
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130372e302e302f32322d3232203d3e203633353339.roa
File: 3130332e3130372e302e302f32322d3232203d3e203633353339.roa (raw, json)
Hash identifier: 6zTAgkmaPpXVKLTCOKQuSK7E1Hwzah+JQrIRvBH7yYY=
Subject key identifier: 1F:CD:02:A9:DA:70:B4:87:9B:52:2F:46:7C:3E:9D:07:00:DF:E0:CD
Certificate issuer: /CN=BC1F9CBB5FF6063230D45B596F2D0E6D94338815
Certificate serial: 277C01C9CFD6EC11046A394C4CD19E611F2E46DB
Authority key identifier: BC:1F:9C:BB:5F:F6:06:32:30:D4:5B:59:6F:2D:0E:6D:94:33:88:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130372e302e302f32322d3232203d3e203633353339.roa
Signing time: Thu 16 Apr 2026 02:55:39 +0000
ROA not before: Thu 16 Apr 2026 02:50:39 +0000
ROA not after: Thu 15 Apr 2027 02:55:39 +0000
asID: 63539
IP address blocks: 103.107.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.crl
rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 14:49:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:7c:01:c9:cf:d6:ec:11:04:6a:39:4c:4c:d1:9e:61:1f:2e:46:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC1F9CBB5FF6063230D45B596F2D0E6D94338815
Validity
Not Before: Apr 16 02:50:39 2026 GMT
Not After : Apr 15 02:55:39 2027 GMT
Subject: CN=1FCD02A9DA70B4879B522F467C3E9D0700DFE0CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:32:21:7d:67:37:14:3b:b0:c3:17:da:f3:
3b:26:df:48:7d:58:c1:3f:2c:a9:87:40:f6:36:6c:
99:9b:a1:93:50:9f:83:b5:27:90:05:9b:cf:65:fb:
1a:91:a4:61:82:00:a5:e9:19:43:63:5c:02:8b:6c:
2a:19:da:66:d8:e8:9b:c4:83:a4:8e:48:d7:bb:e3:
f9:48:54:18:72:66:5e:e7:e1:bb:b7:97:3e:bb:1f:
28:4d:27:71:98:a0:a7:fa:68:d4:9a:e4:4c:e0:aa:
17:0b:0f:cd:c1:14:63:51:f2:29:b4:d7:49:71:b3:
ed:55:a5:f5:2b:08:ab:f8:7d:7a:86:41:00:3d:eb:
f5:b0:69:50:57:20:0b:22:96:1f:8e:5f:64:95:24:
e4:d6:cb:4d:88:b6:22:2a:aa:4a:1c:a1:4b:09:a7:
a5:14:2b:a3:0c:38:f5:1e:78:82:4b:2c:34:36:ca:
8b:e0:e6:86:ba:ec:81:14:13:09:e9:c3:56:a2:73:
dd:45:34:ed:3f:89:8a:ec:39:a4:53:ff:7b:73:d3:
22:18:4a:ff:98:2a:af:62:4d:49:cd:42:67:b1:2b:
eb:6a:cf:d2:ff:73:c1:08:11:19:04:35:d4:33:d6:
dc:8f:41:c6:db:bd:a9:ac:14:b2:a7:7b:8f:82:dc:
ba:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CD:02:A9:DA:70:B4:87:9B:52:2F:46:7C:3E:9D:07:00:DF:E0:CD
X509v3 Authority Key Identifier:
keyid:BC:1F:9C:BB:5F:F6:06:32:30:D4:5B:59:6F:2D:0E:6D:94:33:88:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130372e302e302f32322d3232203d3e203633353339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.107.0.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:84:27:37:22:e2:93:f0:22:36:b3:2c:b4:65:ef:cf:a2:ad:
0b:75:ef:05:32:fe:c1:ed:c0:16:00:bc:6f:14:a4:1b:2f:70:
1c:92:88:eb:51:72:1d:69:9d:ad:6d:ea:83:50:2e:dd:54:b8:
f4:3d:6e:d3:5c:a6:31:4b:77:b3:33:63:79:a1:af:13:c7:31:
a1:9d:e4:b6:f8:3b:58:9a:2d:59:4d:fd:ba:5e:a1:44:c5:b7:
71:2f:bf:28:f3:31:f5:d6:84:01:4b:e6:2b:b4:71:d7:45:a8:
1c:30:72:99:3f:f3:f3:c9:71:61:c1:88:f0:d3:9b:6e:ba:b3:
85:44:cb:57:05:eb:37:63:3f:ca:c0:81:47:c2:6f:b2:71:82:
3f:0d:25:74:b3:a3:b3:f2:9f:1e:23:26:c3:21:fe:b0:0f:5b:
b9:b8:92:df:cf:61:27:9e:5c:0f:fd:3e:31:40:33:ab:3f:87:
e2:d2:8c:e9:38:2d:0a:b5:d7:66:d9:fa:e8:96:fd:8f:50:5a:
7c:f9:5f:d9:9e:0a:f3:6c:76:92:d2:bd:f0:23:20:dd:81:df:
f9:4b:96:4e:a5:99:17:94:59:cf:a9:d7:6e:8d:be:5f:33:51:
c1:d0:55:9c:ac:ab:26:80:39:5b:ed:64:85:5c:da:26:71:41:
a9:7d:41:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:48:42 2026 by rpki-client