
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097404337719607298/0/3130332e3138392e3135342e302f32332d3233203d3e20313436383134.roa
File: 3130332e3138392e3135342e302f32332d3233203d3e20313436383134.roa (raw, json)
Hash identifier: 4nDwr0x7auXaCdia53bmpvYSCG62VhpDsLJImLDcVGo=
Subject key identifier: F4:DB:7E:04:E5:30:8B:62:A5:5A:EF:3B:81:58:1C:6E:E5:5F:C4:7A
Certificate issuer: /CN=6B3CB0044466142CEF0429B4E232A5AD2D38AAA1
Certificate serial: 25907054CF87BFD532830F6E5DB58BAB46C5E5C3
Authority key identifier: 6B:3C:B0:04:44:66:14:2C:EF:04:29:B4:E2:32:A5:AD:2D:38:AA:A1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/3130332e3138392e3135342e302f32332d3233203d3e20313436383134.roa
Signing time: Fri 17 Apr 2026 06:15:11 +0000
ROA not before: Fri 17 Apr 2026 06:10:11 +0000
ROA not after: Fri 16 Apr 2027 06:15:11 +0000
asID: 146814
IP address blocks: 103.189.154.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.crl
rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 08:52:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:90:70:54:cf:87:bf:d5:32:83:0f:6e:5d:b5:8b:ab:46:c5:e5:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B3CB0044466142CEF0429B4E232A5AD2D38AAA1
Validity
Not Before: Apr 17 06:10:11 2026 GMT
Not After : Apr 16 06:15:11 2027 GMT
Subject: CN=F4DB7E04E5308B62A55AEF3B81581C6EE55FC47A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1c:ed:71:34:a8:e2:54:16:67:ba:74:22:e9:
d8:23:11:ed:bc:b6:1c:4d:81:a4:46:a9:3f:b3:aa:
45:b9:cd:70:61:44:8d:9d:3e:9b:eb:02:71:55:2c:
81:13:21:69:32:ab:36:57:e5:ef:d5:5d:e8:b2:9b:
bf:a0:b0:38:c7:d3:ad:71:5a:b9:4c:11:65:31:c1:
cf:95:33:88:4f:6a:68:64:cb:08:ab:8e:db:9f:4f:
23:41:1c:f8:70:0f:3b:15:2f:c1:b2:0e:58:a4:8f:
33:eb:db:bc:8b:29:32:11:94:f1:1c:e1:bd:dd:73:
dc:60:58:73:a6:90:de:08:89:c6:3f:d2:74:21:f9:
eb:f8:8a:e5:49:7c:6a:41:f0:ad:43:e6:43:03:31:
59:6f:a0:4c:bd:fd:28:3b:01:00:51:ab:45:c7:e4:
e6:50:74:9e:e1:da:6a:0e:84:75:45:33:3a:4c:87:
92:e5:4b:40:1e:3d:5d:2c:04:dd:b8:18:cc:20:a7:
98:76:82:84:9f:0f:8f:5d:ad:1f:67:b9:1d:21:cf:
35:e0:58:ad:40:ab:fb:92:5c:ce:63:fe:e5:60:13:
3a:20:03:31:74:24:df:89:72:50:b6:e8:28:1e:a7:
b3:54:c4:a1:45:96:f1:35:5a:59:b7:66:ee:90:e7:
c5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DB:7E:04:E5:30:8B:62:A5:5A:EF:3B:81:58:1C:6E:E5:5F:C4:7A
X509v3 Authority Key Identifier:
keyid:6B:3C:B0:04:44:66:14:2C:EF:04:29:B4:E2:32:A5:AD:2D:38:AA:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/3130332e3138392e3135342e302f32332d3233203d3e20313436383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.189.154.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:9c:54:b8:a4:09:0c:cb:55:61:ee:92:2d:d6:ac:c7:fc:c8:
63:b6:d1:67:fc:4b:ed:65:cf:84:23:e9:43:6b:73:b6:dc:b9:
ac:80:dd:96:05:a1:72:9f:8f:b4:bd:42:24:64:86:70:b8:bf:
58:9f:ae:43:46:d8:02:a3:4c:84:16:76:47:82:02:87:03:91:
b9:b4:05:e5:85:5b:6f:e4:26:8d:2f:ce:5e:8e:a7:43:09:0a:
70:a7:d0:61:e7:09:df:42:8b:47:65:21:61:35:7a:60:7c:02:
7f:e0:33:51:6a:54:3e:27:68:95:cf:ab:01:4e:2c:8d:58:4c:
d4:81:c3:13:2b:61:3a:64:2d:43:09:fd:bc:ec:bd:13:db:26:
95:3b:f4:6f:c3:59:4d:83:a7:93:31:de:6b:48:85:eb:72:46:
53:20:e8:bc:87:33:0d:f8:87:d7:c1:81:f3:2c:6a:09:3e:33:
f2:9b:f0:35:88:06:04:28:27:2c:b8:c3:c8:34:7e:24:05:a5:
5a:3b:ff:5f:0c:d0:c0:a2:52:4c:72:32:45:9b:21:9d:12:e5:
fb:fc:2d:ef:7f:e9:06:31:13:ba:13:96:25:64:dd:ef:e0:48:
07:31:54:94:c8:9d:bb:87:93:ee:af:9d:42:aa:4b:86:03:b9:
cc:f1:93:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:43:21 2026 by rpki-client