
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097062473040658435/0/3130332e32392e31362e302f32342d3234203d3e2034383437.roa
File: 3130332e32392e31362e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier: rTxX8Lm63872yMyTFDhE99npcKZQONNCC5ubifDKHEc=
Subject key identifier: 90:DD:B3:E4:2E:FF:25:6B:7A:A7:01:32:0E:89:AE:26:F6:20:69:1C
Certificate issuer: /CN=62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163
Certificate serial: 27248AEAE9C27A2D5C566DF6A11CC10DA458060E
Authority key identifier: 62:BC:BF:91:85:43:7A:0B:C9:8E:F8:D6:C4:5F:4B:0E:CB:56:C1:63
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/3130332e32392e31362e302f32342d3234203d3e2034383437.roa
Signing time: Thu 16 Apr 2026 07:44:14 +0000
ROA not before: Thu 16 Apr 2026 07:39:14 +0000
ROA not after: Thu 15 Apr 2027 07:44:14 +0000
asID: 4847
IP address blocks: 103.29.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.crl
rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 02:35:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:24:8a:ea:e9:c2:7a:2d:5c:56:6d:f6:a1:1c:c1:0d:a4:58:06:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163
Validity
Not Before: Apr 16 07:39:14 2026 GMT
Not After : Apr 15 07:44:14 2027 GMT
Subject: CN=90DDB3E42EFF256B7AA701320E89AE26F620691C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:81:f2:4d:06:7a:50:9d:7e:ca:a7:36:be:74:
bb:cc:bb:48:74:0b:16:d9:43:2e:ba:cc:10:17:49:
5f:a8:44:cf:0d:5c:53:92:6c:fa:85:97:9f:26:b5:
01:98:4a:d9:99:7e:45:23:0f:2d:e8:69:97:5b:67:
85:ed:01:2e:e0:97:2a:d9:34:81:d0:69:9c:0b:fa:
28:dd:13:0f:9b:50:7d:b3:89:95:ea:56:f2:48:de:
bf:04:c7:76:5e:6b:5f:27:b0:99:9b:ff:d3:ab:95:
70:42:86:9e:0f:4c:65:c5:ca:7b:f0:d4:7d:c9:09:
bf:85:0f:23:f6:e9:d8:e1:2e:43:5b:dc:00:cf:7a:
92:ea:82:ab:d3:fb:cf:6a:5e:30:78:85:34:36:28:
e9:19:f5:ce:08:c5:db:e8:f8:cb:36:fa:15:df:0c:
be:9e:b2:0c:8c:68:08:46:c9:2d:7e:cc:ba:d1:0e:
b7:79:f9:44:dd:ce:2e:bf:72:68:b9:aa:f7:86:a1:
20:4b:42:13:67:39:13:5f:da:14:3d:c9:f8:e4:f8:
f2:f9:fb:91:8a:31:15:f3:d9:82:1e:4f:7b:b7:21:
6d:9e:bb:cd:7c:62:7a:83:38:15:66:2e:2c:41:27:
28:78:a9:e7:ea:0f:98:d2:f7:c1:bd:c9:af:fc:ea:
11:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DD:B3:E4:2E:FF:25:6B:7A:A7:01:32:0E:89:AE:26:F6:20:69:1C
X509v3 Authority Key Identifier:
keyid:62:BC:BF:91:85:43:7A:0B:C9:8E:F8:D6:C4:5F:4B:0E:CB:56:C1:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/3130332e32392e31362e302f32342d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.29.16.0/24
Signature Algorithm: sha256WithRSAEncryption
28:84:c0:16:c1:b1:f9:3a:65:be:42:11:ef:97:09:52:5f:d9:
5d:2e:0d:21:95:a9:2f:35:21:ff:65:29:01:95:ee:a3:40:58:
1e:b7:6f:c4:30:1d:c5:82:28:73:55:53:06:18:e9:8d:df:e2:
37:a5:dd:3e:09:05:5c:17:d1:c4:4c:09:ef:82:83:82:2d:ad:
09:48:28:00:01:87:5d:d0:da:26:1c:b9:7b:53:bb:cf:d7:15:
62:60:23:e4:e9:0c:a7:3e:61:74:60:b1:3a:b3:b7:b4:bc:f2:
ef:65:36:e3:94:b1:ae:30:53:de:63:94:08:66:04:5a:de:48:
12:ed:f3:58:bd:9e:d0:2c:13:9e:62:4a:44:ea:12:69:ca:c6:
f3:3f:78:1a:d5:43:b4:23:41:a1:24:3b:f3:d1:13:3b:82:7b:
c2:25:8f:97:4d:83:3b:7e:9a:3a:e7:97:63:04:47:39:6d:2f:
5b:13:67:56:3e:e7:00:e7:fa:23:cd:5d:9e:74:52:34:80:b5:
49:ee:15:50:73:33:eb:9d:35:07:60:91:e7:da:53:40:8f:55:
d9:9d:c2:22:c5:26:ad:4e:fe:a2:b4:fb:91:29:8e:ba:6a:08:
72:7b:04:5c:7c:9c:b1:df:8c:e1:59:58:7c:ed:f9:28:35:19:
88:e5:83:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:55:03 2026 by rpki-client