
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e33312e3136382e302f32322d3232203d3e2030.roa
File: 3130332e33312e3136382e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier: NLrbzf5Jli0k+4UMrd869SEb7y6nylk4nXX1k4jpqYI=
Subject key identifier: 5B:5B:A2:86:FA:6F:D3:74:40:51:59:95:40:B7:12:24:44:51:A5:E1
Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Certificate serial: 7F22310E8F32DCE2E1B6841749C3072DFD94745F
Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e33312e3136382e302f32322d3232203d3e2030.roa
Signing time: Wed 15 Apr 2026 09:33:02 +0000
ROA not before: Wed 15 Apr 2026 09:28:02 +0000
ROA not after: Wed 14 Apr 2027 09:33:02 +0000
asID: 0
IP address blocks: 103.31.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 06:20:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:22:31:0e:8f:32:dc:e2:e1:b6:84:17:49:c3:07:2d:fd:94:74:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Validity
Not Before: Apr 15 09:28:02 2026 GMT
Not After : Apr 14 09:33:02 2027 GMT
Subject: CN=5B5BA286FA6FD3744051599540B712244451A5E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:32:cd:c4:37:f0:75:a4:6d:a9:58:3f:2f:ea:
a4:ad:d0:c2:b4:db:89:97:69:1b:84:86:7c:f0:52:
48:36:67:50:9e:0c:44:0a:d8:1d:12:22:b3:4c:32:
2a:f1:30:76:a3:e5:76:8b:69:5e:1c:1c:69:37:f8:
d4:c4:8e:0c:f4:0d:0f:e1:50:58:5c:0c:ef:7d:d6:
a2:86:24:4e:e0:79:66:72:34:d0:98:e8:71:e8:5b:
05:32:8b:0a:21:f2:87:40:64:00:9d:c9:6a:fb:96:
89:76:f3:b4:26:d0:da:ca:23:02:25:49:97:09:5f:
51:a0:59:e1:e4:56:5e:01:66:3d:56:cf:2d:18:55:
d3:b5:c5:5d:fe:7b:40:7a:90:27:af:3f:b4:db:55:
44:d7:44:c2:34:88:b4:f6:5f:da:98:af:2b:2c:ca:
dc:ab:19:12:74:2b:e0:9a:72:58:a7:9e:39:ea:ed:
2d:b4:7d:96:83:8b:9f:5c:c9:06:1c:32:32:cd:38:
51:bb:7e:c8:07:a2:e1:8f:f1:ab:22:3f:e1:fc:20:
41:ab:f6:ca:55:1c:ab:6c:c6:8a:a6:37:da:b1:e8:
9d:a8:e8:b2:87:bf:de:ed:22:8e:0b:9d:12:d5:cc:
83:07:3b:e0:2e:54:4d:d3:9e:52:63:26:87:3a:6b:
d4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5B:A2:86:FA:6F:D3:74:40:51:59:95:40:B7:12:24:44:51:A5:E1
X509v3 Authority Key Identifier:
keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e33312e3136382e302f32322d3232203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.31.168.0/22
Signature Algorithm: sha256WithRSAEncryption
33:f2:51:4d:b7:af:c3:8d:0c:20:68:5e:49:a2:f8:58:cb:38:
49:c5:2c:d0:bf:6b:93:25:25:8a:af:b5:5d:5d:40:1f:94:32:
5f:88:cf:37:6f:d0:d3:0b:dd:60:57:85:3e:bd:6b:18:46:28:
05:6e:5d:57:f8:38:bb:bd:ac:b3:55:ae:63:c6:57:2a:47:d7:
06:ce:3a:b8:b1:7c:1c:19:75:85:55:21:c5:a5:e5:76:00:d5:
36:c6:55:a9:d2:c7:9c:d0:bf:61:95:8a:c9:df:64:cf:a0:4c:
60:e9:8c:62:ce:31:43:90:50:bd:6c:04:2d:08:bc:90:fb:b5:
57:2b:69:b2:bd:0e:88:07:a8:f8:c2:68:f3:ee:8b:e0:4b:52:
e1:6e:19:20:92:55:7c:59:e3:46:e9:81:c7:6b:4d:a3:68:c1:
60:14:b7:54:ea:ea:1c:ac:2d:0d:d6:5e:a6:8d:ee:89:5f:99:
48:bb:39:76:10:7a:71:3c:54:a4:d5:02:aa:50:68:c3:e0:97:
7c:8a:a8:9a:16:77:12:c3:d6:8f:b4:cc:f0:ba:36:1b:61:56:
9b:39:b0:74:bb:f9:45:59:77:1a:52:74:07:ac:d9:72:8f:04:
e1:ac:b4:5d:07:b0:d1:35:5c:81:7c:e2:06:86:b2:3e:42:a0:
50:0c:b8:18
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIUfyIxDo8y3OLhtoQXScMHLf2UdF8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2
RUZERDAwRjAeFw0yNjA0MTUwOTI4MDJaFw0yNzA0MTQwOTMzMDJaMDMxMTAvBgNV
BAMTKDVCNUJBMjg2RkE2RkQzNzQ0MDUxNTk5NTQwQjcxMjI0NDQ1MUE1RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVMs3EN/B1pG2pWD8v6qSt0MK0
24mXaRuEhnzwUkg2Z1CeDEQK2B0SIrNMMirxMHaj5XaLaV4cHGk3+NTEjgz0DQ/h
UFhcDO991qKGJE7geWZyNNCY6HHoWwUyiwoh8odAZACdyWr7lol287Qm0NrKIwIl
SZcJX1GgWeHkVl4BZj1Wzy0YVdO1xV3+e0B6kCevP7TbVUTXRMI0iLT2X9qYryss
ytyrGRJ0K+Caclinnjnq7S20fZaDi59cyQYcMjLNOFG7fsgHouGP8asiP+H8IEGr
9spVHKtsxoqmN9qx6J2o6LKHv97tIo4LnRLVzIMHO+AuVE3TnlJjJoc6a9RnAgMB
AAGjggILMIICBzAdBgNVHQ4EFgQUW1uihvpv03RAUVmVQLcSJERRpeEwHwYDVR0j
BBgwFoAUEGXp5U0cFTfONLXuRFuTR2790A8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjcyNzc1MjM1MTk0MDYwOS8wLzEwNjVFOUU1NEQxQzE1MzdDRTM0QjVFRTQ0NUI5
MzQ3NkVGREQwMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2RUZERDAwRi5jZXIw
gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2NzI3NzUyMzUxOTQwNjA5LzAvMzEzMDMzMmUzMzMx
MmUzMTM2MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcf
qDANBgkqhkiG9w0BAQsFAAOCAQEAM/JRTbevw40MIGheSaL4WMs4ScUs0L9rkyUl
iq+1XV1AH5QyX4jPN2/Q0wvdYFeFPr1rGEYoBW5dV/g4u72ss1WuY8ZXKkfXBs46
uLF8HBl1hVUhxaXldgDVNsZVqdLHnNC/YZWKyd9kz6BMYOmMYs4xQ5BQvWwELQi8
kPu1Vytpsr0OiAeo+MJo8+6L4EtS4W4ZIJJVfFnjRumBx2tNo2jBYBS3VOrqHKwt
DdZepo3uiV+ZSLs5dhB6cTxUpNUCqlBow+CXfIqomhZ3EsPWj7TM8Lo2G2FWmzmw
dLv5RVl3GlJ0B6zZco8E4ay0XQew0TVcgXziBoayPkKgUAy4GA==
-----END CERTIFICATE-----
Generated at Thu Apr 16 22:36:06 2026 by rpki-client