
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3234302e31362e302f32322d3232203d3e203633363437.roa
File: 3130332e3234302e31362e302f32322d3232203d3e203633363437.roa (raw, json)
Hash identifier: q++YE6i85heQelNf8oAs1O/pHfC1rrvg5gHw+M8CtUA=
Subject key identifier: D6:4D:CE:63:AF:3E:D4:AE:B3:1D:74:FB:6D:C6:F1:8D:D7:45:AB:F6
Certificate issuer: /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Certificate serial: 6099D0D8645ED2741B431D983816A4C57F2A2F91
Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3234302e31362e302f32322d3232203d3e203633363437.roa
Signing time: Mon 13 Apr 2026 08:15:03 +0000
ROA not before: Mon 13 Apr 2026 08:10:03 +0000
ROA not after: Mon 12 Apr 2027 08:15:03 +0000
asID: 63647
IP address blocks: 103.240.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 07:10:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:99:d0:d8:64:5e:d2:74:1b:43:1d:98:38:16:a4:c5:7f:2a:2f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Validity
Not Before: Apr 13 08:10:03 2026 GMT
Not After : Apr 12 08:15:03 2027 GMT
Subject: CN=D64DCE63AF3ED4AEB31D74FB6DC6F18DD745ABF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7d:ab:79:53:35:81:b9:ba:56:3f:5b:ac:e2:
ac:e1:0d:1c:cd:ce:48:eb:98:9d:5e:ee:57:7a:ca:
3d:ad:8d:4f:24:40:b9:07:76:32:da:3f:56:25:bd:
26:55:79:80:04:bf:dd:98:73:0f:d8:63:f5:40:2f:
27:2b:01:11:bd:d0:91:b9:e3:db:f5:73:c5:20:31:
00:ad:0b:38:0b:80:0d:ef:1f:35:bc:f1:df:68:73:
db:d2:26:d9:74:a4:18:7b:08:2e:89:3f:4c:d5:01:
89:f2:74:d9:2b:3d:7d:a6:56:0d:ab:b7:07:d9:5a:
43:cf:ea:2b:6b:a0:57:9b:cb:4c:8d:a2:6d:3e:3d:
5e:7b:dd:00:e7:cd:77:97:21:9a:1d:07:85:5b:ed:
cb:eb:d8:88:cf:7e:cc:8f:06:a9:aa:2c:aa:b7:eb:
a1:66:aa:2a:99:1a:1f:2e:c3:c5:0e:af:5a:ba:0a:
90:90:9f:36:20:56:cc:32:21:31:71:63:97:7d:e4:
ba:fb:05:00:ee:21:3c:f5:2f:2b:8c:ef:07:03:3b:
31:03:ea:a2:14:c5:7c:aa:0e:0a:0a:f6:ee:84:a3:
ea:53:73:24:1d:43:fe:49:f2:3e:6b:a2:b0:a1:80:
00:3e:52:ea:b2:27:f4:69:5f:48:ef:9d:6d:b2:5a:
60:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4D:CE:63:AF:3E:D4:AE:B3:1D:74:FB:6D:C6:F1:8D:D7:45:AB:F6
X509v3 Authority Key Identifier:
keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3234302e31362e302f32322d3232203d3e203633363437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.240.16.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:2e:9e:ab:9e:cb:8e:20:20:c7:a0:0f:0f:c4:4e:ff:66:22:
f6:1c:07:28:10:01:d7:44:43:1d:05:8e:76:e3:fc:bc:34:79:
