
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132362e302f32342d3234203d3e203137363231.roa
File: 3130332e37342e3132362e302f32342d3234203d3e203137363231.roa (raw, json)
Hash identifier: EGJAaBxjIy4ONiPWqI5J94xa1rMs57MaTy8N7KDqTtg=
Subject key identifier: 13:1E:5E:43:8B:BC:1B:CE:B8:EB:45:4C:15:23:08:2E:3B:94:1E:8B
Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Certificate serial: 479D3429C071ACE48613FB7886337223DDDA03EE
Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132362e302f32342d3234203d3e203137363231.roa
Signing time: Wed 22 Apr 2026 13:45:09 +0000
ROA not before: Wed 22 Apr 2026 13:40:09 +0000
ROA not after: Wed 21 Apr 2027 13:45:09 +0000
asID: 17621
IP address blocks: 103.74.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 10:43:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:9d:34:29:c0:71:ac:e4:86:13:fb:78:86:33:72:23:dd:da:03:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Validity
Not Before: Apr 22 13:40:09 2026 GMT
Not After : Apr 21 13:45:09 2027 GMT
Subject: CN=131E5E438BBC1BCEB8EB454C1523082E3B941E8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a2:6b:da:22:49:49:aa:72:10:dd:fc:33:40:
89:a1:6d:c8:28:33:7b:f6:33:f8:83:9a:1a:11:a0:
2f:9e:e2:b1:b6:43:79:e2:9a:35:ee:14:68:5e:93:
d2:17:43:2c:96:c6:3d:6f:68:2f:64:6c:75:12:cd:
bd:b2:ed:5e:c5:bf:65:f2:bd:53:0d:20:32:46:23:
b8:6a:8e:ca:98:00:df:aa:af:14:33:34:77:77:41:
9e:d9:2c:76:a4:06:13:0d:af:5d:59:a2:b5:d0:6b:
8d:3a:85:6c:78:4a:48:17:37:7e:a0:9d:f1:2b:d3:
a3:06:e8:66:b0:f3:15:23:d4:9b:7a:c2:83:39:5a:
7d:28:07:50:6e:68:fb:b5:72:23:a7:c1:52:f6:32:
91:5e:10:87:6d:d3:24:c6:0c:56:b5:c9:81:88:0d:
6e:cb:55:8d:bb:9c:52:8e:8e:ff:2a:e2:33:67:9c:
7c:c6:c2:dc:87:3f:57:53:e7:cf:bf:e7:00:f2:34:
3a:ee:f7:e9:b7:bb:4b:f2:b8:8a:70:d8:18:c1:93:
b2:f2:9c:42:93:41:b3:d9:a5:c2:9d:47:d2:2a:9a:
fb:5d:b3:5b:83:08:7f:e8:02:12:49:2f:6c:2a:2b:
62:5c:ca:c1:69:18:93:6a:0e:73:b0:be:7f:12:29:
bb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1E:5E:43:8B:BC:1B:CE:B8:EB:45:4C:15:23:08:2E:3B:94:1E:8B
X509v3 Authority Key Identifier:
keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132362e302f32342d3234203d3e203137363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.74.126.0/24
Signature Algorithm: sha256WithRSAEncryption
03:af:44:b7:bd:b0:57:c5:95:bf:f1:99:55:dd:b6:a6:84:8e:
83:3a:ad:64:4b:6b:8b:8b:0e:fe:7d:56:4d:1d:b7:03:ee:f4:
8d:72:74:56:44:91:f9:ff:4e:d2:99:8c:f2:e4:80:2a:65:19:
93:ee:6d:14:05:52:d7:e6:b6:d3:95:5d:b6:55:16:09:7b:11:
59:2e:fb:d6:eb:ad:f6:da:c7:7c:22:93:fc:af:4b:61:b2:e4:
8a:7b:b3:77:c2:5d:7d:7e:24:c2:5d:0f:84:79:10:bf:6f:7a:
e6:ee:15:4c:02:75:c0:4c:fb:3d:10:1d:7c:ed:9f:d9:7d:c2:
2a:9a:b5:26:2d:28:22:f9:9f:e3:ec:ca:00:86:40:df:1d:9e:
2d:38:b5:ee:79:4e:f6:ee:0d:f6:dd:86:74:75:ac:1e:07:05:
cb:82:39:d2:90:64:ec:11:34:01:c9:b2:bd:af:41:59:e0:93:
12:ff:11:ec:10:8b:25:ac:06:20:84:4f:f9:0d:c9:42:16:d1:
4e:4d:13:fb:8e:eb:53:a5:08:8e:0c:02:44:a4:f0:bd:79:e9:
fb:14:6c:7a:6f:be:3f:0a:ce:54:32:a7:27:78:38:cf:2a:a9:
42:69:a3:89:53:50:c2:0b:7c:d0:28:d5:de:8a:a6:5e:82:81:
4a:35:92:c4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:06:08 2026 by rpki-client