
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347126785/0/3130332e3131362e3132302e302f32342d3234203d3e2034383437.roa
File: 3130332e3131362e3132302e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier: zB7FMCFhHyOWYUyT241bOpU68Hl2jbAwsIx3PIajOso=
Subject key identifier: 69:32:C7:31:0D:52:8B:89:C5:44:3D:BA:AC:F9:0E:E7:68:71:A6:16
Certificate issuer: /CN=191E76D74421148B42FA2A7F663270AE7FAD25F9
Certificate serial: 0673429009C854002E14F31A9E06D90AED8E36BA
Authority key identifier: 19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/3130332e3131362e3132302e302f32342d3234203d3e2034383437.roa
Signing time: Mon 27 Apr 2026 01:23:51 +0000
ROA not before: Mon 27 Apr 2026 01:18:51 +0000
ROA not after: Mon 26 Apr 2027 01:23:51 +0000
asID: 4847
IP address blocks: 103.116.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 02:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:73:42:90:09:c8:54:00:2e:14:f3:1a:9e:06:d9:0a:ed:8e:36:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191E76D74421148B42FA2A7F663270AE7FAD25F9
Validity
Not Before: Apr 27 01:18:51 2026 GMT
Not After : Apr 26 01:23:51 2027 GMT
Subject: CN=6932C7310D528B89C5443DBAACF90EE76871A616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f9:28:e4:99:e4:fd:cc:94:ce:b8:79:0e:20:
ed:42:60:d9:f4:9e:5e:d4:6b:24:d2:ba:67:f1:33:
a4:1a:a6:ff:74:46:f7:0e:1c:de:3e:d1:3a:61:eb:
d0:48:cc:e0:33:f9:35:ab:e6:34:02:c9:5c:9c:7b:
25:c5:4c:1a:c2:6e:33:e0:d1:63:c9:c9:df:a5:ec:
8e:0d:1b:65:7e:e0:42:33:51:4a:9c:34:79:87:fb:
55:e2:b1:bd:e1:43:38:ca:24:00:55:49:46:c5:cd:
f0:0a:56:8e:59:35:e5:b2:e8:6a:2d:65:53:84:91:
bb:c4:9e:dc:e8:85:25:17:49:7b:38:af:c3:4a:87:
95:9e:86:01:7d:56:8c:ce:d7:31:f0:5a:78:8f:0b:
23:8c:4f:07:95:97:61:51:f1:08:97:57:ff:81:6b:
01:71:67:76:15:c6:da:17:9f:e3:e9:45:6b:4a:61:
d5:93:d7:50:d9:03:18:33:48:78:04:e5:af:77:29:
17:59:bd:1e:14:16:ad:86:c5:50:87:74:74:a3:7d:
22:14:13:52:2e:c5:53:7c:7c:00:87:57:04:6e:ed:
22:a7:0f:b2:40:89:7c:0a:e3:f6:2a:6e:c2:f2:ae:
46:27:ab:f9:65:11:22:39:c1:24:de:4d:78:64:a4:
2b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:32:C7:31:0D:52:8B:89:C5:44:3D:BA:AC:F9:0E:E7:68:71:A6:16
X509v3 Authority Key Identifier:
keyid:19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/3130332e3131362e3132302e302f32342d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.116.120.0/24
Signature Algorithm: sha256WithRSAEncryption
97:52:be:e9:ec:fc:bd:c3:d6:11:be:7f:91:e9:a3:f4:19:05:
