
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3233332e3136322e302f32332d3233203d3e2034383038.roa
File: 3130332e3233332e3136322e302f32332d3233203d3e2034383038.roa (raw, json)
Hash identifier: YyhJmsiu5REjTLuvSSldDw5lxTqSSS+08c8fqNfPbVI=
Subject key identifier: 34:D4:8A:3A:42:34:65:90:BD:18:51:E1:E7:BE:34:83:6F:DF:34:5F
Certificate issuer: /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Certificate serial: 4CD4EDDE6F8ABDE4DD241F0C76211EEF9353C59C
Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3233332e3136322e302f32332d3233203d3e2034383038.roa
Signing time: Mon 13 Apr 2026 08:25:42 +0000
ROA not before: Mon 13 Apr 2026 08:20:42 +0000
ROA not after: Mon 12 Apr 2027 08:25:42 +0000
asID: 4808
IP address blocks: 103.233.162.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 07:10:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:d4:ed:de:6f:8a:bd:e4:dd:24:1f:0c:76:21:1e:ef:93:53:c5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Validity
Not Before: Apr 13 08:20:42 2026 GMT
Not After : Apr 12 08:25:42 2027 GMT
Subject: CN=34D48A3A42346590BD1851E1E7BE34836FDF345F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0d:71:9a:fd:18:d6:25:ac:60:74:5b:c0:4d:
be:37:51:cb:9b:52:31:81:ac:df:ef:11:eb:03:c4:
46:9c:48:ad:00:ac:7c:e2:47:99:80:ad:f1:9a:7d:
c5:3d:59:59:3b:33:47:0e:34:c1:78:64:9a:1b:24:
06:0c:9a:51:45:aa:be:19:6f:02:e3:e8:04:5a:7b:
e8:65:b7:43:ba:be:8e:2e:89:7e:f3:f1:1e:16:d9:
d4:83:04:7a:19:5a:57:cf:10:d6:98:19:6a:48:e2:
f4:39:f4:4a:9a:d3:32:67:70:94:2a:44:72:a0:19:
01:29:2b:24:ec:8a:f6:1f:6c:1f:be:6d:c4:8b:2c:
c2:b6:de:c6:1f:49:df:6e:e8:2d:69:86:f6:be:16:
5c:f4:a0:ab:3a:cc:d9:14:40:93:a3:55:c7:ca:f8:
b9:ca:2f:95:19:dd:ad:50:f5:f1:b3:a8:51:37:c4:
09:6e:fc:dd:79:76:0b:62:4a:77:0c:3c:08:49:60:
f7:8a:5d:48:ce:fb:89:d2:4e:37:1e:67:ef:3b:72:
d6:27:d2:ea:6b:c4:94:a7:2a:7d:fb:76:04:8b:45:
7c:0a:3f:3c:6d:76:7e:b6:13:42:0e:7e:bd:2d:c9:
c8:51:ad:eb:79:9e:a2:25:a5:48:69:31:92:d6:e7:
f7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D4:8A:3A:42:34:65:90:BD:18:51:E1:E7:BE:34:83:6F:DF:34:5F
X509v3 Authority Key Identifier:
keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3233332e3136322e302f32332d3233203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.233.162.0/23
Signature Algorithm: sha256WithRSAEncryption
46:e6:97:13:12:1d:8f:17:24:6a:e6:4a:ac:41:57:38:30:4a:
2b:d8:f1:14:2e:6e:b2:1e:e0:97:b7:00:5f:11:89:b9:1b:f7:
ad:21:bb:f0:31:c3:2d:66:ba:08:59:f5:e3:e5:68:91:f8:dc:
23:5a:17:01:8b:22:c0:5e:15:46:68:08:77:61:64:25:6b:6a:
fc:e2:11:91:c3:34:a8:1e:19:7a:9e:66:70:6e:e9:9d:d9:98:
65:64:49:9a:d1:20:3a:b9:68:be:e1:c4:a8:95:10:b6:4d:5d:
e1:78:dd:bc:43:a6:bc:83:0f:56:9c:b5:40:fe:43:4e:1d:41:
e0:14:27:68:1e:16:94:ad:54:7f:fa:4c:cd:dd:36:ae:c5:6c:
c1:a7:76:55:5f:71:84:c2:53:46:22:99:fd:b2:d6:82:c1:0c:
5f:90:ed:7d:d9:d8:4c:c3:aa:b1:fd:b5:b4:62:5c:a1:8a:c0:
4c:4a:26:f2:d8:7b:62:6d:55:9f:3a:1e:7b:ef:e2:a0:1b:24:
97:57:0c:80:dc:e7:70:3d:95:45:91:e2:3d:78:f1:94:d2:1f:
7b:1b:60:ab:18:f9:95:c1:6c:1e:9e:15:5d:f1:f3:3a:3e:42:
00:e3:bc:ff:69:09:43:c3:ba:27:65:29:eb:e7:95:05:9d:40:
52:f5:4b:a6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:16:52 2026 by rpki-client