ac:9b:4e:23:22:87:e1:e4:eb:38:a3:58:45:6d:79:71:6d:03:
5c:f4:7a:34:d4:44:07:ef:e5:da:b6:ec:ac:26:87:37:5e:9f:
58:08:42:26:8c:78:d4:48:4c:e7:c2:24:ed:a6:65:3d:da:b5:
d6:fa:5d:7c:d6:ca:ae:f7:e1:1b:7b:aa:59:75:82:05:a6:48:
77:22:d8:3c:fd:03:cc:6c:20:f2:e5:01:2d:af:d7:ed:7d:f7:
60:13:c7:84:fb:ce:9e:73:4d:e0:4b:da:f9:79:4e:65:10:92:
c0:bd:28:9e:a7:f9:be:26:fd:91:b9:f4:25:07:ef:60:da:db:
c4:05:73:58:1c:11:59:62:86:bd:59:73:20:6e:af:16:45:11:
cf:f0:7d:3d:20:b2:e5:62:14:5c:66:a6:d6:4c:db:21:3b:c7:
cd:c2:55:eb:e3:27:86:39:c2:88:9a:be:fd:ec:70:6d:6b:a0:
11:38:17:9b:d8:0a:8e:c9:7d:01:41:24:ad:2a:c0:4f:cc:75:
69:b8:d8:ac:1c:43:d1:e5:11:12:e4:b6:9c:18:0d:da:1f:d8:
14:53:43:70
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUYJnQ2GRe0nQbQx2YOBakxX8qL5EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzFDNDhGOTU5M0Q2QTE5REJEM0ZBQ0E5QzZFRkE1QjU1
QUQzRjM5ODAeFw0yNjA0MTMwODEwMDNaFw0yNzA0MTIwODE1MDNaMDMxMTAvBgNV
BAMTKEQ2NERDRTYzQUYzRUQ0QUVCMzFENzRGQjZEQzZGMThERDc0NUFCRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDefat5UzWBubpWP1us4qzhDRzN
zkjrmJ1e7ld6yj2tjU8kQLkHdjLaP1YlvSZVeYAEv92Ycw/YY/VALycrARG90JG5
49v1c8UgMQCtCzgLgA3vHzW88d9oc9vSJtl0pBh7CC6JP0zVAYnydNkrPX2mVg2r
twfZWkPP6itroFeby0yNom0+PV573QDnzXeXIZodB4Vb7cvr2IjPfsyPBqmqLKq3
66FmqiqZGh8uw8UOr1q6CpCQnzYgVswyITFxY5d95Lr7BQDuITz1LyuM7wcDOzED
6qIUxXyqDgoK9u6Eo+pTcyQdQ/5J8j5rorChgAA+UuqyJ/RpX0jvnW2yWmAfAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU1k3OY68+1K6zHXT7bcbxjddFq/YwHwYDVR0j
BBgwFoAUwcSPlZPWoZ29P6ypxu+ltVrT85gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTk3ODMxNjg4NTY1NTU1NS8wL0MxQzQ4Rjk1OTNENkExOURCRDNGQUNBOUM2RUZB
NUI1NUFEM0YzOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzFDNDhGOTU5M0Q2QTE5REJEM0ZBQ0E5QzZFRkE1QjU1QUQzRjM5OC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NTk3ODMxNjg4NTY1NTU1NS8wLzMxMzAzMzJlMzIz
NDMwMmUzMTM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzYzMzM2MzQzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmfwEDANBgkqhkiG9w0BAQsFAAOCAQEAKi6eq57LjiAgx6APD8RO/2Yi
9hwHKBAB10RDHQWOduP8vDR5rJtOIyKH4eTrOKNYRW15cW0DXPR6NNREB+/l2rbs
rCaHN16fWAhCJox41EhM58Ik7aZlPdq11vpdfNbKrvfhG3uqWXWCBaZIdyLYPP0D
zGwg8uUBLa/X7X33YBPHhPvOnnNN4Eva+XlOZRCSwL0onqf5vib9kbn0JQfvYNrb
xAVzWBwRWWKGvVlzIG6vFkURz/B9PSCy5WIUXGam1kzbITvHzcJV6+MnhjnCiJq+
/exwbWugETgXm9gKjsl9AUEkrSrAT8x1abjYrBxD0eUREuS2nBgN2h/YFFNDcA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:20:54 2026 by rpki-client