
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e3234342e36382e302f32322d3232203d3e203536303431.roa
File: 3130332e3234342e36382e302f32322d3232203d3e203536303431.roa (raw, json)
Hash identifier: 7aUtKAM2J7yJhaYmDgR2hUPi2OMthnpsiAzq9xkhCaQ=
Subject key identifier: D5:5F:D7:75:B0:FA:3F:71:2A:62:19:46:67:F1:34:34:E8:5B:2E:C3
Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Certificate serial: 75F024DD5316060262D82361ECF1DB35EC74B7FE
Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e3234342e36382e302f32322d3232203d3e203536303431.roa
Signing time: Wed 15 Apr 2026 09:33:02 +0000
ROA not before: Wed 15 Apr 2026 09:28:02 +0000
ROA not after: Wed 14 Apr 2027 09:33:02 +0000
asID: 56041
IP address blocks: 103.244.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:f0:24:dd:53:16:06:02:62:d8:23:61:ec:f1:db:35:ec:74:b7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Validity
Not Before: Apr 15 09:28:02 2026 GMT
Not After : Apr 14 09:33:02 2027 GMT
Subject: CN=D55FD775B0FA3F712A62194667F13434E85B2EC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b6:ee:17:4b:3d:a7:da:89:05:d6:80:30:8d:
7f:c2:e3:d3:3d:91:73:9e:1a:ca:14:35:34:68:3b:
1a:92:dc:e6:49:d7:1c:35:87:b8:c6:73:88:7d:45:
66:9b:a3:f5:60:35:1c:22:78:11:3b:61:61:58:4a:
7c:18:9d:92:36:7e:2f:2c:4c:96:8c:f1:a4:d5:c0:
0d:cb:88:b3:07:17:39:72:f0:b9:de:7a:3f:27:ec:
63:69:2d:87:f1:6e:b1:42:36:13:c9:a6:af:c6:49:
89:85:60:e4:5c:5d:e4:2c:6c:fa:a9:69:cc:41:15:
94:f6:ae:9e:4f:f7:3e:43:b6:9a:db:ec:94:7a:6e:
e6:ef:58:b1:eb:c3:3d:7e:1f:b1:82:a5:c9:7d:8d:
a4:a6:75:8d:d5:0a:78:26:d2:c7:6a:4e:10:a4:49:
6f:83:6a:37:aa:47:90:f2:55:06:56:a4:5a:e7:3d:
a0:a7:8d:da:54:57:8c:e4:8e:ad:f2:e3:c2:21:39:
5b:58:ad:d6:ea:96:52:f9:0a:85:7d:10:5a:cc:17:
f6:74:24:2e:be:c8:33:98:a8:94:2d:f7:8c:86:2f:
f6:39:9b:d2:99:3c:df:02:97:cd:85:c5:c6:f4:73:
0c:a2:4d:a8:75:f2:d9:41:13:4e:d1:da:27:59:05:
6d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5F:D7:75:B0:FA:3F:71:2A:62:19:46:67:F1:34:34:E8:5B:2E:C3
X509v3 Authority Key Identifier:
keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e3234342e36382e302f32322d3232203d3e203536303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.244.68.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:8f:8c:fb:35:ac:19:9d:93:61:9a:c9:dc:78:d1:95:57:8f:
d7:fe:ff:ea:90:01:9f:de:55:8b:e6:a7:7d:d5:29:7c:7b:65:
aa:74:0b:59:07:6a:cc:00:62:06:35:e5:8a:1c:ec:6c:4c:67:
3e:bb:87:ee:05:ec:0c:72:21:2d:b0:e6:b7:21:e7:e7:d0:2a:
60:9f:56:1d:43:4e:81:87:33:c7:86:e9:54:e2:4c:10:e9:3e:
8b:00:12:aa:66:8b:66:2f:dc:d2:81:a6:00:37:37:90:5e:cf:
37:62:e8:ed:24:ce:d8:1d:44:71:c5:1b:7f:90:79:2f:d6:6f:
48:60:81:ac:91:fc:7c:37:74:00:7d:f3:60:c2:b9:00:a8:20:
ee:da:7a:ac:1f:e6:a3:63:b4:80:f2:46:82:ba:45:42:cd:2a:
26:11:75:07:34:d0:86:e0:35:93:44:62:fd:98:ce:25:b4:d1:
80:15:39:02:c2:fc:ed:7e:92:c7:60:ec:49:be:43:01:0e:1e:
4f:fa:f5:f9:6a:57:91:5d:96:38:7c:da:8a:72:81:d4:15:09:
9a:26:83:14:1d:52:f7:11:b3:39:1a:fc:97:e5:8e:2b:43:d3:
f2:f0:c1:8e:4e:2a:18:9a:7a:21:f5:f0:7f:63:0a:0b:f9:3f:
43:ae:77:6b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:25:11 2026 by rpki-client