
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132352e302f32342d3234203d3e2034383132.roa
File: 3130332e37342e3132352e302f32342d3234203d3e2034383132.roa (raw, json)
Hash identifier: QQ5YYDcejvZEHru0w1UtLf1cdTrvc8RgvFn4B+u2OAg=
Subject key identifier: 53:C4:7B:73:43:8D:43:54:D1:69:70:E8:83:FA:E1:FD:E1:DF:A6:C7
Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Certificate serial: 6B37D9D3B639A4B4BB23B5B61B5115CF9BA7164D
Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132352e302f32342d3234203d3e2034383132.roa
Signing time: Wed 22 Apr 2026 13:42:25 +0000
ROA not before: Wed 22 Apr 2026 13:37:25 +0000
ROA not after: Wed 21 Apr 2027 13:42:25 +0000
asID: 4812
IP address blocks: 103.74.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 07:23:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:37:d9:d3:b6:39:a4:b4:bb:23:b5:b6:1b:51:15:cf:9b:a7:16:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Validity
Not Before: Apr 22 13:37:25 2026 GMT
Not After : Apr 21 13:42:25 2027 GMT
Subject: CN=53C47B73438D4354D16970E883FAE1FDE1DFA6C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4c:4b:f8:44:93:96:c4:b9:47:f2:c5:92:5c:
68:2f:ae:b9:58:42:ed:b9:47:25:0f:9b:46:d9:29:
f3:24:0f:03:c0:55:b6:62:0c:ee:a4:71:73:08:22:
00:b4:13:9e:f2:db:40:fa:88:7d:d2:ab:7b:04:19:
71:c9:37:90:06:6f:c5:19:6a:af:e1:12:b7:ed:01:
5b:e4:1e:92:09:f0:6d:0c:63:5f:4e:5b:28:bc:b0:
05:8a:43:10:c9:32:70:e9:c6:90:4e:ca:06:c8:61:
d4:6d:ee:5e:fb:69:47:a0:87:55:b3:9d:85:54:d5:
12:03:a2:d8:54:4c:4b:29:18:78:17:cd:98:67:4c:
9c:26:42:9d:c7:da:7b:2f:69:62:5c:0f:80:55:6c:
a2:cf:32:d1:e5:0e:43:88:53:bd:ac:2e:f7:cd:09:
40:b1:9f:31:b7:45:5f:77:8a:1f:64:dc:20:b2:cc:
7f:dc:72:f5:5e:a1:05:07:04:b8:b7:58:0b:44:6e:
64:cc:8d:0e:b5:75:1f:be:eb:44:63:6a:85:d9:2f:
e9:93:c9:46:7e:06:5d:d1:20:4c:0f:98:48:9d:e8:
d3:4b:ca:74:e2:9d:f4:d4:2c:0d:aa:52:1b:ca:a6:
62:15:d4:7d:85:c3:cd:8e:4a:ae:2f:21:8d:2b:35:
90:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C4:7B:73:43:8D:43:54:D1:69:70:E8:83:FA:E1:FD:E1:DF:A6:C7
X509v3 Authority Key Identifier:
keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132352e302f32342d3234203d3e2034383132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.74.125.0/24
Signature Algorithm: sha256WithRSAEncryption
37:c4:50:aa:ab:f0:2f:4d:bf:72:cd:54:b4:35:d7:ae:31:73:
45:87:10:25:5f:e6:72:07:09:80:c5:5f:aa:a5:0c:24:09:62:
ec:03:4b:47:22:52:10:5f:2a:08:f7:10:f5:4d:9a:35:6f:8b:
67:f8:0a:02:5a:c7:e7:eb:f2:5c:c3:42:fd:82:f9:3c:ab:6b:
5f:5c:2a:72:54:ed:78:a0:dd:b6:58:92:78:05:19:a7:bb:fb:
84:26:fe:be:ab:4a:01:a4:6b:bf:24:42:6f:69:fb:d9:df:94:
98:73:3b:01:19:15:26:89:3a:7c:a9:f4:b0:94:1c:15:f5:b1:
80:f9:cf:1e:63:38:80:bd:a0:0b:46:8e:32:7a:11:68:71:f4:
57:bd:ba:5e:73:61:cd:41:e3:5d:15:a8:60:c8:dd:e8:14:83:
34:39:91:98:ac:54:cb:ec:30:fd:ce:f3:91:cb:91:12:45:e1:
64:76:4c:63:0c:14:5f:ab:0f:51:05:73:16:89:a4:e2:d5:fb:
27:f6:99:2e:f5:67:30:d1:e4:88:0b:24:9c:e5:c5:49:8d:8c:
29:ee:bc:d9:c7:54:cd:92:0e:e8:dc:fa:3b:2e:f0:6c:ac:ce:
e9:d4:ea:39:a6:8d:e5:49:5d:c0:78:89:a9:c8:01:bb:7d:32:
4c:31:0d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 08:24:35 2026 by rpki-client