
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e3234342e37322e302f32322d3232203d3e203536303431.roa
File: 3130332e3234342e37322e302f32322d3232203d3e203536303431.roa (raw, json)
Hash identifier: YBTvgpZD/Sl9LIE93BPKELK8zzhu3JfsP63LJsDx5Ws=
Subject key identifier: 05:5C:A3:92:3E:62:72:F3:E8:52:13:C7:A1:50:85:10:0C:1C:BC:0A
Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Certificate serial: 56EC44BAC5175E011B9A84EDBE94EAB07499999B
Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e3234342e37322e302f32322d3232203d3e203536303431.roa
Signing time: Wed 15 Apr 2026 09:33:02 +0000
ROA not before: Wed 15 Apr 2026 09:28:02 +0000
ROA not after: Wed 14 Apr 2027 09:33:02 +0000
asID: 56041
IP address blocks: 103.244.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:ec:44:ba:c5:17:5e:01:1b:9a:84:ed:be:94:ea:b0:74:99:99:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Validity
Not Before: Apr 15 09:28:02 2026 GMT
Not After : Apr 14 09:33:02 2027 GMT
Subject: CN=055CA3923E6272F3E85213C7A15085100C1CBC0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fe:a3:9b:9f:74:81:96:c9:f9:b5:64:76:6c:
4c:fa:ae:62:84:e4:17:23:76:7d:79:ec:5b:1d:1f:
a1:1a:d1:ac:27:32:b9:76:9c:d3:cd:8e:61:d4:b4:
8e:6b:36:a1:8f:7b:f6:2b:cd:6f:3a:fb:de:38:5c:
95:60:bc:14:e0:74:79:ad:28:b9:5a:75:21:a8:f1:
c6:c6:aa:f3:19:3b:70:06:54:a8:14:0e:99:ae:4b:
25:a0:4a:3d:0b:c9:59:2c:0d:0b:37:6b:61:bf:a4:
59:54:80:1d:11:1f:12:16:e3:0c:d0:11:9f:aa:da:
88:b2:b1:6d:08:dd:3a:86:d8:f5:1d:46:1a:6b:9f:
1f:12:98:60:5e:22:61:fb:07:ec:26:8c:2e:75:10:
ac:f6:60:ef:60:17:ae:83:09:37:7f:5e:c4:fc:97:
ec:97:e3:7a:dc:d8:62:29:08:cd:d3:d4:a2:03:f0:
2c:f6:5f:21:aa:5f:6b:5c:4a:68:c7:c0:71:76:41:
8c:a5:87:ba:18:68:c8:a6:d7:31:f2:b5:e4:d5:db:
e4:14:50:57:23:e6:4d:06:c0:39:79:47:c7:66:59:
88:0c:ff:dd:dd:0e:f2:9d:c8:d0:c9:12:67:48:e8:
d8:2b:52:91:b7:8c:6b:28:07:4b:71:68:86:b9:55:
88:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5C:A3:92:3E:62:72:F3:E8:52:13:C7:A1:50:85:10:0C:1C:BC:0A
X509v3 Authority Key Identifier:
keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e3234342e37322e302f32322d3232203d3e203536303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.244.72.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:55:9a:b7:dd:09:2c:14:7b:a7:7e:a0:96:8f:c9:f0:95:cc:
cc:85:cd:0e:da:84:f2:03:20:a8:ea:9b:70:b0:90:fe:5e:61:
77:f7:85:0c:02:f6:3f:70:0c:cb:5c:2f:a6:b8:13:3c:cd:d1:
09:c5:4f:25:7d:87:50:f0:01:9b:66:14:bf:7b:03:1e:93:5e:
81:a4:58:d2:69:76:c5:81:50:ee:d9:28:0c:ac:ee:af:76:03:
d1:c7:95:b3:16:55:a1:46:1e:af:57:e3:4a:4d:0c:50:6e:17:
07:fa:07:01:bb:ed:d4:51:75:e8:9d:b6:ba:c5:db:50:38:be:
48:10:82:fb:a3:8e:c4:3b:fa:8f:a6:c0:cd:96:dc:5e:39:5a:
25:1d:67:27:91:3a:0b:68:32:33:0c:7d:87:ae:c7:61:b0:62:
b7:35:dd:7e:07:94:88:5f:3f:74:54:1b:fa:75:0f:9d:c0:89:
32:63:73:24:0b:fb:d3:0b:44:76:35:15:e8:5a:73:51:e4:d4:
15:fd:f6:a1:50:95:97:3f:72:69:9f:f2:f6:40:89:76:d3:8b:
4e:d9:66:c0:40:0c:1c:a6:32:67:77:74:dd:04:95:90:bd:18:
8b:b8:2c:14:f8:75:ae:28:6a:d7:22:6c:e8:b6:2c:e0:cc:4f:
ca:8e:2c:f0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:43:13 2026 by rpki-client