
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097062473040658435/0/3130332e37322e3137322e302f32342d3234203d3e2034383038.roa
File: 3130332e37322e3137322e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier: y0kAi5A0JlE2dyIdzp5K0xv84KpyLuvw+SOxgyrsAac=
Subject key identifier: 5E:96:15:C0:D9:F9:9E:F3:92:D1:0A:BF:F1:C4:F3:AE:58:95:CD:00
Certificate issuer: /CN=62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163
Certificate serial: 7418B08CBC2CA1A6875F7FD321C3257BB5CF1273
Authority key identifier: 62:BC:BF:91:85:43:7A:0B:C9:8E:F8:D6:C4:5F:4B:0E:CB:56:C1:63
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/3130332e37322e3137322e302f32342d3234203d3e2034383038.roa
Signing time: Thu 16 Apr 2026 07:53:19 +0000
ROA not before: Thu 16 Apr 2026 07:48:19 +0000
ROA not after: Thu 15 Apr 2027 07:53:19 +0000
asID: 4808
IP address blocks: 103.72.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.crl
rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 02:35:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:18:b0:8c:bc:2c:a1:a6:87:5f:7f:d3:21:c3:25:7b:b5:cf:12:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163
Validity
Not Before: Apr 16 07:48:19 2026 GMT
Not After : Apr 15 07:53:19 2027 GMT
Subject: CN=5E9615C0D9F99EF392D10ABFF1C4F3AE5895CD00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7b:4e:c9:8d:a0:7d:c6:dd:9a:f1:b9:83:be:
b4:7d:4e:e4:5a:39:57:86:22:56:09:c2:28:3a:20:
5c:b2:b8:8b:67:40:a1:8c:ec:87:f5:62:d7:b8:84:
2d:e0:ca:a5:31:ca:0d:4e:27:ff:97:cd:0c:bd:3a:
03:01:f7:46:86:9b:b5:58:4b:57:c5:b5:64:c5:f0:
3b:25:98:05:6d:70:e2:04:59:cb:4a:5b:1e:4d:12:
80:80:db:49:c4:2e:ab:ac:f8:54:52:1e:0e:f2:a5:
d4:28:9b:40:9b:55:16:d7:5e:ab:da:2b:de:73:f1:
4e:66:d2:b2:f4:af:71:b2:c3:1a:7e:23:86:d6:1c:
d3:04:37:a9:c2:d2:6c:57:72:dd:a4:fe:3c:22:6c:
86:f6:c6:ce:79:3b:8a:4f:74:fe:6a:46:b3:fb:81:
19:d3:62:bb:14:f6:a2:a1:c1:18:6c:43:49:61:61:
40:21:8d:51:e4:53:10:84:cd:48:62:5b:a4:de:23:
8b:df:ad:1d:33:e2:86:32:60:eb:35:28:1a:5d:80:
1f:7b:b4:66:34:5a:a3:d7:70:19:97:62:80:aa:24:
65:72:33:0c:fa:03:5b:e6:a6:db:c3:45:e9:81:21:
8e:88:c4:d2:41:08:a3:71:1c:b5:8b:b0:41:2f:8e:
fc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:96:15:C0:D9:F9:9E:F3:92:D1:0A:BF:F1:C4:F3:AE:58:95:CD:00
X509v3 Authority Key Identifier:
keyid:62:BC:BF:91:85:43:7A:0B:C9:8E:F8:D6:C4:5F:4B:0E:CB:56:C1:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/3130332e37322e3137322e302f32342d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.72.172.0/24
Signature Algorithm: sha256WithRSAEncryption
68:40:48:0f:c1:de:3e:6d:55:7b:29:fb:28:52:67:fd:b1:43:
c7:b2:ee:3c:ee:28:b7:cd:b1:ba:b6:94:c2:3e:1a:69:ed:f4:
f3:c1:1a:bb:22:67:af:4b:e0:63:05:94:9b:55:76:b2:50:8d:
b0:db:be:78:7b:d5:5a:c7:8f:f1:1a:e1:d0:3a:b0:d1:af:0a:
a4:e9:9c:6f:9c:0c:15:84:ff:36:f8:a1:03:ca:b0:b7:cb:0d:
8b:e7:a5:96:e6:bf:d1:46:0a:d7:5c:0e:10:a8:3d:18:91:f9:
f9:3b:92:06:bf:66:e6:36:25:c8:67:1a:bf:b6:59:81:dc:4b:
61:49:3a:ac:8a:0f:50:46:5e:2c:ef:98:0b:bb:2c:5c:66:81:
3d:60:a2:8d:6c:e2:db:c4:bd:87:45:29:d5:6b:f3:4b:8b:03:
1f:94:9a:b0:f7:dd:73:f9:54:b9:db:2e:68:9e:c3:ba:72:6d:
9d:5a:36:f5:77:d2:8e:29:a3:68:40:d4:45:e9:fa:d3:e6:96:
5d:a6:cb:aa:db:28:4a:32:23:6a:24:80:91:91:79:ae:dd:ff:
b4:fe:29:15:33:70:1d:34:82:fc:d7:29:35:ea:67:31:43:32:
0f:2e:2f:e8:cb:8f:e4:5c:ff:f6:0b:82:52:21:dd:d7:32:cf:
28:fe:c9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:35:23 2026 by rpki-client