
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096700400205037570/0/3130332e3231392e32382e302f32322d3332203d3e203538343631.roa
File: 3130332e3231392e32382e302f32322d3332203d3e203538343631.roa (raw, json)
Hash identifier: 7see7mUP5RiDFD85n7obIwjrZr6JjitwwbnUFue3amg=
Subject key identifier: 64:78:4A:BB:B1:14:E1:CD:C8:D5:CE:12:B4:5F:E1:81:B2:D1:3D:B8
Certificate issuer: /CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
Certificate serial: 4BA067951212E389506DCD17E062EA26EDCA6A6B
Authority key identifier: 94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/3130332e3231392e32382e302f32322d3332203d3e203538343631.roa
Signing time: Wed 15 Apr 2026 07:40:58 +0000
ROA not before: Wed 15 Apr 2026 07:35:58 +0000
ROA not after: Wed 14 Apr 2027 07:40:58 +0000
asID: 58461
IP address blocks: 103.219.28.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl
rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:a0:67:95:12:12:e3:89:50:6d:cd:17:e0:62:ea:26:ed:ca:6a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
Validity
Not Before: Apr 15 07:35:58 2026 GMT
Not After : Apr 14 07:40:58 2027 GMT
Subject: CN=64784ABBB114E1CDC8D5CE12B45FE181B2D13DB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:61:c3:99:26:04:1b:93:83:1b:a3:ff:91:37:
bc:d1:5b:5a:f4:58:2f:32:38:e1:b5:8a:85:2e:c1:
cb:40:8c:f3:58:7b:cc:78:07:26:57:68:50:d4:14:
24:9e:1e:04:e2:92:50:9e:04:a4:99:6f:8d:35:34:
eb:06:78:e3:99:69:ed:4a:7d:05:13:76:a9:8e:99:
6b:85:df:36:63:a6:f4:ea:f6:3f:ae:65:4c:1b:5e:
f7:df:85:08:52:c3:6e:03:78:1f:68:d5:e2:13:d9:
90:01:8d:1d:58:84:7e:94:11:23:75:27:5d:a3:5a:
53:b8:09:b8:0d:4f:1c:fb:c9:69:6f:bc:d4:99:97:
17:5f:e3:a7:91:1e:82:5a:b8:ca:bf:f7:eb:2a:0a:
a5:73:d4:09:b3:3e:59:27:f5:e0:c3:74:77:35:39:
39:9e:07:12:36:31:55:67:04:ef:0a:12:24:ef:81:
5d:4e:eb:4a:b4:b1:3e:06:21:d7:9e:c8:40:6f:53:
0c:36:3a:52:29:5c:18:83:e8:95:d8:ee:62:28:12:
44:02:6e:88:16:60:15:6f:c7:47:21:d3:86:5e:aa:
2b:24:e9:22:59:b3:08:c8:99:4f:7f:f1:dc:1c:a3:
ee:f3:b1:6d:dc:07:1b:8b:26:b8:79:e0:86:e8:bc:
08:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:78:4A:BB:B1:14:E1:CD:C8:D5:CE:12:B4:5F:E1:81:B2:D1:3D:B8
X509v3 Authority Key Identifier:
keyid:94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/3130332e3231392e32382e302f32322d3332203d3e203538343631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.219.28.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:5e:c4:d5:ec:65:7f:ce:9a:98:21:f6:1b:d1:44:3e:58:b7:
