
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e36302e3233362e302f32322d3232203d3e2034383038.roa
File: 3130332e36302e3233362e302f32322d3232203d3e2034383038.roa (raw, json)
Hash identifier: qHB8KTfFynHMWdIMcluKNSTEjwWTW8bWgCBwGKTf6lI=
Subject key identifier: 41:C0:42:2C:7F:0C:E6:E0:4A:47:DD:B3:4F:1C:75:FE:4D:F2:9F:61
Certificate issuer: /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Certificate serial: 32F4D7F195BCA6EB64D64090EE813766BB256511
Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e36302e3233362e302f32322d3232203d3e2034383038.roa
Signing time: Mon 13 Apr 2026 08:15:04 +0000
ROA not before: Mon 13 Apr 2026 08:10:04 +0000
ROA not after: Mon 12 Apr 2027 08:15:04 +0000
asID: 4808
IP address blocks: 103.60.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 07:10:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:f4:d7:f1:95:bc:a6:eb:64:d6:40:90:ee:81:37:66:bb:25:65:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Validity
Not Before: Apr 13 08:10:04 2026 GMT
Not After : Apr 12 08:15:04 2027 GMT
Subject: CN=41C0422C7F0CE6E04A47DDB34F1C75FE4DF29F61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a4:70:50:2c:63:c5:4f:7a:07:2e:c6:92:e0:
f9:1f:4e:f8:6d:2f:11:1e:de:d7:56:81:4c:ad:c8:
8c:85:29:f6:65:49:8d:70:eb:0a:db:09:27:2a:f5:
c4:4e:0e:ec:4a:67:79:1c:b4:6f:70:7d:d4:a6:cd:
09:b0:75:77:4f:46:c3:9c:7d:01:ed:21:33:35:b5:
07:67:95:6c:1b:7f:08:cc:e9:3c:3e:57:64:cb:3a:
d2:52:76:c0:44:c7:c6:9a:eb:08:29:23:68:65:db:
83:b6:41:c5:df:db:c9:44:cb:01:c7:1e:dd:d1:b7:
92:ff:bf:eb:39:e3:92:df:e8:5c:68:56:03:69:20:
74:f5:72:4b:02:51:f4:09:b3:20:bb:92:26:9d:56:
20:06:ce:c3:a3:c1:06:fc:c2:c4:66:bb:ba:f8:07:
fc:b8:0b:97:62:7a:13:44:57:a3:ce:91:60:fc:77:
fc:10:a7:46:03:f0:b5:44:74:c1:22:d1:07:67:8b:
be:e3:0a:46:dc:49:c1:c5:75:00:91:c1:28:d0:94:
d0:98:70:7c:2c:7b:22:6a:bd:f1:8f:23:4f:50:c5:
3d:59:0f:07:83:04:6f:52:3c:49:c3:d8:16:0e:a0:
71:91:39:98:05:7c:7c:42:ff:14:07:e2:b3:d0:14:
4d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C0:42:2C:7F:0C:E6:E0:4A:47:DD:B3:4F:1C:75:FE:4D:F2:9F:61
X509v3 Authority Key Identifier:
keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e36302e3233362e302f32322d3232203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.60.236.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:77:ab:90:dc:4a:d8:13:05:21:2a:42:16:5c:8b:44:33:61:
02:2a:0e:22:69:f5:dc:55:8b:ac:52:1c:a1:54:5f:b7:7e:01:
72:f4:a5:9a:85:2d:27:fa:e1:c9:18:55:61:fb:b1:6b:67:dc:
6c:d8:c5:83:24:00:c4:5f:2b:64:25:f9:93:5d:3f:80:d2:21:
f2:cf:fe:e3:39:5e:ae:e6:8b:0c:0b:c7:d0:86:a8:11:d9:a1:
4a:6e:f9:80:09:32:a0:22:cb:52:e8:88:58:12:cf:0c:b0:2b:
7b:a1:5e:8e:7e:bd:4e:0d:df:05:d5:68:82:ea:a5:76:6d:7c:
92:70:f7:b2:39:73:ec:f3:6c:d4:51:1a:68:12:e5:21:ba:24:
8e:83:3b:ec:9d:3a:f2:05:80:25:54:24:c6:58:df:89:5f:51:
13:37:18:2a:d2:3e:9f:ef:08:65:ac:f7:45:84:f9:93:78:df:
23:fb:8e:2f:9f:4b:36:e4:4e:17:11:91:21:cc:f8:63:e7:86:
33:8a:8a:1d:10:95:f1:59:a9:d1:3b:0d:74:ff:55:86:3e:c9:
3c:99:7a:80:f2:44:a8:cb:a8:3c:a8:1d:d2:55:14:b8:94:92:
b4:d6:73:3b:21:24:a0:11:b8:ce:c0:a4:d5:53:8e:42:73:56:
eb:34:53:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:24:20 2026 by rpki-client