
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132352e302f32342d3234203d3e2034353135.roa
File: 3130332e37342e3132352e302f32342d3234203d3e2034353135.roa (raw, json)
Hash identifier: kPEgeNjY+bToq3jPW/vM+1V++oV+UMLzRjIS0wuM3QI=
Subject key identifier: 2B:22:6C:13:30:79:F2:AE:F2:7C:12:74:DB:18:03:0D:12:C3:BB:D0
Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Certificate serial: 77876B2C904C249863AED8FDF9DB4EB106E4CEE5
Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132352e302f32342d3234203d3e2034353135.roa
Signing time: Wed 22 Apr 2026 13:42:25 +0000
ROA not before: Wed 22 Apr 2026 13:37:25 +0000
ROA not after: Wed 21 Apr 2027 13:42:25 +0000
asID: 4515
IP address blocks: 103.74.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 10:43:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:87:6b:2c:90:4c:24:98:63:ae:d8:fd:f9:db:4e:b1:06:e4:ce:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Validity
Not Before: Apr 22 13:37:25 2026 GMT
Not After : Apr 21 13:42:25 2027 GMT
Subject: CN=2B226C133079F2AEF27C1274DB18030D12C3BBD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d0:b7:0a:08:ae:43:eb:8d:6e:c7:6e:91:1b:
c7:48:5f:99:29:ad:64:d2:26:1c:9e:de:03:22:61:
2d:39:14:c6:c9:f5:ed:9d:76:f9:4c:c4:89:bc:96:
86:a1:61:33:c6:f2:37:3f:83:a3:98:50:56:ce:59:
f9:4d:bb:5e:56:3e:22:9c:b2:5f:98:f4:e5:d8:9f:
00:0e:34:fa:fa:93:bc:b0:3e:14:67:8f:7b:59:b3:
d4:17:8a:af:bb:4f:a6:93:09:d5:41:3c:6e:08:4e:
c6:cf:9b:c2:fe:d0:36:13:0c:a0:c2:6e:d5:48:d7:
09:bb:c3:ca:f5:fe:5d:6b:71:bb:70:e9:34:e2:72:
85:81:9c:87:8a:19:16:d5:c2:eb:db:f8:9c:cc:1b:
dd:4b:9e:9b:2d:6a:0e:9b:e1:cf:cc:da:e4:df:2e:
96:e7:0f:f4:4b:f6:11:2c:1e:fc:d9:96:3a:0e:89:
65:26:6d:36:a2:d6:05:5f:e1:05:12:a3:ca:e7:81:
12:0d:5f:7c:1d:1d:0e:24:c5:4a:04:37:93:e4:57:
cf:a5:f0:25:80:8a:0b:e5:6e:1c:e1:82:a8:03:54:
99:8a:9d:e0:43:50:19:5d:35:7b:3c:75:0a:33:55:
f2:8b:f4:ef:de:66:20:91:9a:38:ef:3d:55:5e:b8:
dc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:22:6C:13:30:79:F2:AE:F2:7C:12:74:DB:18:03:0D:12:C3:BB:D0
X509v3 Authority Key Identifier:
keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132352e302f32342d3234203d3e2034353135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.74.125.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:fe:7a:bf:1a:e3:1a:38:76:25:57:16:50:89:91:62:19:1b:
1e:d1:97:97:71:80:6c:6a:c8:74:18:80:fc:69:50:e4:77:09:
28:a3:2b:c4:a3:72:91:22:08:d5:7f:5d:2e:cb:fc:2d:c0:1a:
10:c9:f7:eb:6a:ac:41:8d:c3:42:79:b3:76:43:55:46:fe:f6:
eb:91:a3:b8:58:fa:ad:cc:03:01:e1:21:23:92:27:6d:91:3c:
3d:af:15:bb:2f:05:be:42:e3:8d:58:e0:6e:fe:97:65:b9:15:
03:90:30:fe:79:ea:aa:65:1e:c0:b8:92:d7:2d:d0:b6:c3:60:
02:b1:26:05:37:ea:7f:8c:a8:aa:6a:74:03:52:4e:f2:1c:e2:
ef:16:64:03:2a:35:84:97:53:ef:45:cd:04:e2:da:25:11:b7:
76:01:72:03:86:b0:8f:2e:8a:fc:9b:4c:1d:42:4a:00:3d:68:
5b:13:b6:94:2f:0a:6d:82:23:77:99:a0:31:e2:e4:db:45:24:
23:3d:91:42:36:af:42:15:56:7a:79:83:c2:60:4a:38:c0:de:
83:4c:53:7d:1d:66:9a:fa:d3:3a:f7:46:10:11:70:56:56:50:
22:5b:0e:e2:64:d4:8d:db:87:73:6d:60:3d:c6:00:fa:a2:be:
0b:e8:ac:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:06:07 2026 by rpki-client