
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096603204424105986/0/3130332e312e32302e302f32322d3232203d3e203233383431.roa
File: 3130332e312e32302e302f32322d3232203d3e203233383431.roa (raw, json)
Hash identifier: VysPkdD4l/g9blPW2SJoFaVCrMMxGsdFC4KZtokwYps=
Subject key identifier: 08:1B:8C:ED:07:00:9D:46:DF:4B:FA:0B:AE:EF:63:F9:F2:9F:34:9B
Certificate issuer: /CN=7F04F6FCE22750607E54E558E039E0F551D3135D
Certificate serial: 5C9B4575E7794619F80445C1C726CF568420FD1F
Authority key identifier: 7F:04:F6:FC:E2:27:50:60:7E:54:E5:58:E0:39:E0:F5:51:D3:13:5D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/3130332e312e32302e302f32322d3232203d3e203233383431.roa
Signing time: Wed 15 Apr 2026 01:17:05 +0000
ROA not before: Wed 15 Apr 2026 01:12:05 +0000
ROA not after: Wed 14 Apr 2027 01:17:05 +0000
asID: 23841
IP address blocks: 103.1.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 09:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:9b:45:75:e7:79:46:19:f8:04:45:c1:c7:26:cf:56:84:20:fd:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F04F6FCE22750607E54E558E039E0F551D3135D
Validity
Not Before: Apr 15 01:12:05 2026 GMT
Not After : Apr 14 01:17:05 2027 GMT
Subject: CN=081B8CED07009D46DF4BFA0BAEEF63F9F29F349B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2a:72:53:7f:ec:d2:a0:7b:d1:8d:96:26:bd:
db:b4:d4:18:34:0f:cf:fe:0e:7c:9c:f0:7c:73:ea:
44:30:e0:66:c1:94:ac:d3:0d:3b:9e:ff:51:31:d4:
9f:f1:a6:46:12:89:10:f0:fe:cb:fb:e0:c0:4e:80:
d7:c1:35:03:13:88:14:e7:80:70:62:81:12:13:91:
e4:b1:50:f8:54:f2:77:f9:71:dd:7b:ae:22:fe:79:
a9:03:6b:d3:15:e1:c8:73:fa:c6:a2:dd:19:55:99:
c6:1a:2d:46:84:06:33:f3:70:25:ce:13:53:36:c8:
9f:88:fb:ef:1a:a8:66:a4:78:56:a8:78:e1:94:ca:
56:b3:ca:58:ec:17:89:f3:e6:47:03:16:1a:53:9d:
9f:73:3b:6f:84:d3:84:1d:bb:80:c9:49:50:00:9d:
b1:81:39:ac:39:67:e9:d2:b7:8f:3f:59:75:6b:a0:
2c:48:7a:ba:c9:da:4f:ef:ec:e1:c0:1e:67:00:62:
40:54:63:f4:99:e0:30:d7:54:a4:91:ee:06:f6:7c:
9f:f2:28:ae:ae:10:62:5e:b6:f5:c6:8b:6e:2f:2c:
0a:24:22:11:61:35:b2:68:23:85:f7:36:1c:9c:16:
7e:8e:95:e9:0f:84:ba:fc:3d:fc:a3:2c:dc:26:e6:
97:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1B:8C:ED:07:00:9D:46:DF:4B:FA:0B:AE:EF:63:F9:F2:9F:34:9B
X509v3 Authority Key Identifier:
keyid:7F:04:F6:FC:E2:27:50:60:7E:54:E5:58:E0:39:E0:F5:51:D3:13:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/3130332e312e32302e302f32322d3232203d3e203233383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.1.20.0/22
Signature Algorithm: sha256WithRSAEncryption
