
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233372e3234392e302f32342d3332203d3e2034383038.roa
File: 3130332e3233372e3234392e302f32342d3332203d3e2034383038.roa (raw, json)
Hash identifier: zkPo1dDtzimtHFbfAofSseznalvCEczDpYj3pcTeccc=
Subject key identifier: 2D:34:F2:C4:5A:3C:D4:E3:96:80:A3:C2:94:98:71:42:56:A7:44:E7
Certificate issuer: /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Certificate serial: 50C413076303486BC6D7943EAD82301287E47EE1
Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233372e3234392e302f32342d3332203d3e2034383038.roa
Signing time: Wed 15 Apr 2026 07:59:09 +0000
ROA not before: Wed 15 Apr 2026 07:54:09 +0000
ROA not after: Wed 14 Apr 2027 07:59:09 +0000
asID: 4808
IP address blocks: 103.237.249.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:c4:13:07:63:03:48:6b:c6:d7:94:3e:ad:82:30:12:87:e4:7e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Validity
Not Before: Apr 15 07:54:09 2026 GMT
Not After : Apr 14 07:59:09 2027 GMT
Subject: CN=2D34F2C45A3CD4E39680A3C29498714256A744E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e8:5c:e7:f6:5e:e9:b9:b7:0d:ad:e4:bf:35:
83:70:b8:db:0e:d0:34:4c:47:fb:b6:13:e5:75:02:
82:d4:32:89:b4:7b:d7:a0:3b:77:49:3f:80:46:05:
88:1a:7d:3d:7c:da:84:71:88:22:b3:02:7b:02:76:
8a:12:b1:d6:86:57:80:f3:41:80:c7:b4:4f:08:6d:
bf:db:6b:88:24:95:38:2e:21:45:72:1d:21:53:0e:
fd:7b:6a:0c:88:b9:70:2d:1d:f0:b5:8b:f2:d2:b5:
99:3d:17:1b:c7:25:4b:0a:0e:6e:58:8e:fe:db:a4:
13:e5:c5:f6:fe:c7:8a:36:ca:ee:bc:fe:44:44:17:
71:5a:fe:36:2f:5a:4e:e3:d9:a2:43:7b:4f:2f:cb:
e9:14:01:2f:18:5b:93:eb:ed:04:83:6a:c5:02:be:
02:d4:3b:7a:24:78:5b:4f:80:cc:bd:eb:31:67:aa:
2b:83:1a:01:2c:82:a5:ec:f7:c7:b8:d2:41:56:36:
67:c4:bf:ea:8b:56:45:98:41:20:3a:f1:cb:5a:a1:
8a:a0:bd:35:d7:61:fd:a8:bc:aa:d3:58:83:8c:0d:
73:e0:50:f7:27:83:0c:4c:ec:61:80:af:d4:88:86:
d5:a5:a1:00:41:fa:a5:80:94:ee:c9:41:94:b3:27:
d5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:34:F2:C4:5A:3C:D4:E3:96:80:A3:C2:94:98:71:42:56:A7:44:E7
X509v3 Authority Key Identifier:
keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233372e3234392e302f32342d3332203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.237.249.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:dd:07:6d:8c:15:41:49:69:33:ca:d0:92:4f:47:d7:4f:fe:
e9:a9:59:e6:0f:48:0b:02:98:6f:f4:6b:ae:f7:0f:33:3f:98:
03:64:75:23:2c:a4:68:23:65:6d:c7:b1:57:d9:18:1b:b2:e4:
b5:74:17:2b:04:37:94:a6:af:7e:09:df:69:ab:b9:45:be:e5:
14:18:48:7b:19:83:c0:5f:be:67:43:30:ca:81:bb:a8:fd:b4:
e7:0a:7f:61:45:9a:a3:07:b7:e3:56:9d:af:a6:02:45:d8:89:
ee:78:c2:15:e9:0e:67:90:ea:ea:16:23:44:11:82:51:bf:53:
ff:f6:ca:6a:2f:1b:98:23:bf:f9:13:f9:a7:71:d7:f8:d2:c9:
8b:a0:e5:8e:8b:68:66:cf:b2:af:a7:b3:f9:d3:5d:be:30:bb:
eb:a3:f9:6a:ec:7f:40:75:54:c8:4d:fa:b3:5f:29:fd:de:29:
21:54:f8:65:30:f7:b4:71:b3:c6:9e:38:6d:4a:c2:ac:9a:09:
2a:a8:b3:ae:ca:74:84:56:ab:4e:18:31:48:e5:57:5e:d6:dd:
ad:9a:00:fe:59:98:8a:bf:fe:63:97:33:20:6a:c2:2b:93:ea:
dc:3a:d2:a0:07:1d:a5:47:cc:3e:21:0a:04:ad:b5:90:f4:00:
a2:34:f4:48
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:32:55 2026 by rpki-client