
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097062473040658435/0/3130332e32392e31362e302f32342d3234203d3e2034383038.roa
File: 3130332e32392e31362e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier: NZTsCMcy1d8h2SSnmv83bYWiZ5eRtyUrHm+R9VhcHt0=
Subject key identifier: 33:A1:E5:01:18:E5:71:59:78:64:14:21:FC:7A:36:A8:31:47:1A:78
Certificate issuer: /CN=62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163
Certificate serial: 1DE99BDBD5FB7A0808B08EFA2D4D4B3A03F1C085
Authority key identifier: 62:BC:BF:91:85:43:7A:0B:C9:8E:F8:D6:C4:5F:4B:0E:CB:56:C1:63
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/3130332e32392e31362e302f32342d3234203d3e2034383038.roa
Signing time: Thu 16 Apr 2026 07:44:14 +0000
ROA not before: Thu 16 Apr 2026 07:39:14 +0000
ROA not after: Thu 15 Apr 2027 07:44:14 +0000
asID: 4808
IP address blocks: 103.29.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.crl
rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 02:35:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:e9:9b:db:d5:fb:7a:08:08:b0:8e:fa:2d:4d:4b:3a:03:f1:c0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163
Validity
Not Before: Apr 16 07:39:14 2026 GMT
Not After : Apr 15 07:44:14 2027 GMT
Subject: CN=33A1E50118E5715978641421FC7A36A831471A78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:42:35:fb:55:ec:5a:bb:1b:ea:d8:f0:9b:d0:
b6:86:ea:e7:e3:fc:74:d5:47:bb:28:bc:38:34:1e:
3b:df:44:f4:3f:f1:ea:dc:d5:5a:4c:71:fa:ab:f1:
b1:5a:c2:70:dc:9f:a7:f7:db:23:2b:bc:7e:15:97:
6c:cf:59:e1:c4:49:3d:eb:83:2c:88:d2:3c:12:5a:
e9:bf:cb:6e:77:5d:3d:b4:bf:c1:a2:63:01:5c:dd:
94:c3:36:ef:51:ea:82:d3:71:8e:a2:8a:fc:2f:ab:
04:34:47:cb:52:18:1b:48:9a:4b:f2:b0:eb:58:56:
16:71:37:f4:d7:61:9c:0d:b4:f1:dc:75:a5:41:08:
f2:29:46:52:eb:34:a9:2d:94:eb:8b:f0:0e:3b:1b:
28:a1:c4:50:d1:8e:04:2d:7e:fc:eb:e6:d4:e2:d8:
99:2a:dc:c4:20:46:b6:05:c1:7c:4f:28:41:1b:f0:
49:1d:d3:77:94:c5:ab:6d:83:6c:ac:fb:6f:8e:89:
28:ca:b4:5f:e7:d2:3a:71:65:cc:ad:4c:33:62:df:
6e:9c:27:55:04:5d:d9:14:ac:09:b4:fb:a6:af:7d:
cd:55:99:0d:a9:73:e1:11:04:96:11:6e:2a:ae:5c:
e9:8e:7f:5f:5c:95:58:19:85:c5:15:b2:0e:92:95:
7c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A1:E5:01:18:E5:71:59:78:64:14:21:FC:7A:36:A8:31:47:1A:78
X509v3 Authority Key Identifier:
keyid:62:BC:BF:91:85:43:7A:0B:C9:8E:F8:D6:C4:5F:4B:0E:CB:56:C1:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/3130332e32392e31362e302f32342d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.29.16.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:e5:fb:15:59:65:c2:61:e3:b1:b9:22:23:3a:5b:0d:4a:a9:
20:d4:c1:6d:99:6f:b6:20:cb:06:aa:09:29:42:3a:65:3e:9e:
3d:18:ec:53:1b:c8:1a:01:42:24:75:b4:79:8d:c1:9c:78:76:
1e:f3:be:8e:9d:4c:13:59:e6:80:55:fc:1b:09:80:7f:f8:b2:
13:12:ae:92:83:76:57:d1:8e:37:b6:6d:33:69:cf:02:58:db:
c8:cf:90:b1:07:32:ee:6b:57:08:bc:1a:48:8b:bd:a5:fd:64:
62:c6:ed:03:de:e7:22:d0:3b:db:44:5d:5d:a4:db:3e:9f:1e:
5d:e0:58:22:0b:43:37:87:f8:df:36:16:89:25:21:c6:29:c4:
09:58:26:72:7a:d5:00:aa:2f:35:80:e6:02:af:50:ef:fb:28:
8a:71:70:42:17:d4:f0:15:70:c6:52:76:c0:4d:af:43:59:0f:
13:72:d2:1a:83:c1:97:68:de:9c:05:3e:12:97:af:2b:4a:ec:
59:7d:cd:b9:c6:b8:79:63:23:17:13:59:ab:e7:b3:89:9b:61:
32:46:54:51:9a:3e:cd:41:6e:ef:0b:71:59:91:2f:7d:cd:05:
a5:6a:46:de:1e:96:cc:c8:cd:cf:d5:af:bd:3f:2b:d6:5d:fe:
3b:fc:1d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:34:35 2026 by rpki-client