43:65:17:a9:9f:c8:97:a2:00:3d:14:1e:56:3a:ce:ae:bd:60:
17:fc:79:a9:ab:11:39:d3:06:9a:80:69:6b:41:85:b8:f9:f3:
9d:33:52:45:e4:33:fb:04:5d:5e:98:0c:6d:d0:4b:63:dc:0a:
5e:c2:54:93:8c:14:c7:79:0b:92:f9:b3:86:8d:33:84:4f:23:
74:56:24:0e:e7:f3:4b:2d:cf:9f:c4:b7:59:b5:49:08:66:42:
c3:e3:96:d5:83:97:ea:d7:3e:89:da:b2:e4:ca:7a:96:d5:aa:
b5:16:70:9d:bc:df:e5:38:17:6d:9d:5a:5d:0a:86:40:e6:48:
e0:1a:c7:c8:c3:6c:0c:8b:57:88:7b:6f:64:e4:5c:db:21:65:
e2:32:dd:24:d0:13:c3:b7:34:a1:4d:c7:b9:26:fe:61:4b:e1:
87:ad:a5:b6:9d:6d:28:29:54:9e:2b:0c:c2:bd:dd:5f:3f:ed:
5a:2c:75:6b:03:d3:b3:13:cf:00:75:df:95:5b:98:0f:6d:7a:
d2:1b:cc:7b:40:b6:e8:04:7c:33:3e:30:67:1c:36:33:11:6b:
e4:21:64:eb:0a:7c:00:0b:d1:3e:ff:9b:d2:0c:62:6c:7d:f0:
4b:bf:ff:25:e9:5d:63:de:3d:5e:b0:56:9a:9b:78:c2:60:fa:
e0:8a:63:39
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUXJtFded5Rhn4BEXBxybPVoQg/R8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YwNEY2RkNFMjI3NTA2MDdFNTRFNTU4RTAzOUUwRjU1
MUQzMTM1RDAeFw0yNjA0MTUwMTEyMDVaFw0yNzA0MTQwMTE3MDVaMDMxMTAvBgNV
BAMTKDA4MUI4Q0VEMDcwMDlENDZERjRCRkEwQkFFRUY2M0Y5RjI5RjM0OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLKnJTf+zSoHvRjZYmvdu01Bg0
D8/+Dnyc8Hxz6kQw4GbBlKzTDTue/1Ex1J/xpkYSiRDw/sv74MBOgNfBNQMTiBTn
gHBigRITkeSxUPhU8nf5cd17riL+eakDa9MV4chz+sai3RlVmcYaLUaEBjPzcCXO
E1M2yJ+I++8aqGakeFaoeOGUylazyljsF4nz5kcDFhpTnZ9zO2+E04Qdu4DJSVAA
nbGBOaw5Z+nSt48/WXVroCxIerrJ2k/v7OHAHmcAYkBUY/SZ4DDXVKSR7gb2fJ/y
KK6uEGJetvXGi24vLAokIhFhNbJoI4X3NhycFn6OlekPhLr8PfyjLNwm5pflAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUCBuM7QcAnUbfS/oLru9j+fKfNJswHwYDVR0j
BBgwFoAUfwT2/OInUGB+VOVY4Dng9VHTE10wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjYwMzIwNDQyNDEwNTk4Ni8wLzdGMDRGNkZDRTIyNzUwNjA3RTU0RTU1OEUwMzlF
MEY1NTFEMzEzNUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvN0YwNEY2RkNFMjI3NTA2MDdFNTRFNTU4RTAzOUUwRjU1MUQzMTM1RC5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2NjAzMjA0NDI0MTA1OTg2LzAvMzEzMDMzMmUzMTJl
MzIzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzMzODM0MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJnARQwDQYJKoZIhvcNAQELBQADggEBAENlF6mfyJeiAD0UHlY6zq69YBf8eamr
ETnTBpqAaWtBhbj5850zUkXkM/sEXV6YDG3QS2PcCl7CVJOMFMd5C5L5s4aNM4RP
I3RWJA7n80stz5/Et1m1SQhmQsPjltWDl+rXPonasuTKepbVqrUWcJ283+U4F22d
Wl0KhkDmSOAax8jDbAyLV4h7b2TkXNshZeIy3STQE8O3NKFNx7km/mFL4Yetpbad
bSgpVJ4rDMK93V8/7VosdWsD07MTzwB135VbmA9tetIbzHtAtugEfDM+MGccNjMR
a+QhZOsKfAAL0T7/m9IMYmx98Eu//yXpXWPePV6wVpqbeMJg+uCKYzk=
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:58:35 2026 by rpki-client