
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3130332e3235312e3133302e302f32332d3233203d3e20313335333931.roa
File: 3130332e3235312e3133302e302f32332d3233203d3e20313335333931.roa (raw, json)
Hash identifier: KIqbfurXReKBMLuhCh4GDhIOCsAlKou1GyJkZX2TrlU=
Subject key identifier: EC:B1:F0:AC:F3:AB:01:F7:80:50:F8:69:D1:23:EA:02:05:CA:CD:24
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 274308CFED6D84A23F80CEA7471249AAB1EF1D08
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3130332e3235312e3133302e302f32332d3233203d3e20313335333931.roa
Signing time: Fri 17 Apr 2026 09:05:29 +0000
ROA not before: Fri 17 Apr 2026 09:00:29 +0000
ROA not after: Fri 16 Apr 2027 09:05:29 +0000
asID: 135391
IP address blocks: 103.251.130.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 12:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:43:08:cf:ed:6d:84:a2:3f:80:ce:a7:47:12:49:aa:b1:ef:1d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 17 09:00:29 2026 GMT
Not After : Apr 16 09:05:29 2027 GMT
Subject: CN=ECB1F0ACF3AB01F78050F869D123EA0205CACD24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e8:60:56:5c:d4:26:74:48:f3:6b:7d:d2:11:
bd:ad:26:71:80:dc:f1:90:8e:47:5d:ac:56:3d:7f:
b8:62:ad:6f:cb:26:da:33:f9:44:0e:cc:e4:98:7c:
eb:55:a3:fa:54:a9:ca:57:00:33:f0:ac:ac:4d:22:
90:1e:40:8c:de:0a:f6:fb:61:a1:c7:06:94:d2:bf:
04:50:f0:4d:a7:41:b1:d6:fb:17:45:d6:56:ea:b2:
72:30:d6:d7:13:94:f4:ee:5e:d2:4c:6f:b2:53:26:
b7:db:ef:a7:d5:1d:ce:70:40:c2:93:ca:5d:eb:29:
23:f2:74:31:35:92:c8:b6:03:e6:b9:d1:12:a4:b8:
08:7d:05:5b:a0:ea:e6:90:25:c9:95:92:8a:f0:de:
c8:44:e4:46:b9:81:f1:50:9a:e4:c0:93:33:6a:f2:
b5:f0:b6:f7:f2:8d:ce:05:49:7e:b9:74:ac:a1:3f:
e7:ee:1a:4c:2c:b6:5e:14:99:6c:a9:52:cb:33:84:
fd:25:12:f3:97:b0:c1:b1:f5:9d:96:2d:a6:20:c3:
8e:df:79:fc:c3:77:7d:6b:69:95:82:4c:db:1d:c2:
8c:b4:a5:2d:e7:65:c7:af:d7:0b:ee:43:72:bd:cb:
07:8e:52:25:93:a3:26:49:c6:6d:ef:96:91:32:cf:
6b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B1:F0:AC:F3:AB:01:F7:80:50:F8:69:D1:23:EA:02:05:CA:CD:24
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3130332e3235312e3133302e302f32332d3233203d3e20313335333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.251.130.0/23
Signature Algorithm: sha256WithRSAEncryption
48:78:bc:b1:49:85:b8:30:c3:dd:e9:9c:b9:8d:5b:0b:ff:e0:
8d:1c:18:45:a5:c2:d7:f7:79:8b:b6:82:c1:59:b0:dc:e1:46:
bb:bf:cd:64:d0:88:c0:b9:5f:53:8e:dd:62:3e:15:89:48:07:
ce:ce:f3:8a:6d:37:9a:86:8c:64:d4:5a:62:bb:47:26:60:8f:
17:54:6c:a4:c8:c0:47:fc:22:39:79:a6:6a:ee:a6:6e:83:f6:
58:ed:cc:07:26:a3:58:23:2d:25:4e:a8:41:d8:ec:6f:0c:21:
e5:b2:4f:4c:54:e8:d5:1d:6f:c9:c4:b6:97:f4:71:6e:0f:df:
46:d2:b6:0a:48:94:05:ee:af:b3:c9:7e:1d:2f:51:da:32:3f:
78:11:a5:db:45:e8:55:bd:a0:d0:49:77:db:d6:66:5a:de:cb:
e6:87:ef:73:e9:78:73:73:3d:e9:eb:26:2a:97:c3:04:f0:ad:
8e:21:bc:68:1a:b7:eb:5c:21:26:e8:00:d5:47:21:9d:a3:09:
72:43:9c:d2:f9:ed:74:f3:66:dc:22:cb:6e:f8:f2:ba:9f:d3:
e4:db:88:5e:fa:c1:e7:b0:c3:b9:d6:59:77:a0:ed:35:8b:b6:
15:7d:53:30:f3:15:f6:0d:1d:a6:ca:f4:05:38:d5:1f:e3:0d:
0d:a4:33:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:43:31 2026 by rpki-client