
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095881215065456642/0/3130332e3133322e3231332e302f32342d3234203d3e20313337373539.roa
File: 3130332e3133322e3231332e302f32342d3234203d3e20313337373539.roa (raw, json)
Hash identifier: CKziFNu0LqXNWZ/lBrbX59kZ+YgYSz+Zo35FHCpodYY=
Subject key identifier: 17:61:2B:85:08:56:7E:F3:56:44:5C:27:44:6D:DC:5E:66:18:FB:71
Certificate issuer: /CN=5F00140F672D031D0607493A021A46F1A9475AE8
Certificate serial: 373625022BF1C48ECAAD2AEB508CBCB43F6B8B3B
Authority key identifier: 5F:00:14:0F:67:2D:03:1D:06:07:49:3A:02:1A:46:F1:A9:47:5A:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/3130332e3133322e3231332e302f32342d3234203d3e20313337373539.roa
Signing time: Tue 14 Apr 2026 01:15:23 +0000
ROA not before: Tue 14 Apr 2026 01:10:23 +0000
ROA not after: Tue 13 Apr 2027 01:15:23 +0000
asID: 137759
IP address blocks: 103.132.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:36:25:02:2b:f1:c4:8e:ca:ad:2a:eb:50:8c:bc:b4:3f:6b:8b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F00140F672D031D0607493A021A46F1A9475AE8
Validity
Not Before: Apr 14 01:10:23 2026 GMT
Not After : Apr 13 01:15:23 2027 GMT
Subject: CN=17612B8508567EF356445C27446DDC5E6618FB71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0e:d7:8c:b7:1d:6d:ac:6d:2a:28:ef:07:ad:
72:d5:eb:c3:37:01:e3:4d:60:de:3a:94:dd:08:e4:
79:82:e5:29:7b:55:41:22:b3:43:8b:28:0d:ff:ce:
bf:ac:f6:7d:46:79:ea:0d:b9:a1:01:60:85:5f:c9:
eb:01:bb:30:7c:78:48:b1:53:90:a6:f1:fb:6a:8f:
1a:01:02:ec:37:c0:5a:2c:80:51:8a:29:bc:ea:5d:
43:28:87:8a:db:37:56:92:b3:05:44:8c:41:8d:63:
8e:62:68:0b:49:01:4b:bc:c0:ed:a6:c5:9b:33:22:
d1:17:84:03:7f:46:30:49:91:9b:c4:43:ff:04:d7:
1a:33:78:a1:7e:61:6d:78:cd:60:1d:b9:e8:f1:9d:
71:6b:74:b7:ef:3e:db:1d:78:c2:3b:95:2d:37:6e:
17:72:53:e6:0b:dd:4d:f7:e2:78:dc:d2:3b:f3:e7:
df:2c:6c:82:6d:50:6b:32:c4:30:03:69:e1:1b:6e:
8c:5f:9b:e6:bf:82:89:45:d9:7d:8e:33:1a:99:d8:
bc:84:3e:cd:91:9a:4b:18:96:d9:a2:2f:1b:32:98:
09:e7:b0:d0:ca:1e:5f:60:1d:9b:0f:64:c5:16:c9:
99:71:83:a7:08:38:ca:17:d1:ef:70:82:c2:8a:f8:
cd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:61:2B:85:08:56:7E:F3:56:44:5C:27:44:6D:DC:5E:66:18:FB:71
X509v3 Authority Key Identifier:
keyid:5F:00:14:0F:67:2D:03:1D:06:07:49:3A:02:1A:46:F1:A9:47:5A:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/3130332e3133322e3231332e302f32342d3234203d3e20313337373539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.132.213.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:04:71:98:e5:c3:5a:ba:2c:69:24:49:d7:d7:fd:0e:02:7f:
8d:f1:84:c8:9e:8f:78:a7:d6:ba:c1:42:6d:af:be:28:a8:6c:
00:19:81:15:2a:3b:27:96:79:64:85:9e:36:05:f8:d0:a1:a1:
ee:4b:5a:12:46:e0:dc:c5:fd:36:5a:34:eb:8b:e8:f5:90:d9:
5c:80:8f:2e:90:0c:c8:a1:f2:5a:ed:d3:22:ff:1d:f3:e2:02:
35:cd:22:be:df:d3:8d:07:f4:9d:e9:03:08:f8:50:b6:ab:e9:
5e:df:2f:ec:f7:8e:4a:ea:5c:52:15:1d:c9:59:9c:a7:4c:eb:
07:94:dd:47:0e:a8:26:42:44:c8:ef:4e:ae:2e:77:0f:e2:c7:
33:64:43:06:f0:93:c7:0a:38:82:2c:02:24:17:57:aa:19:bd:
46:62:a0:33:07:28:f4:23:29:cb:85:b4:bb:c8:b2:7f:fd:27:
6d:7d:48:31:95:db:a8:b1:96:c6:35:0e:f3:d6:3a:0a:9f:59:
ad:bc:4d:98:34:30:79:d8:71:3f:48:e7:98:2a:59:25:23:7c:
ae:42:99:68:2b:f8:a4:b7:80:1b:16:0c:45:ed:33:20:11:60:
b6:55:20:e1:c8:76:5d:a3:4a:01:59:78:5c:cf:53:a3:b6:d7:
c2:9b:a9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:52:56 2026 by rpki-client