
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3233332e3136322e302f32332d3233203d3e203633363437.roa
File: 3130332e3233332e3136322e302f32332d3233203d3e203633363437.roa (raw, json)
Hash identifier: /mpCOOhcoifOGQlBxngziKNabqELudoz9rVsMBtpZeo=
Subject key identifier: CA:69:2D:1A:C3:43:4F:63:01:D3:F2:83:67:70:45:6D:62:97:C7:A6
Certificate issuer: /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Certificate serial: 0D89D05236C92245DF91F542AD5BA75F55C0E2F4
Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3233332e3136322e302f32332d3233203d3e203633363437.roa
Signing time: Mon 13 Apr 2026 08:25:42 +0000
ROA not before: Mon 13 Apr 2026 08:20:42 +0000
ROA not after: Mon 12 Apr 2027 08:25:42 +0000
asID: 63647
IP address blocks: 103.233.162.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:89:d0:52:36:c9:22:45:df:91:f5:42:ad:5b:a7:5f:55:c0:e2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Validity
Not Before: Apr 13 08:20:42 2026 GMT
Not After : Apr 12 08:25:42 2027 GMT
Subject: CN=CA692D1AC3434F6301D3F2836770456D6297C7A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7d:ce:42:83:54:c2:29:c2:54:e6:b7:89:b6:
b0:96:42:ec:72:18:e8:e0:56:7d:0e:73:00:21:f0:
6b:80:15:29:17:ca:c0:f9:69:0b:6a:3a:e4:c0:68:
be:fa:2f:5f:f5:8c:2d:0f:62:b1:60:88:9a:76:c8:
79:f2:b0:1b:0f:49:fe:19:1d:fb:d4:d1:a2:04:6f:
31:05:6c:1c:58:9f:aa:a8:32:73:38:e2:e1:b5:57:
30:a8:70:92:c3:28:7b:67:15:dc:68:5a:2f:f9:08:
8f:5e:af:7d:71:2d:d4:2a:95:3e:61:28:f6:35:5c:
39:f2:3b:69:a4:c1:a1:ce:7e:05:bf:9a:c9:6e:8a:
99:c4:b1:00:8d:6b:12:6b:c2:fb:92:d0:55:8f:f6:
d5:98:90:4b:71:61:8b:11:69:ba:10:5e:e4:2c:73:
af:2f:1d:18:71:0a:c1:4b:8a:c0:cb:5b:a4:b9:da:
dc:e8:fc:f2:77:62:79:8b:53:4c:56:c5:f2:a5:78:
a2:71:b5:f6:b1:46:91:93:d4:87:22:8f:2d:14:0e:
47:57:a0:b9:05:d8:e4:59:ce:ec:a1:15:7d:fc:30:
a9:e8:ce:e1:7a:1b:df:af:4c:fd:7f:0b:ea:05:b0:
0e:d9:ef:f7:99:1a:cc:91:55:94:4d:b8:13:93:bb:
7b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:69:2D:1A:C3:43:4F:63:01:D3:F2:83:67:70:45:6D:62:97:C7:A6
X509v3 Authority Key Identifier:
keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3233332e3136322e302f32332d3233203d3e203633363437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.233.162.0/23
Signature Algorithm: sha256WithRSAEncryption
57:01:a1:08:9b:99:6d:4f:a6:40:64:c7:cc:e0:a4:89:dd:0a:
6c:de:15:cb:14:78:ea:eb:22:96:30:59:88:ea:29:ed:91:61:
ed:a3:9d:45:5a:ca:5c:8a:9e:4d:4c:d5:c6:ca:12:76:ce:9c:
31:5e:b5:0e:f5:1a:b3:c7:0b:9c:0c:57:80:da:e8:81:ba:ed:
b8:10:a5:9d:98:e5:75:4b:d4:30:e9:1a:be:ee:25:3b:12:d5:
2f:30:e9:76:27:3e:b7:04:05:fa:0f:a8:cd:ee:41:51:8f:91:
8e:6a:7d:80:3b:70:da:d7:6b:fb:27:f6:5a:e1:ef:16:8f:b6:
00:18:62:f3:20:14:6d:50:4c:d6:a5:0d:0d:e1:5a:b6:1c:d2:
a1:4d:76:16:41:36:2c:b0:f7:e9:38:42:4c:53:d7:d4:ec:54:
69:0d:1b:03:ab:75:8f:39:c3:dc:f2:26:f9:fc:6e:49:78:2e:
82:fd:f1:55:1e:63:55:68:ba:ad:8c:73:c1:47:15:cd:04:01:
38:9f:a2:43:c5:53:25:2f:c6:9b:fb:97:8e:ad:7a:32:51:bc:
6e:ab:66:8d:6b:12:cd:c3:4a:be:54:49:3a:49:cb:ab:f3:b8:
60:68:96:67:7a:1f:fa:dd:91:6c:09:01:7c:4f:a9:02:21:34:
ce:cf:6b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:43:10 2026 by rpki-client