21:75:e9:36:29:b4:62:91:11:56:53:20:95:db:6c:bd:63:ff:
9e:4e:13:6c:f8:24:8a:0b:b3:1e:c2:98:6a:e9:18:f9:28:ab:
2c:84:aa:c2:55:ae:1a:a0:5a:36:43:a3:ed:99:63:31:54:66:
6f:a4:a4:63:33:a9:db:d9:6d:22:0c:57:98:54:22:ee:62:7b:
47:d8:c7:2f:f0:7f:23:51:59:16:10:76:b3:9b:30:c5:40:3e:
c4:c0:16:bb:4d:75:64:45:f4:63:5d:24:e5:64:2e:ef:c4:29:
ae:5b:b4:d2:e7:ce:0f:6c:07:7d:ca:78:ca:e8:d0:6a:af:48:
f2:20:7f:20:0e:8e:e9:47:05:36:a4:03:c4:a0:85:f8:a3:d1:
af:e8:91:e9:10:d9:fd:3a:60:8e:2e:90:d9:73:ac:64:cb:ad:
16:87:4b:bd:a5:e4:08:3a:f6:4c:a7:25:ae:65:13:dd:94:ea:
b9:01:30:bf:d7:7e:82:24:80:8b:a8:b2:77:dc:fa:b9:66:43:
b0:6b:38:e3:ef:50:b8:b2:95:38:72:f4:4f:bc:81:85:97:99:
83:d7:14:da:51:7b:ce:28:44:8d:fc:04:bb:7c:2f:cf:07:52:
40:21:c7:8c
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUBnNCkAnIVAAuFPMangbZCu2ONrowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkxRTc2RDc0NDIxMTQ4QjQyRkEyQTdGNjYzMjcwQUU3
RkFEMjVGOTAeFw0yNjA0MjcwMTE4NTFaFw0yNzA0MjYwMTIzNTFaMDMxMTAvBgNV
BAMTKDY5MzJDNzMxMEQ1MjhCODlDNTQ0M0RCQUFDRjkwRUU3Njg3MUE2MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6+SjkmeT9zJTOuHkOIO1CYNn0
nl7UayTSumfxM6Qapv90RvcOHN4+0Tph69BIzOAz+TWr5jQCyVyceyXFTBrCbjPg
0WPJyd+l7I4NG2V+4EIzUUqcNHmH+1Xisb3hQzjKJABVSUbFzfAKVo5ZNeWy6Got
ZVOEkbvEntzohSUXSXs4r8NKh5WehgF9VozO1zHwWniPCyOMTweVl2FR8QiXV/+B
awFxZ3YVxtoXn+PpRWtKYdWT11DZAxgzSHgE5a93KRdZvR4UFq2GxVCHdHSjfSIU
E1IuxVN8fACHVwRu7SKnD7JAiXwK4/YqbsLyrkYnq/llESI5wSTeTXhkpCvlAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUaTLHMQ1Si4nFRD26rPkO52hxphYwHwYDVR0j
BBgwFoAUGR5210QhFItC+ip/ZjJwrn+tJfkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MjMzMDM0NzEyNjc4NS8wLzE5MUU3NkQ3NDQyMTE0OEI0MkZBMkE3RjY2MzI3
MEFFN0ZBRDI1RjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTkxRTc2RDc0NDIxMTQ4QjQyRkEyQTdGNjYzMjcwQUU3RkFEMjVGOS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4MjMzMDM0NzEyNjc4NS8wLzMxMzAzMzJlMzEz
MTM2MmUzMTMyMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzQzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGd0eDANBgkqhkiG9w0BAQsFAAOCAQEAl1K+6ez8vcPWEb5/kemj9BkF
IXXpNim0YpERVlMgldtsvWP/nk4TbPgkiguzHsKYaukY+SirLISqwlWuGqBaNkOj
7ZljMVRmb6SkYzOp29ltIgxXmFQi7mJ7R9jHL/B/I1FZFhB2s5swxUA+xMAWu011
ZEX0Y10k5WQu78Qprlu00ufOD2wHfcp4yujQaq9I8iB/IA6O6UcFNqQDxKCF+KPR
r+iR6RDZ/Tpgji6Q2XOsZMutFodLvaXkCDr2TKclrmUT3ZTquQEwv9d+giSAi6iy
d9z6uWZDsGs44+9QuLKVOHL0T7yBhZeZg9cU2lF7zihEjfwEu3wvzwdSQCHHjA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 13:45:33 2026 by rpki-client