
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095881215065456642/0/3130332e3133322e3231322e302f32342d3234203d3e20313337373539.roa
File: 3130332e3133322e3231322e302f32342d3234203d3e20313337373539.roa (raw, json)
Hash identifier: 26nl4bikGp2Ci9HCEbZJ7fOjhWzaLL4wYwu2l9/Jgao=
Subject key identifier: E8:45:F8:9E:06:F5:3D:14:58:D5:96:3D:B3:6F:38:25:7E:E0:1B:1D
Certificate issuer: /CN=5F00140F672D031D0607493A021A46F1A9475AE8
Certificate serial: 271A68D413E9B42F157BF2B6E8C6B6075DBEEF14
Authority key identifier: 5F:00:14:0F:67:2D:03:1D:06:07:49:3A:02:1A:46:F1:A9:47:5A:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/3130332e3133322e3231322e302f32342d3234203d3e20313337373539.roa
Signing time: Tue 14 Apr 2026 01:15:23 +0000
ROA not before: Tue 14 Apr 2026 01:10:23 +0000
ROA not after: Tue 13 Apr 2027 01:15:23 +0000
asID: 137759
IP address blocks: 103.132.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:1a:68:d4:13:e9:b4:2f:15:7b:f2:b6:e8:c6:b6:07:5d:be:ef:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F00140F672D031D0607493A021A46F1A9475AE8
Validity
Not Before: Apr 14 01:10:23 2026 GMT
Not After : Apr 13 01:15:23 2027 GMT
Subject: CN=E845F89E06F53D1458D5963DB36F38257EE01B1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b0:82:56:46:ef:fb:36:a6:d4:9c:ed:24:1c:
13:b1:86:ec:83:be:10:ca:c2:c3:e2:b3:33:8e:da:
17:00:92:6f:c2:28:5c:50:65:d8:96:09:c3:24:d3:
5d:df:79:75:55:84:15:50:a8:68:fb:44:bc:65:90:
81:86:66:51:62:2c:97:c7:18:8d:29:a1:8b:c1:3c:
d6:fa:71:8f:3d:f8:9e:ae:32:60:9a:16:20:39:a0:
eb:b8:86:79:1a:7d:df:8c:dd:1e:2c:fe:22:97:2d:
e4:ef:ba:ce:13:85:83:d7:c2:69:13:73:7a:94:64:
de:a6:00:d6:41:76:75:58:d4:5d:65:04:96:5c:42:
85:00:ae:81:31:3a:61:fe:a2:e8:c0:ff:21:a9:12:
1e:99:cc:9c:d0:08:f4:5f:14:65:93:71:ff:a3:8d:
b9:02:98:c8:d4:49:29:09:bc:79:54:4b:1a:2e:8b:
9d:6e:d4:21:e5:8e:57:15:1f:1c:ff:4e:47:04:36:
60:b6:f9:fa:7e:e4:7e:d9:08:f5:1d:33:02:53:08:
26:23:8e:45:22:8c:d0:71:72:86:4e:84:3a:ba:d4:
5c:f7:84:57:e7:85:89:95:46:67:60:b0:af:a7:23:
b3:e6:6c:18:7c:54:b3:1c:57:94:44:73:e6:fe:99:
a4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:45:F8:9E:06:F5:3D:14:58:D5:96:3D:B3:6F:38:25:7E:E0:1B:1D
X509v3 Authority Key Identifier:
keyid:5F:00:14:0F:67:2D:03:1D:06:07:49:3A:02:1A:46:F1:A9:47:5A:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/3130332e3133322e3231322e302f32342d3234203d3e20313337373539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.132.212.0/24
Signature Algorithm: sha256WithRSAEncryption
77:55:1f:6b:cc:14:df:9a:3f:a3:d2:a5:7f:25:05:58:dc:31:
f5:4d:98:01:bd:17:1a:6e:78:7a:5b:38:96:8b:c2:0c:98:7c:
35:bf:19:a0:b3:af:d7:eb:8e:35:f1:3d:86:9a:77:f8:6d:e9:
d6:fb:d2:31:37:dc:3a:50:23:86:c3:35:5b:92:08:ba:d8:f5:
74:bf:71:20:af:57:e3:86:6b:74:5c:b1:25:b9:ff:e0:ef:67:
20:f7:16:09:48:47:c2:71:de:91:23:12:0a:1a:1b:66:99:27:
b2:70:4a:01:61:7e:93:ca:73:3a:29:4a:b0:9f:71:a5:be:9c:
08:70:eb:6a:53:ac:92:a1:3c:59:36:d0:cb:d9:f8:d9:ec:81:
cb:59:f0:a3:cd:e1:3c:f6:f2:c0:40:de:d4:83:ab:d3:1f:cf:
69:52:61:f6:42:1d:60:1a:ab:e6:aa:b3:ce:db:f3:bb:93:8b:
95:ec:5b:c1:7e:cc:af:63:97:96:42:9c:30:d2:41:b5:7f:2a:
d0:e5:d2:12:d5:cf:aa:2d:0a:74:32:90:d7:cd:85:c1:66:96:
d5:ea:73:3e:6b:b6:07:76:b8:a6:1f:1d:7c:8a:f8:89:13:15:
a5:74:f5:9f:12:ef:7e:ef:73:77:6f:80:7f:42:ef:8d:99:15:
c9:3e:90:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:54:44 2026 by rpki-client