
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233382e3136302e302f32322d3332203d3e203536303438.roa
File: 3130332e3233382e3136302e302f32322d3332203d3e203536303438.roa (raw, json)
Hash identifier: D5p9o0pPwoaCYpIygArboXdaAKJUUXV6AxrgPTibA68=
Subject key identifier: E2:DC:50:94:0D:49:92:5E:C5:78:AB:44:B0:63:4C:EA:0D:03:0F:1D
Certificate issuer: /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Certificate serial: 5016C961D48CE5138D5B8B7A8F8C0C2B415B821A
Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233382e3136302e302f32322d3332203d3e203536303438.roa
Signing time: Wed 15 Apr 2026 07:50:27 +0000
ROA not before: Wed 15 Apr 2026 07:45:27 +0000
ROA not after: Wed 14 Apr 2027 07:50:27 +0000
asID: 56048
IP address blocks: 103.238.160.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:16:c9:61:d4:8c:e5:13:8d:5b:8b:7a:8f:8c:0c:2b:41:5b:82:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Validity
Not Before: Apr 15 07:45:27 2026 GMT
Not After : Apr 14 07:50:27 2027 GMT
Subject: CN=E2DC50940D49925EC578AB44B0634CEA0D030F1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:30:d5:c2:27:21:6b:48:ab:06:68:f7:b8:92:
59:50:0e:49:09:20:a4:ff:ee:5b:85:9b:93:3d:cb:
01:8d:8c:56:d1:ba:40:8f:54:8a:82:66:53:42:b7:
4c:fd:11:28:9b:c2:64:82:12:95:ae:1e:b6:be:61:
08:5f:ea:3f:5e:79:de:7e:52:43:f1:e9:e3:d0:ac:
a1:87:4c:18:69:36:1a:90:c9:8f:c4:24:92:fd:2f:
4c:d7:2e:b1:77:4f:58:4b:93:f2:c8:d6:94:5b:95:
a9:a4:8e:d0:83:19:80:64:ac:05:2a:cd:ac:04:90:
5f:7a:f5:be:4c:73:0c:45:cc:b6:f1:7f:97:50:99:
be:1a:0a:ab:cf:2a:ba:be:1f:54:cd:7c:21:83:36:
a7:69:b7:2a:a2:69:0f:34:7f:23:55:0b:2f:03:fa:
d7:1c:d9:b4:80:78:ff:80:92:fc:31:ce:b7:0e:9f:
54:7d:a8:fd:7f:9c:30:60:e6:b2:44:76:9a:49:e1:
2f:35:aa:c4:ca:c5:a9:6d:a4:29:58:c1:81:e7:6d:
28:49:ad:b2:6f:d8:fb:bf:eb:c2:0b:b6:8e:4d:d7:
e2:b6:2f:ed:1f:2b:a8:ed:f8:93:54:97:60:b8:92:
76:62:2d:16:9e:46:76:a6:03:04:d5:4e:5c:f4:5f:
02:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DC:50:94:0D:49:92:5E:C5:78:AB:44:B0:63:4C:EA:0D:03:0F:1D
X509v3 Authority Key Identifier:
keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233382e3136302e302f32322d3332203d3e203536303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.160.0/22
Signature Algorithm: sha256WithRSAEncryption
17:db:ec:6e:18:fa:d1:67:89:4d:cb:e3:a2:48:c2:8d:b3:07:
8f:93:75:5e:59:9d:1a:3e:cb:9a:d5:d0:9d:5c:4b:ae:81:d0:
1f:6c:90:dd:9e:69:85:af:bd:34:37:23:0a:87:bb:03:00:87:
02:b2:cc:83:cd:88:5e:4b:25:82:fb:19:9a:b7:9f:e6:0d:db:
22:f7:6c:5e:70:00:14:7b:34:18:8c:30:2c:50:f4:7f:5d:73:
4b:e0:26:1f:c6:64:2a:ee:a2:21:49:e7:f6:c5:36:42:58:c8:
f1:ee:e7:89:2c:6b:90:3f:d3:23:32:b9:b1:c6:1c:81:6d:05:
91:31:57:eb:e2:a0:ab:e3:43:9e:5c:39:d8:33:78:d9:4e:11:
20:e7:11:2e:2e:0d:53:7a:a7:0d:0e:1f:e6:f2:5f:1d:05:44:
d0:f4:49:06:a4:fe:ec:2c:e8:9d:86:49:f1:d5:c3:19:b2:90:
a8:24:20:21:67:4a:8d:21:cc:d8:48:60:13:88:b9:43:02:92:
0a:b6:31:b7:4a:c1:5e:4a:10:86:15:64:40:1f:bf:84:72:24:
d3:2e:79:90:0b:bf:a2:de:b2:d5:da:44:fc:58:18:b5:9b:4f:
b1:02:a3:b8:c4:04:00:45:32:8e:d7:dc:2b:f9:11:9d:44:61:
a2:d3:62:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:26:46 2026 by rpki-client