
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233382e342e302f32322d3332203d3e203536303438.roa
File: 3130332e3233382e342e302f32322d3332203d3e203536303438.roa (raw, json)
Hash identifier: 3AYZjUR1pD7h2aKS4M8S8AaJrju1zJtDf4sFnSnpuL0=
Subject key identifier: 21:46:60:1B:5B:3D:45:16:34:79:96:26:55:CF:06:B8:46:F1:F6:9D
Certificate issuer: /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Certificate serial: 19AB005903CBD291242BF3E12B26B9B113F35D79
Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233382e342e302f32322d3332203d3e203536303438.roa
Signing time: Wed 15 Apr 2026 07:48:27 +0000
ROA not before: Wed 15 Apr 2026 07:43:27 +0000
ROA not after: Wed 14 Apr 2027 07:48:27 +0000
asID: 56048
IP address blocks: 103.238.4.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:ab:00:59:03:cb:d2:91:24:2b:f3:e1:2b:26:b9:b1:13:f3:5d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Validity
Not Before: Apr 15 07:43:27 2026 GMT
Not After : Apr 14 07:48:27 2027 GMT
Subject: CN=2146601B5B3D45163479962655CF06B846F1F69D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8c:53:75:b5:1d:4b:20:97:ec:b6:ef:2c:d9:
d8:dc:73:a1:b9:dd:5e:0c:5e:d0:b8:c5:3c:94:9f:
80:42:8d:b1:88:50:cb:a8:f3:86:30:44:60:bb:7d:
f9:d3:f6:aa:01:81:7f:06:93:16:63:b3:9d:13:21:
de:d0:f9:0c:e8:38:c1:c9:d9:5c:41:a4:df:fc:63:
24:83:6d:26:e4:1f:1a:b9:3a:e3:b8:18:fa:36:c5:
81:2c:da:5f:98:f7:5e:ec:ac:5e:d6:61:a9:82:c0:
5a:57:7d:8e:af:ec:fb:d8:fa:dc:06:c5:47:3e:07:
67:8e:ed:93:15:8f:47:d4:c4:30:cf:cc:55:37:39:
d2:e9:c0:73:bb:d1:f8:08:a4:e4:95:cf:bf:4c:56:
3d:67:91:16:9a:8f:89:a4:1e:a7:40:f3:04:ce:bf:
ca:c6:bc:32:63:88:0e:28:26:ef:5d:34:db:b6:d2:
f2:72:7f:a2:94:ad:a1:68:3a:2c:7d:2a:81:c1:e1:
b5:29:1b:17:1b:17:f1:c2:c9:3d:fd:bf:3b:25:bf:
c3:04:fd:1d:e4:96:6b:0e:81:92:e5:00:ec:3b:1c:
6e:bd:9c:48:56:03:6f:0f:2a:41:c5:37:0e:d1:1b:
e7:90:f7:34:a8:e3:e2:f6:96:a8:9e:ca:87:2c:93:
e7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:46:60:1B:5B:3D:45:16:34:79:96:26:55:CF:06:B8:46:F1:F6:9D
X509v3 Authority Key Identifier:
keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233382e342e302f32322d3332203d3e203536303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.4.0/22
Signature Algorithm: sha256WithRSAEncryption
78:3d:3a:e2:e3:0b:c8:4e:92:a0:af:94:e0:81:38:e5:40:ce:
3b:c9:ba:5a:7e:ad:22:1b:58:0d:59:ec:c6:7e:33:08:13:13:
8d:33:98:83:fd:1e:17:dd:ce:4a:0c:8a:2e:24:fa:2e:1d:71:
0a:8d:62:97:80:6a:77:c7:f6:22:09:21:f0:28:46:eb:3e:80:
80:41:1f:93:04:63:54:3c:67:71:c5:e2:0a:29:83:e9:97:7f:
3a:9b:a2:c8:fd:8f:65:09:40:d3:f8:c6:36:28:60:e4:87:d2:
24:45:e2:85:04:67:cc:92:e2:5d:d9:e3:f2:cc:e9:4a:35:ae:
01:37:2b:10:20:71:7b:11:a5:a1:32:5d:db:0f:63:fd:01:89:
fc:7c:6e:a9:b1:b8:1e:4b:c1:30:22:b1:9b:8c:06:01:b6:6b:
e7:ad:05:22:96:be:9a:df:25:e8:fd:73:a9:03:97:1b:f0:5e:
db:04:b4:0a:38:fc:17:2b:f9:6b:4a:2b:80:6d:84:42:94:af:
32:dd:a3:9d:70:d6:51:3b:36:db:78:4d:e9:e9:da:d0:f1:d8:
e4:8e:08:bf:08:ae:ac:9a:e6:76:ca:af:a1:c2:ff:f8:aa:e4:
26:fc:8e:fb:c7:d5:6d:d3:ea:5a:32:e0:7a:08:1f:d1:01:de:
3b:ba:62:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:26:25 2026 by rpki-client