
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e3138342e302f32322d3232203d3e203536303430.roa
File: 3130332e35362e3138342e302f32322d3232203d3e203536303430.roa (raw, json)
Hash identifier: l1wavDmga4Oh7J86j1GjlYuKKSefHbOrVDv4qJaQZe4=
Subject key identifier: B0:C7:93:91:51:2F:A9:3C:32:26:1E:F3:66:60:E3:0C:4C:F1:46:D7
Certificate issuer: /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
Certificate serial: 6D72B98FCAC0712BE7504944445C786AAA11A6EF
Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e3138342e302f32322d3232203d3e203536303430.roa
Signing time: Mon 13 Apr 2026 02:27:54 +0000
ROA not before: Mon 13 Apr 2026 02:22:54 +0000
ROA not after: Mon 12 Apr 2027 02:27:54 +0000
asID: 56040
IP address blocks: 103.56.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 09:53:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:72:b9:8f:ca:c0:71:2b:e7:50:49:44:44:5c:78:6a:aa:11:a6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
Validity
Not Before: Apr 13 02:22:54 2026 GMT
Not After : Apr 12 02:27:54 2027 GMT
Subject: CN=B0C79391512FA93C32261EF36660E30C4CF146D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:91:34:dc:d4:d9:3a:0a:05:5a:43:89:6f:54:
de:4a:f7:9c:a0:fa:0a:12:1b:71:f1:3b:e8:14:19:
ee:96:f0:8b:b7:3f:fb:6c:dc:2a:b5:ee:c0:d3:5a:
27:20:c2:88:51:82:34:eb:e7:fe:b3:29:65:1f:59:
0b:6e:62:38:78:09:99:29:7f:7a:43:a1:8e:dd:d0:
ec:bf:81:2a:3f:d6:7f:90:88:43:90:b2:3b:18:ec:
61:6d:7d:38:a9:33:da:76:41:3c:46:4e:91:44:a5:
69:a7:e4:5a:21:f0:95:d0:a0:1c:df:27:13:85:98:
4a:f8:28:09:d8:9a:1f:14:01:64:14:ef:78:a4:f1:
c0:72:6b:de:50:af:b3:df:a8:a6:a5:56:2c:ae:7d:
29:01:eb:64:ac:0b:47:a8:02:2a:a8:a9:75:fc:fb:
aa:62:64:cf:33:c2:62:01:40:ef:e9:21:d2:33:d8:
70:4a:79:b5:7a:f1:d8:c4:05:d4:68:e7:1e:7a:11:
64:ba:99:c6:b3:28:25:7b:98:53:80:96:54:c9:14:
98:02:a6:74:c0:81:f3:bd:44:36:18:95:31:0d:11:
ae:7a:2a:da:9d:25:2e:77:55:75:fa:3a:a2:51:bb:
9c:79:4d:6e:31:29:cc:d9:9d:91:48:8c:93:e1:c1:
64:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C7:93:91:51:2F:A9:3C:32:26:1E:F3:66:60:E3:0C:4C:F1:46:D7
X509v3 Authority Key Identifier:
keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e3138342e302f32322d3232203d3e203536303430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.56.184.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:3e:86:12:0c:b1:65:22:01:dd:1b:3a:61:1b:5e:e8:61:ef:
7a:53:dc:a7:00:89:7a:f6:b0:83:cb:e5:2b:01:c6:33:33:69:
3d:ec:77:72:a0:03:2f:94:26:c3:55:21:3e:1f:bb:2c:1c:77:
ac:18:96:2e:71:b8:0b:68:e8:f8:c8:cc:32:ea:d0:51:6e:cb:
d1:67:ff:e4:d3:82:0a:23:2a:6c:05:99:b6:e5:50:14:43:c9:
39:67:1e:f6:86:d3:b1:68:81:d6:6c:ee:9d:d1:66:56:01:c3:
bb:7b:64:40:8a:d1:a9:bf:bd:7f:6b:1c:2c:89:d1:fc:4f:94:
ce:32:2c:40:51:9b:f1:46:4a:77:55:c7:b1:57:cb:cb:82:33:
0f:37:40:8a:c7:34:b0:05:84:df:61:dd:58:07:75:96:31:01:
a4:7d:ac:37:fb:fc:76:5f:8e:41:fc:7a:32:32:17:78:69:0a:
9c:8b:32:fa:e2:04:98:fa:92:5c:4c:6f:44:36:10:76:8e:c2:
a0:a8:13:e2:cd:8c:13:94:67:c4:18:46:1b:b6:63:e9:35:62:
0b:0e:71:f5:bf:2c:e2:cf:66:b3:bc:45:e2:1c:86:69:0b:18:
af:39:c2:e0:c5:0e:55:d3:b6:e3:e7:86:dc:4b:75:be:5a:ba:
99:c9:56:c1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:31:17 2026 by rpki-client