
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132352e302f32342d3234203d3e203633363431.roa
File: 3130332e37342e3132352e302f32342d3234203d3e203633363431.roa (raw, json)
Hash identifier: nxOQzRYwXMmquS1rIej99tzxTkizSPYgZdRZHVl5wZA=
Subject key identifier: 58:F3:30:85:EA:38:A9:35:7A:1A:81:8A:2E:FC:D6:6B:D6:CA:CD:93
Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Certificate serial: 3B6A7D9D749E0AAADF0AC53DC1C365930A657944
Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132352e302f32342d3234203d3e203633363431.roa
Signing time: Wed 22 Apr 2026 13:42:25 +0000
ROA not before: Wed 22 Apr 2026 13:37:25 +0000
ROA not after: Wed 21 Apr 2027 13:42:25 +0000
asID: 63641
IP address blocks: 103.74.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 10:43:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:6a:7d:9d:74:9e:0a:aa:df:0a:c5:3d:c1:c3:65:93:0a:65:79:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Validity
Not Before: Apr 22 13:37:25 2026 GMT
Not After : Apr 21 13:42:25 2027 GMT
Subject: CN=58F33085EA38A9357A1A818A2EFCD66BD6CACD93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:12:3d:ba:9f:c2:fc:27:21:f4:ab:37:cc:11:
f6:c0:9e:7c:71:fd:c0:ff:4e:b8:f0:ba:36:07:0b:
b8:cf:b5:cf:ec:96:97:8f:64:c4:de:1f:9f:97:c0:
1b:ed:81:1d:5a:4d:58:c0:32:f2:2f:49:04:a2:8b:
d9:c0:35:c1:a8:a8:7f:87:78:9d:44:df:6e:18:c5:
2f:15:07:bd:6f:08:dc:14:c1:af:26:aa:58:73:4d:
d1:9b:4e:ca:cb:59:81:f8:3f:db:f3:ca:16:bf:b3:
4d:61:2c:60:32:ed:e2:48:f7:aa:7b:c1:0c:fb:4d:
73:f6:89:f9:40:a5:b4:f0:c8:d1:db:71:9b:00:f9:
12:06:f5:94:6f:ad:3d:f1:7d:9f:50:bc:01:2c:d9:
fc:be:7b:8b:c2:b5:cf:cf:01:b5:f1:52:79:02:7c:
6d:3e:76:12:25:a4:ad:c9:1a:f2:a2:85:32:87:ce:
ea:8a:43:3a:ba:d9:f6:c7:a4:2f:82:fe:9d:82:14:
c9:fb:84:91:79:97:22:35:01:57:1f:e2:d0:7b:d2:
9d:19:ac:af:4c:6b:c5:1e:05:1b:a3:30:04:d4:88:
a4:30:08:01:1d:7e:a6:29:af:26:ff:16:f8:3f:a4:
fc:45:d6:12:24:81:88:9a:9b:2a:e5:fd:95:a8:12:
ba:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F3:30:85:EA:38:A9:35:7A:1A:81:8A:2E:FC:D6:6B:D6:CA:CD:93
X509v3 Authority Key Identifier:
keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132352e302f32342d3234203d3e203633363431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.74.125.0/24
Signature Algorithm: sha256WithRSAEncryption
22:07:4d:b1:6e:9e:fc:ae:2b:1f:f9:76:5e:90:82:4c:09:3e:
d5:16:9f:71:23:79:4e:32:fe:df:be:b8:49:3b:07:60:d1:1d:
30:1e:3d:ce:e4:78:ba:85:2d:e4:be:c4:95:ec:21:37:0b:d2:
81:19:21:31:7b:96:bd:a8:36:69:26:18:bb:dd:f7:20:d1:e9:
84:20:96:6d:d6:27:0b:f2:5f:ca:6e:da:c4:4b:b0:4c:ba:10:
3d:18:1a:12:d2:85:1a:79:ce:77:a5:45:a9:2c:e3:68:af:b9:
77:63:6a:52:7b:05:e0:a0:3a:c2:6a:e2:0d:e8:2d:38:d8:0f:
9b:87:a6:b7:7e:62:d1:75:1c:e2:6c:a5:a5:8e:fe:59:a8:c0:
d4:7f:f3:0b:e0:2a:76:95:ed:86:47:21:eb:5c:74:e7:ac:cf:
1c:23:5d:fa:80:5b:4b:fe:31:c4:46:06:22:4b:3b:be:02:15:
28:e6:54:0e:77:d5:a2:09:0e:a0:b5:85:22:54:d2:67:63:70:
00:36:b8:6e:e3:cf:55:12:36:cb:43:47:f1:01:f3:41:1d:b3:
37:cd:68:bc:a0:86:7a:c4:20:04:ef:e8:54:81:5c:83:ef:81:
70:5d:04:5e:5e:e2:ee:3b:2b:23:63:89:7e:cf:88:c9:f1:2a:
ae:5b:87:d9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:06:07 2026 by rpki-client