a:5b:2b:70:07:
0d:47:68:b4:cc:67:69:51:31:7a:3f:83:04:05:5d:fe:2b:a5:
49:95:9f:01:d7:ad:dd:6f:cd:f8:93:54:fc:d4:20:87:9a:d0:
70:ca:96:a0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:24:41 2026 by rpki-client