
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3130332e3132302e37352e302f32342d3234203d3e203538343631.roa
File: 3130332e3132302e37352e302f32342d3234203d3e203538343631.roa (raw, json)
Hash identifier: DeVvSC0gkXY2pkQtHB+9HU0J0vod+7bYff/EV4+DAFU=
Subject key identifier: 80:9A:25:E2:78:0A:99:FE:15:F1:07:51:E4:D3:05:BE:F4:54:0A:A1
Certificate issuer: /CN=709E5125176627846677AF908E76CAE21FB95460
Certificate serial: 7A3AB349B0CDAABB376E75DBDE7F4056457B5FF8
Authority key identifier: 70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3130332e3132302e37352e302f32342d3234203d3e203538343631.roa
Signing time: Tue 14 Apr 2026 07:29:25 +0000
ROA not before: Tue 14 Apr 2026 07:24:25 +0000
ROA not after: Tue 13 Apr 2027 07:29:25 +0000
asID: 58461
IP address blocks: 103.120.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl
rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:3a:b3:49:b0:cd:aa:bb:37:6e:75:db:de:7f:40:56:45:7b:5f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709E5125176627846677AF908E76CAE21FB95460
Validity
Not Before: Apr 14 07:24:25 2026 GMT
Not After : Apr 13 07:29:25 2027 GMT
Subject: CN=809A25E2780A99FE15F10751E4D305BEF4540AA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6c:30:80:ab:3d:cc:43:5f:45:9c:af:81:ee:
9d:52:d8:29:58:03:cd:cc:7f:df:94:12:6e:e9:c2:
a6:65:5e:b3:4f:92:dd:fc:51:9a:31:a2:bd:a7:10:
9e:33:67:67:d0:8e:ff:71:00:b7:81:8d:c6:41:e9:
83:17:59:19:51:d6:17:3c:de:da:aa:e7:a0:4d:08:
50:db:d5:be:62:ae:6c:96:43:82:85:24:32:08:54:
22:8c:52:18:5c:5c:3c:9a:79:b9:85:29:65:77:fc:
43:e3:cb:74:ff:3a:27:c7:73:18:9e:e2:a3:71:5a:
04:07:24:a7:f3:17:da:a3:d1:54:27:35:e7:4a:f6:
be:1e:d2:54:44:c6:46:5c:4a:42:df:6b:6a:81:7d:
4c:6a:1c:43:dd:d8:f1:a9:d5:c4:2a:c3:a4:e0:99:
89:e8:67:b2:c3:22:ca:f2:7e:4c:8b:15:5b:19:6b:
56:79:f7:35:e9:85:be:be:53:1f:88:d8:2a:11:8c:
45:49:53:b4:1d:41:aa:69:b0:ec:67:ff:de:b8:51:
22:bc:4c:e7:64:bc:5c:ac:9f:c9:f5:c5:cf:da:8a:
bf:61:94:99:89:b6:e1:f0:c6:6c:2d:28:59:fc:ee:
b2:54:53:1c:c3:9b:0f:b0:33:fa:96:91:d9:e4:d9:
89:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9A:25:E2:78:0A:99:FE:15:F1:07:51:E4:D3:05:BE:F4:54:0A:A1
X509v3 Authority Key Identifier:
keyid:70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3130332e3132302e37352e302f32342d3234203d3e203538343631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.120.75.0/24
Signature Algorithm: sha256WithRSAEncryption
65:7c:45:2d:cc:9c:2f:83:14:27:ec:a4:33:2e:a8:0f:f2:39:
fb:62:89:10:1e:80:47:7d:68:16:29:72:71:46:26:ad:d2:cf:
cd:fa:bf:b4:05:4c:4f:db:15:77:7b:e5:1f:74:2e:a0:3c:0d:
05:a0:91:2a:b3:4e:05:89:a8:e1:bc:1b:e1:6d:4f:a7:d9:06:
41:8e:1b:7a:eb:27:50:ef:c7:57:18:1f:c4:c7:e9:ad:83:2d:
1c:f9:25:07:be:6d:de:0d:2c:ef:24:37:fa:44:56:57:4e:e7:
4c:3b:5d:49:92:05:84:b8:78:9f:ed:17:db:17:1b:63:f6:9a:
20:c9:69:6d:d7:0c:f1:69:d3:f5:f2:c4:03:74:be:71:9b:23:
37:1c:32:ac:3f:e0:18:c5:65:e2:e2:63:ea:0c:51:0a:72:ab:
7f:94:cc:d2:c9:78:3c:a1:4f:7f:e6:2f:6e:9f:a4:97:18:3c:
36:15:96:bd:b4:df:75:5a:cd:17:83:15:00:ca:a3:ab:be:d1:
e9:c4:41:4c:2a:de:82:64:07:c3:84:9e:40:c4:8e:41:47:85:
29:33:a5:4f:d4:6c:39:b4:dc:0d:90:31:3c:07:bd:45:da:c8:
3d:75:f7:ef:67:54:3f:ef:f4:aa:34:88:c3:7d:3f:fd:f0:1b:
95:70:29:f1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:50:46 2026 by rpki-client