9b:b3:0e:0d:a6:71:dc:b3:fa:16:98:b8:3d:f9:1d:4a:13:51:
a2:32:a7:96:39:b7:d0:3d:8c:4b:71:8d:2e:da:4c:3f:c7:a3:
ff:95:af:26:16:1d:46:59:5b:16:3f:10:a3:74:33:ed:12:0f:
8c:13:63:ac:fe:f0:71:93:91:61:96:ea:34:a1:93:e6:01:dd:
9b:7c:51:26:86:c7:b1:6d:4c:82:81:6f:b7:b7:57:ec:af:bf:
af:73:07:3b:5f:34:a0:3a:67:a7:6e:af:f0:ca:9e:bf:09:62:
01:17:74:ce:15:c6:ea:4a:59:f7:f7:30:78:36:c3:9d:cf:9f:
20:2f:28:5d:98:ea:35:ca:05:fe:ac:e2:7a:a0:c4:f1:b3:9f:
8b:fa:2a:dd:90:82:38:c6:5d:5b:c4:fe:4e:c6:41:53:ed:17:
3d:ab:01:d1:ea:c3:bd:9d:76:ec:12:21:6e:aa:47:e8:b6:22:
80:da:e5:31:f3:74:70:08:0b:09:03:42:71:d2:03:86:fd:f5:
67:2a:7f:17:f3:01:4e:6e:96:da:15:72:76:2b:06:62:67:2e:
8b:9f:bc:68:cd:f6:85:85:d9:8f:ca:02:74:be:f7:41:ae:30:
39:ce:be:56
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUS6BnlRIS44lQbc0X4GLqJu3KamswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTRBMDQwMDdDMTg5MzRFRUZENzc5NDQ1QkE1MzQ5QThG
QkRCMTlERjAeFw0yNjA0MTUwNzM1NThaFw0yNzA0MTQwNzQwNThaMDMxMTAvBgNV
BAMTKDY0Nzg0QUJCQjExNEUxQ0RDOEQ1Q0UxMkI0NUZFMTgxQjJEMTNEQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsYcOZJgQbk4Mbo/+RN7zRW1r0
WC8yOOG1ioUuwctAjPNYe8x4ByZXaFDUFCSeHgTiklCeBKSZb401NOsGeOOZae1K
fQUTdqmOmWuF3zZjpvTq9j+uZUwbXvffhQhSw24DeB9o1eIT2ZABjR1YhH6UESN1
J12jWlO4CbgNTxz7yWlvvNSZlxdf46eRHoJauMq/9+sqCqVz1AmzPlkn9eDDdHc1
OTmeBxI2MVVnBO8KEiTvgV1O60q0sT4GIdeeyEBvUww2OlIpXBiD6JXY7mIoEkQC
bogWYBVvx0ch04Zeqisk6SJZswjImU9/8dwco+7zsW3cBxuLJrh54IbovAitAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUZHhKu7EU4c3I1c4StF/hgbLRPbgwHwYDVR0j
BBgwFoAUlKBAB8GJNO79d5RFulNJqPvbGd8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjcwMDQwMDIwNTAzNzU3MC8wLzk0QTA0MDA3QzE4OTM0RUVGRDc3OTQ0NUJBNTM0
OUE4RkJEQjE5REYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTRBMDQwMDdDMTg5MzRFRUZENzc5NDQ1QkE1MzQ5QThGQkRCMTlERi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NjcwMDQwMDIwNTAzNzU3MC8wLzMxMzAzMzJlMzIz
MTM5MmUzMjM4MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzUzODM0MzYzMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmfbHDANBgkqhkiG9w0BAQsFAAOCAQEAu17E1exlf86amCH2G9FEPli3
m7MODaZx3LP6Fpi4PfkdShNRojKnljm30D2MS3GNLtpMP8ej/5WvJhYdRllbFj8Q
o3Qz7RIPjBNjrP7wcZORYZbqNKGT5gHdm3xRJobHsW1MgoFvt7dX7K+/r3MHO180
oDpnp26v8MqevwliARd0zhXG6kpZ9/cweDbDnc+fIC8oXZjqNcoF/qzieqDE8bOf
i/oq3ZCCOMZdW8T+TsZBU+0XPasB0erDvZ127BIhbqpH6LYigNrlMfN0cAgLCQNC
cdIDhv31Zyp/F/MBTm6W2hVydisGYmcui5+8aM32hYXZj8oCdL73Qa4wOc6+Vg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:21:28 2026 by rpki-client