
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132342e302f32342d3234203d3e203633363431.roa
File: 3130332e37342e3132342e302f32342d3234203d3e203633363431.roa (raw, json)
Hash identifier: gRQN0o+vVFUgQImOFwWWxVaqErUDw+vaCxwwvhUJcb0=
Subject key identifier: 9D:AD:05:3D:D0:60:5C:A8:91:4B:72:1F:B7:E8:C0:05:F2:99:E2:26
Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Certificate serial: 248857B74A42B25CAD21B5AE83060CD3109C474F
Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132342e302f32342d3234203d3e203633363431.roa
Signing time: Wed 22 Apr 2026 13:40:36 +0000
ROA not before: Wed 22 Apr 2026 13:35:36 +0000
ROA not after: Wed 21 Apr 2027 13:40:36 +0000
asID: 63641
IP address blocks: 103.74.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 10:43:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:88:57:b7:4a:42:b2:5c:ad:21:b5:ae:83:06:0c:d3:10:9c:47:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Validity
Not Before: Apr 22 13:35:36 2026 GMT
Not After : Apr 21 13:40:36 2027 GMT
Subject: CN=9DAD053DD0605CA8914B721FB7E8C005F299E226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:60:12:d3:08:dd:08:00:43:34:55:8f:da:54:
d1:02:6c:6b:46:8d:af:60:d4:b8:7f:d4:98:23:2f:
4b:be:fa:a0:7b:66:89:b3:43:e3:0c:81:c2:1e:13:
84:12:b6:20:67:f8:b4:cc:ce:ca:6b:52:94:0a:ce:
06:02:d8:ff:1c:52:64:ce:10:38:cf:54:50:30:11:
8d:d9:4c:97:eb:c4:3a:fe:17:c9:7f:47:2b:6e:77:
6e:fd:50:0b:93:27:da:15:c6:87:30:a6:58:9d:94:
4b:33:75:dd:6f:bb:f8:79:08:96:40:8f:83:7b:d9:
3a:27:4c:f4:4d:c3:65:f3:37:21:55:0b:dc:41:61:
3c:bf:7f:68:1c:9f:76:5c:3e:a8:5a:d1:2a:b3:d8:
bb:fb:80:36:0f:3d:cd:b0:94:be:2a:7a:b7:09:97:
f4:d7:ec:1c:40:96:7d:1f:50:a9:f1:38:c9:75:ab:
41:1c:b0:7c:02:98:31:5c:0b:dd:f5:c3:c6:af:6e:
9c:50:f4:52:7a:42:c9:af:d1:83:a9:69:0c:b7:4b:
8e:31:ee:7f:81:11:95:b2:2e:9e:c8:c9:49:5f:8b:
02:5b:05:68:98:9b:06:06:0b:c3:18:1e:a8:f4:ee:
4a:65:f8:ae:8a:1a:6b:32:a5:2d:3e:28:d1:01:44:
f5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AD:05:3D:D0:60:5C:A8:91:4B:72:1F:B7:E8:C0:05:F2:99:E2:26
X509v3 Authority Key Identifier:
keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132342e302f32342d3234203d3e203633363431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.74.124.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:2e:b8:c2:b5:28:96:12:b1:1d:b8:98:84:d3:d5:c7:46:fa:
f8:65:a0:d7:9b:4a:50:62:5f:61:b4:45:2a:55:19:54:fd:45:
2f:26:9c:a4:f1:77:69:3f:e0:ae:63:a1:97:2a:d6:63:a8:4f:
4c:f1:65:76:3b:b6:72:6a:b8:27:bc:15:bb:98:4b:a8:46:8a:
ee:8f:58:df:38:ab:1a:81:ce:c0:b9:29:4a:b2:86:8d:68:1d:
01:b6:6e:c3:76:04:25:b2:d3:39:f4:f8:cc:96:71:64:2f:76:
dc:c5:5f:a7:37:f0:6c:f9:de:50:e8:e6:58:28:ba:22:17:33:
8c:10:69:a2:93:0f:1f:71:8e:21:f8:4a:df:e9:2d:63:61:09:
fc:fb:eb:b7:cf:84:19:10:96:30:66:fd:0e:4c:74:74:7f:96:
9a:46:c8:70:f4:fc:84:7a:cb:3a:56:68:29:2e:56:fc:d9:1b:
20:7e:c7:b5:25:ab:73:d3:a5:d7:de:5b:7b:88:30:37:9d:db:
10:78:8c:98:c7:c7:84:06:98:40:60:ee:e3:3c:e6:5d:75:3f:
f2:c9:ff:a4:4b:da:60:79:46:fe:d3:e1:59:91:5e:12:b4:f5:
0d:32:e6:1b:12:50:2e:1d:bb:34:aa:84:7b:b3:d3:26:eb:d9:
9c:30:88:ac
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:06:04 2026 by rpki-client