
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096700400205037570/0/3130332e3231392e32382e302f32322d3332203d3e2034383337.roa
File: 3130332e3231392e32382e302f32322d3332203d3e2034383337.roa (raw, json)
Hash identifier: J9pnuoN4vw/XBkCeNzwqo0Ctq27wQAgAWX0UKgdxN9c=
Subject key identifier: CE:58:0A:00:84:92:75:A1:42:2D:6B:A7:DC:BF:51:78:D1:CB:FA:21
Certificate issuer: /CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
Certificate serial: 4F56BFDA808635025D9FDA7C1397BB87F5453C24
Authority key identifier: 94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/3130332e3231392e32382e302f32322d3332203d3e2034383337.roa
Signing time: Wed 15 Apr 2026 07:40:58 +0000
ROA not before: Wed 15 Apr 2026 07:35:58 +0000
ROA not after: Wed 14 Apr 2027 07:40:58 +0000
asID: 4837
IP address blocks: 103.219.28.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl
rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:56:bf:da:80:86:35:02:5d:9f:da:7c:13:97:bb:87:f5:45:3c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
Validity
Not Before: Apr 15 07:35:58 2026 GMT
Not After : Apr 14 07:40:58 2027 GMT
Subject: CN=CE580A00849275A1422D6BA7DCBF5178D1CBFA21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:9d:ca:19:fc:b7:06:44:d9:46:83:3a:b1:9d:
44:73:7a:c4:69:d8:43:ef:ef:e9:2b:73:2f:b5:2d:
bc:f7:b5:d3:d6:ce:22:f1:d7:f4:0c:ca:04:70:57:
83:35:19:66:8b:0f:77:6f:b6:9b:a2:ce:0d:cf:da:
cd:b6:71:65:23:63:49:41:b0:cb:ac:fe:3f:7d:7a:
81:ba:29:f9:51:81:fd:7c:3c:fb:88:42:f9:01:9f:
57:24:94:8a:43:f2:cc:53:8e:e4:5d:8e:73:13:22:
8f:5f:ce:3d:a5:e4:a0:9c:ea:5e:57:d3:29:d3:69:
e3:ef:16:a5:1e:8c:29:e3:0f:30:ee:1f:ab:bd:4b:
16:64:94:d9:2a:1c:01:2e:5f:30:fb:55:02:19:00:
19:5f:47:90:61:e1:14:d2:6a:18:5b:97:56:47:ea:
44:3e:65:19:95:3c:80:99:ab:47:60:81:00:d0:48:
0c:82:68:a5:30:f1:b8:38:69:25:29:f6:fc:1e:f1:
04:e7:97:c5:df:b3:6d:20:a0:02:39:33:39:84:31:
b9:d0:c7:72:45:e4:47:db:d1:be:b8:4e:72:2c:0b:
ea:e7:da:e6:b8:46:c0:42:97:85:bd:6b:19:87:3d:
6f:76:d4:a8:f2:7f:00:07:f1:47:e2:dd:b0:56:5f:
12:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:58:0A:00:84:92:75:A1:42:2D:6B:A7:DC:BF:51:78:D1:CB:FA:21
X509v3 Authority Key Identifier:
keyid:94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/3130332e3231392e32382e302f32322d3332203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.219.28.0/22
Signature Algorithm: sha256WithRSAEncryption
c4:d3:c9:b4:cc:13:15:fc:31:5e:6f:9d:17:86:20:0d:5f:65:
45:45:c8:23:ed:75:c7:59:ab:44:81:bf:34:b3:63:40:0f:be:
7c:a3:e3:d5:ab:94:ce:52:cc:db:65:29:9c:6b:24:ab:e5:fc:
39:5b:74:59:6f:bf:9b:86:f9:e7:d8:60:2c:e7:45:8d:cd:2a:
33:b1:9c:84:0b:4d:cf:eb:67:02:21:18:2f:db:d1:cc:70:9d:
90:0d:a1:97:5d:93:c2:94:f5:9a:2e:e6:57:5c:33:0d:2f:43:
b2:58:12:91:92:cb:a7:50:68:d0:3e:70:56:4a:0c:eb:f9:bf:
9f:4d:5b:5b:e7:28:f0:f6:4e:5f:ee:35:f6:1c:fc:cb:df:6a:
95:08:ce:bd:80:28:33:ed:b5:97:82:15:45:7e:d1:18:2b:40:
6d:d4:ff:37:fe:24:9f:f5:3f:d9:0a:cb:30:ea:69:2d:0f:2c:
3d:78:f2:64:b3:ab:dd:1d:37:83:72:58:6e:80:8d:26:ab:34:
4b:6a:23:97:fb:63:28:32:7a:dd:de:e1:2d:43:7a:dc:cc:2c:
ed:a6:49:f9:7d:88:9c:93:ff:45:54:f4:0b:52:72:79:59:98:
ba:fa:68:e5:5c:b7:9e:f1:42:b8:65:56:e2:a4:a2:cc:36:4a:
fb:e0:d3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:28:33 2026 by rpki-client