
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095881215065456642/0/3130332e3133322e3231342e302f32342d3234203d3e20313337373539.roa
File: 3130332e3133322e3231342e302f32342d3234203d3e20313337373539.roa (raw, json)
Hash identifier: U7ZbArWBWfu8/5lcAVKldcUla2gFMo1Yu6PSfWaHzL8=
Subject key identifier: 5E:3F:9C:3E:3A:6F:D7:E8:B7:0E:9F:A3:E8:3E:4A:1B:2E:C2:E2:1A
Certificate issuer: /CN=5F00140F672D031D0607493A021A46F1A9475AE8
Certificate serial: 6DB5605B68DB5D1B746B23CDDD23D8C1911E7B4D
Authority key identifier: 5F:00:14:0F:67:2D:03:1D:06:07:49:3A:02:1A:46:F1:A9:47:5A:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/3130332e3133322e3231342e302f32342d3234203d3e20313337373539.roa
Signing time: Tue 14 Apr 2026 01:15:23 +0000
ROA not before: Tue 14 Apr 2026 01:10:23 +0000
ROA not after: Tue 13 Apr 2027 01:15:23 +0000
asID: 137759
IP address blocks: 103.132.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:b5:60:5b:68:db:5d:1b:74:6b:23:cd:dd:23:d8:c1:91:1e:7b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F00140F672D031D0607493A021A46F1A9475AE8
Validity
Not Before: Apr 14 01:10:23 2026 GMT
Not After : Apr 13 01:15:23 2027 GMT
Subject: CN=5E3F9C3E3A6FD7E8B70E9FA3E83E4A1B2EC2E21A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0d:d0:f3:db:b7:98:e4:b7:e4:06:13:51:62:
8f:77:bb:8b:62:7e:bc:ce:0e:bb:06:34:b7:1d:c7:
6a:c0:dc:4a:74:31:f1:c9:8b:8e:d2:18:23:26:ee:
d2:13:3d:86:4f:d5:05:10:61:90:ea:e5:d5:ec:5f:
34:c2:35:4a:02:99:24:9d:4e:86:4b:23:6d:1e:3a:
6a:f0:be:fa:4f:65:6b:ab:2e:09:5e:03:bf:24:34:
0f:0e:c2:59:8a:d8:df:ac:73:8c:45:13:5e:d2:bd:
c9:42:4d:51:2f:50:12:0f:a7:57:38:a9:16:96:c5:
ae:81:77:0e:c9:e0:4f:af:24:1c:09:0a:87:4b:75:
6f:2b:21:e8:46:00:2c:c9:98:66:a1:60:fe:39:55:
70:e5:6f:d6:14:22:15:0b:55:ba:d7:3c:aa:ac:23:
ae:77:19:ca:c5:57:14:b3:76:4e:da:3f:10:15:71:
d3:78:df:1e:0b:09:7b:1b:38:02:3f:13:2f:90:c9:
cd:27:3d:f3:6d:51:33:18:6d:f9:91:aa:19:91:81:
c4:41:31:ce:dd:64:a2:5a:48:de:af:68:af:8d:30:
1a:54:7e:1e:88:54:fe:51:f6:3d:c6:90:73:0f:30:
6d:ec:1c:c5:5f:70:1a:e8:d0:79:87:a6:60:b5:8d:
27:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3F:9C:3E:3A:6F:D7:E8:B7:0E:9F:A3:E8:3E:4A:1B:2E:C2:E2:1A
X509v3 Authority Key Identifier:
keyid:5F:00:14:0F:67:2D:03:1D:06:07:49:3A:02:1A:46:F1:A9:47:5A:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/3130332e3133322e3231342e302f32342d3234203d3e20313337373539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.132.214.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:aa:06:3d:11:34:76:1e:2c:e2:a0:9a:f2:5e:98:7d:d0:43:
78:58:b8:59:2d:60:94:b0:32:ae:14:d2:9f:4d:27:6a:09:a1:
66:ed:c0:28:5e:9a:45:aa:d7:ae:2e:f3:aa:3c:fa:06:a1:5f:
28:31:be:e9:09:5c:ce:87:ec:40:68:e0:15:38:a5:a3:cc:a0:
d6:69:04:d3:e0:60:eb:47:3e:6d:38:3a:29:48:e0:0b:e0:e5:
36:f4:ac:21:fa:c8:07:27:cb:42:c3:30:17:42:79:45:9d:32:
3c:82:de:62:15:57:03:ea:c6:d2:32:0a:67:30:1c:d8:19:66:
30:48:0e:42:75:ab:7e:4f:1b:0f:5b:d3:27:2f:1a:c1:d6:01:
e8:25:5e:27:a4:e9:f7:b3:ed:c6:f7:b2:ff:1d:11:83:85:70:
13:3b:78:1e:dd:9a:08:00:9f:ce:86:38:88:6f:ca:fc:47:07:
47:cb:f4:fd:8d:f7:b8:41:fc:41:5c:3d:3d:d9:6c:c5:77:c0:
ad:fb:21:e6:f8:98:ae:74:8b:d8:a6:f4:05:6a:35:1c:2c:45:
c7:b6:d5:ed:4c:d4:35:d9:cf:df:42:98:c9:29:bb:a4:6b:e4:
9c:36:98:04:0d:74:7e:60:49:0a:3a:4c:5f:36:e3:67:a1:1c:
d5:29:3e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:52:22 2026 by rpki-client