
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3234322e3137322e302f32322d3332203d3e2034383038.roa
File: 3130332e3234322e3137322e302f32322d3332203d3e2034383038.roa (raw, json)
Hash identifier: 5SDEWIOZxAbKfW2wSeN2NxOXCatlRqE4Rm1v97xQjwg=
Subject key identifier: 1C:7D:BD:A8:20:16:1E:33:6E:30:2D:49:92:3D:1D:DE:E3:10:74:F6
Certificate issuer: /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Certificate serial: 61C8894D13C660BA2E8C81466FD8F79F2DECD693
Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3234322e3137322e302f32322d3332203d3e2034383038.roa
Signing time: Wed 15 Apr 2026 07:59:29 +0000
ROA not before: Wed 15 Apr 2026 07:54:29 +0000
ROA not after: Wed 14 Apr 2027 07:59:29 +0000
asID: 4808
IP address blocks: 103.242.172.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:c8:89:4d:13:c6:60:ba:2e:8c:81:46:6f:d8:f7:9f:2d:ec:d6:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Validity
Not Before: Apr 15 07:54:29 2026 GMT
Not After : Apr 14 07:59:29 2027 GMT
Subject: CN=1C7DBDA820161E336E302D49923D1DDEE31074F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ca:b2:72:3e:56:76:3a:06:85:c8:5e:cb:e5:
48:bc:fe:7f:68:91:93:53:6e:97:26:9e:a5:fd:bb:
10:36:7a:b7:17:2f:99:84:c2:fc:8e:e1:ce:7f:3c:
4e:98:d9:ad:2a:ff:64:7a:70:7d:ee:3e:f7:d5:72:
96:44:ed:21:64:1a:6a:63:74:2f:48:74:df:d0:98:
cb:47:1e:40:e6:4e:7e:5a:d0:7b:fe:23:af:ca:00:
21:88:8e:5f:cd:49:30:dc:de:e2:a1:31:4e:57:25:
a9:48:93:56:78:5f:d0:7f:cd:70:4b:fd:2f:bb:8b:
7a:c3:0a:9e:bc:4a:e7:2b:54:d4:be:1f:3c:7f:c1:
d1:27:27:f2:1d:4f:6f:82:d6:35:cf:cd:14:19:02:
85:31:2d:7a:c5:24:bf:3c:a8:4f:7c:3b:4d:41:78:
f0:24:cd:96:ba:bd:da:69:25:d6:d2:8b:1d:57:57:
be:56:9c:89:5b:8c:aa:17:98:6e:31:09:86:dd:b6:
ce:94:60:a6:26:ba:6c:15:7a:23:6e:32:17:c8:fd:
fb:34:9b:88:3d:a9:6b:54:3e:f1:1b:30:62:f8:34:
ab:37:48:50:c5:da:de:32:d2:6c:12:f7:e1:d9:b7:
37:9f:2d:41:a3:d2:3e:cf:9b:53:c8:12:a8:b1:98:
c3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7D:BD:A8:20:16:1E:33:6E:30:2D:49:92:3D:1D:DE:E3:10:74:F6
X509v3 Authority Key Identifier:
keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3234322e3137322e302f32322d3332203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.242.172.0/22
Signature Algorithm: sha256WithRSAEncryption
61:06:a8:cd:0c:fd:54:e2:16:fe:dd:6c:76:29:9b:85:c4:c4:
b3:2d:b6:03:0f:fc:33:3b:5e:d7:71:21:0e:09:54:44:2d:ec:
2b:b9:8a:e7:50:7e:7a:51:f4:4e:94:4d:1c:7f:fc:72:3e:fe:
69:c1:83:76:ca:c1:77:9e:bd:41:2b:0d:9d:d0:c3:ce:1c:64:
c6:f3:fa:18:a9:fe:0c:40:48:3e:a3:b7:6e:6d:6d:72:ea:33:
40:86:9c:87:f3:3c:cf:11:23:02:bc:76:db:db:87:10:af:06:
6d:f1:49:38:a7:c5:be:77:d3:d0:35:70:2d:b5:54:eb:91:2d:
78:46:75:cf:d4:7e:00:1a:b2:b9:56:6e:a7:b9:c9:dc:b2:f2:
b0:cb:ab:97:9e:b3:99:7e:ab:4c:f9:8e:1d:9a:4a:6c:b5:36:
ba:10:ca:d3:de:4c:d9:f4:ba:38:51:cd:1b:6d:e8:57:88:f0:
4f:ed:ff:13:62:75:f2:b7:7e:3b:b4:8b:44:30:7a:0d:34:85:
4d:0d:09:80:c6:be:9d:82:ee:00:d3:36:c0:dc:57:eb:29:ef:
7d:7a:86:5a:44:d4:a5:24:89:3c:55:98:1f:1b:0e:82:4f:46:
1e:8c:1f:5c:2d:fd:e4:71:f2:8c:83:04:a2:f4:29:a7:1c:b6:
e4:b2:5e:f1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:36:48 2026 by rpki-client