
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233382e3136322e302f32332d3332203d3e2034383038.roa
File: 3130332e3233382e3136322e302f32332d3332203d3e2034383038.roa (raw, json)
Hash identifier: SPLElGaFtPcpId7FuYNt4xpu3jij/03K/6xEft/mzEY=
Subject key identifier: FE:2B:33:EB:6F:28:0C:F4:4D:C3:6F:8E:FE:74:A4:BA:0D:2D:22:08
Certificate issuer: /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Certificate serial: 1213DE21A7A1B48F576FE3C06DFAF000F24AEA13
Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233382e3136322e302f32332d3332203d3e2034383038.roa
Signing time: Wed 15 Apr 2026 08:00:14 +0000
ROA not before: Wed 15 Apr 2026 07:55:14 +0000
ROA not after: Wed 14 Apr 2027 08:00:14 +0000
asID: 4808
IP address blocks: 103.238.162.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:13:de:21:a7:a1:b4:8f:57:6f:e3:c0:6d:fa:f0:00:f2:4a:ea:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Validity
Not Before: Apr 15 07:55:14 2026 GMT
Not After : Apr 14 08:00:14 2027 GMT
Subject: CN=FE2B33EB6F280CF44DC36F8EFE74A4BA0D2D2208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d1:61:a8:73:5c:93:1a:8a:19:9b:d9:57:a4:
6e:a5:ae:40:23:b1:2f:71:e5:fc:f2:41:87:3e:9f:
84:02:20:65:51:6a:6c:77:9c:ee:4b:d4:ab:25:6e:
b0:16:cb:39:76:7b:aa:11:46:a2:e6:03:73:7c:af:
b4:8e:1c:8b:0b:14:e3:25:8d:74:a0:05:6c:25:bb:
22:f4:79:4c:fb:ef:4b:87:5d:33:e0:e3:c6:c3:b3:
c3:4e:3b:e0:b4:6a:33:9f:3f:9b:e2:b1:9e:d0:80:
a8:9c:d2:f2:80:58:be:12:83:39:01:c2:60:1b:af:
e1:38:2f:3d:40:1d:26:38:5b:6d:f7:71:f5:ac:16:
32:03:e0:da:3d:55:0e:50:6a:b0:40:7a:76:f9:28:
21:02:9d:c4:9d:26:0e:99:b3:0d:e8:61:fd:b1:18:
08:1b:30:e9:e2:58:93:5b:a5:db:4d:12:8e:30:d4:
7a:0b:00:53:6d:d3:d0:e1:79:a3:4b:73:80:46:d5:
9e:a0:c9:96:fd:a6:f3:e4:4e:71:fa:74:79:a4:96:
a9:a0:72:dc:f1:e9:90:a1:78:5c:4b:cf:d8:28:2d:
fd:83:5d:9d:d8:d0:5b:be:df:e8:0a:e7:e7:fe:cd:
fd:00:d5:68:58:e9:ad:43:82:0b:80:c4:b6:74:7f:
0b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2B:33:EB:6F:28:0C:F4:4D:C3:6F:8E:FE:74:A4:BA:0D:2D:22:08
X509v3 Authority Key Identifier:
keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233382e3136322e302f32332d3332203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.162.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:38:3b:34:e9:7f:ed:1c:32:4e:b7:00:6a:04:50:a4:a4:69:
24:d9:11:77:28:ea:df:65:a8:8d:31:d8:58:57:97:f6:e4:22:
de:23:67:de:36:74:c8:3a:26:52:70:1d:d4:d9:2d:cf:10:54:
45:51:3b:c9:61:28:e5:4f:c8:9a:2b:ef:58:4a:68:50:e9:31:
8f:3b:a3:a6:80:ac:94:9e:2f:33:16:2c:7b:4d:f8:85:1e:66:
14:9b:74:8a:ea:b4:0f:e6:8c:c1:38:e6:37:89:95:34:f3:cf:
88:72:c3:19:7a:5d:3c:62:d2:85:e6:9a:3c:e4:f6:e4:4c:39:
ba:bd:89:d9:71:a6:0a:46:ad:60:29:e7:7f:92:8b:7c:a0:18:
67:d6:81:a7:81:37:a7:64:5b:6e:3b:ee:a7:17:c0:8f:34:32:
67:0b:f3:e3:4c:72:00:a6:c1:65:ce:34:be:33:7b:57:d4:26:
59:07:90:f3:46:ee:46:d1:f6:c6:1c:80:65:0d:68:c5:ab:89:
3f:59:03:fd:b9:24:82:ba:86:ab:81:18:56:60:a4:7e:0c:f8:
26:e2:d6:6e:06:08:23:ec:b4:bd:11:b9:9b:d8:e8:e9:e4:bb:
b0:fa:38:10:19:6e:8a:86:36:8b:e7:5e:87:78:4f:d6:13:01:
22:d0:fd:d8
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUEhPeIaehtI9Xb+PAbfrwAPJK6hMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3
OEMxRTMxNTAeFw0yNjA0MTUwNzU1MTRaFw0yNzA0MTQwODAwMTRaMDMxMTAvBgNV
BAMTKEZFMkIzM0VCNkYyODBDRjQ0REMzNkY4RUZFNzRBNEJBMEQyRDIyMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU0WGoc1yTGooZm9lXpG6lrkAj
sS9x5fzyQYc+n4QCIGVRamx3nO5L1KslbrAWyzl2e6oRRqLmA3N8r7SOHIsLFOMl
jXSgBWwluyL0eUz770uHXTPg48bDs8NOO+C0ajOfP5visZ7QgKic0vKAWL4SgzkB
wmAbr+E4Lz1AHSY4W233cfWsFjID4No9VQ5QarBAenb5KCECncSdJg6Zsw3oYf2x
GAgbMOniWJNbpdtNEo4w1HoLAFNt09DheaNLc4BG1Z6gyZb9pvPkTnH6dHmklqmg
ctzx6ZCheFxLz9goLf2DXZ3Y0Fu+3+gK5+f+zf0A1WhY6a1DgguAxLZ0fwuXAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU/isz628oDPRNw2+O/nSkug0tIggwHwYDVR0j
BBgwFoAUIMrI5wtcswlOR/8FFiOphXjB4xUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTk4NDI5NDc2NzA5OTkwNS8wLzIwQ0FDOEU3MEI1Q0IzMDk0RTQ3RkYwNTE2MjNB
OTg1NzhDMUUzMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3OEMxRTMxNS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NTk4NDI5NDc2NzA5OTkwNS8wLzMxMzAzMzJlMzIz
MzM4MmUzMTM2MzIyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzNDM4MzAzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAWfuojANBgkqhkiG9w0BAQsFAAOCAQEAOjg7NOl/7RwyTrcAagRQpKRp
JNkRdyjq32WojTHYWFeX9uQi3iNn3jZ0yDomUnAd1NktzxBURVE7yWEo5U/Imivv
WEpoUOkxjzujpoCslJ4vMxYse034hR5mFJt0iuq0D+aMwTjmN4mVNPPPiHLDGXpd
PGLSheaaPOT25Ew5ur2J2XGmCkatYCnnf5KLfKAYZ9aBp4E3p2RbbjvupxfAjzQy
Zwvz40xyAKbBZc40vjN7V9QmWQeQ80buRtH2xhyAZQ1oxauJP1kD/bkkgrqGq4EY
VmCkfgz4JuLWbgYII+y0vRG5m9jo6eS7sPo4EBluioY2i+deh3hP1hMBItD92A==
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:26:58 2026 by rpki-client