
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132362e302f32342d3234203d3e203633363431.roa
File: 3130332e37342e3132362e302f32342d3234203d3e203633363431.roa (raw, json)
Hash identifier: KL7bRmG8O/icy7cgHjYLW4wImUvq9kc+mgA/2lQll2M=
Subject key identifier: 3F:E6:10:87:5D:FB:09:43:02:9D:08:70:C6:BA:82:CF:2D:D2:A3:90
Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Certificate serial: 6447C59004BC898FC7680417A80FD2360635AA9D
Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132362e302f32342d3234203d3e203633363431.roa
Signing time: Wed 22 Apr 2026 13:45:09 +0000
ROA not before: Wed 22 Apr 2026 13:40:09 +0000
ROA not after: Wed 21 Apr 2027 13:45:09 +0000
asID: 63641
IP address blocks: 103.74.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 10:43:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:47:c5:90:04:bc:89:8f:c7:68:04:17:a8:0f:d2:36:06:35:aa:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Validity
Not Before: Apr 22 13:40:09 2026 GMT
Not After : Apr 21 13:45:09 2027 GMT
Subject: CN=3FE610875DFB0943029D0870C6BA82CF2DD2A390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:10:08:ad:24:93:29:bc:20:15:1d:6f:18:5b:
84:53:4e:31:43:cb:b4:bd:ce:a7:1d:2f:62:83:1e:
aa:a0:2a:0a:05:9d:2b:ba:45:ab:7a:cb:db:fc:62:
4f:61:d0:33:a7:ab:69:66:5c:08:44:3c:6a:3b:bd:
97:e6:89:44:cc:44:5c:7e:7f:5a:88:9b:45:77:4a:
0d:03:a9:86:b8:d9:d3:11:b2:27:89:24:92:9e:f7:
59:9c:89:f7:30:54:ad:96:35:4e:dd:34:8c:25:aa:
a0:a3:a2:2f:ce:af:33:0b:57:cf:5c:84:3b:b2:e5:
51:c6:1e:dd:1c:5d:d2:f7:4b:55:ce:fb:2a:e7:26:
59:f2:b0:bf:a4:5a:89:4e:e0:71:4a:45:30:1b:1a:
d4:a1:aa:e2:df:d8:4e:3f:1e:2f:ea:94:6f:76:08:
d1:7b:ff:95:42:e1:6b:e1:0c:24:e1:00:d1:bf:c5:
7f:c3:c0:c9:0c:07:b4:c4:91:a2:1e:14:5e:60:f3:
41:9c:bb:91:65:dc:1c:38:b7:6e:35:80:7c:de:b8:
ee:5f:51:b4:ae:2b:b3:16:25:c6:db:8a:df:ac:d5:
3f:6a:29:d0:13:02:47:16:e6:49:ed:e5:dc:54:74:
ce:b4:f0:32:64:ed:6c:fc:fa:e4:5c:36:c9:05:0c:
b4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E6:10:87:5D:FB:09:43:02:9D:08:70:C6:BA:82:CF:2D:D2:A3:90
X509v3 Authority Key Identifier:
keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132362e302f32342d3234203d3e203633363431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.74.126.0/24
Signature Algorithm: sha256WithRSAEncryption
63:85:bb:77:91:9f:9f:af:96:04:9c:78:57:78:d1:9c:06:e1:
53:e3:1a:68:ce:c0:0b:a1:0e:56:f3:1b:27:ed:75:1b:9c:15:
02:1c:58:84:98:26:74:dc:81:1a:4b:13:ad:bb:1e:22:21:28:
7a:43:0a:fb:9c:77:ee:4d:93:4b:87:c9:83:51:af:eb:c0:32:
ea:f9:9c:10:52:30:0c:0b:07:fd:85:88:72:ad:94:23:cd:a8:
12:a9:02:56:b2:1a:9f:8c:2c:0d:a8:48:96:96:7b:be:b6:d6:
83:bf:8a:f2:3b:aa:a6:bb:29:08:8b:76:0e:25:08:28:0e:39:
f2:77:56:90:01:a7:37:99:76:6e:97:6d:2b:79:14:a3:32:2f:
9d:0b:d3:90:b0:49:3b:b8:d2:f5:0a:0e:5a:3c:ae:55:fa:a1:
51:c6:dc:aa:7d:56:f1:a5:53:d6:a9:ab:c4:18:67:85:c1:41:
bc:48:30:73:23:cf:b2:be:87:a8:9d:d1:6b:b9:c5:0c:31:46:
d1:26:92:c1:7f:34:26:d4:f9:58:9a:ed:53:93:8d:a1:2b:eb:
9f:d1:70:cb:6c:a2:5c:30:94:b7:02:a5:0a:91:4a:72:f5:82:
14:77:e6:d6:9e:9d:43:d7:35:8b:cc:c6:26:17:7b:45:0d:07:
bd:09:9b:db
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:06:07 2026 by rpki-client