
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577990146/0/3130332e34312e302e302f32322d3232203d3e20313331353734.roa
File: 3130332e34312e302e302f32322d3232203d3e20313331353734.roa (raw, json)
Hash identifier: 9/QDE3gE/sRHkLVbxl56Vq/WuOTZKU48oTSiZX8DXK8=
Subject key identifier: 61:BB:FA:61:8D:55:F2:BD:53:1F:EB:0A:DF:82:C2:D8:0B:9E:53:0E
Certificate issuer: /CN=9684E4B95F47A986892F9930EF9D9E453227439F
Certificate serial: 18E91175A14C010C2D01B0D63741EDFCB919859D
Authority key identifier: 96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/3130332e34312e302e302f32322d3232203d3e20313331353734.roa
Signing time: Wed 20 May 2026 05:29:04 +0000
ROA not before: Wed 20 May 2026 05:24:04 +0000
ROA not after: Wed 19 May 2027 05:29:04 +0000
asID: 131574
IP address blocks: 103.41.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 07:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:e9:11:75:a1:4c:01:0c:2d:01:b0:d6:37:41:ed:fc:b9:19:85:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9684E4B95F47A986892F9930EF9D9E453227439F
Validity
Not Before: May 20 05:24:04 2026 GMT
Not After : May 19 05:29:04 2027 GMT
Subject: CN=61BBFA618D55F2BD531FEB0ADF82C2D80B9E530E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e8:20:ca:b0:03:51:58:66:0f:13:3d:14:e7:
73:fa:24:79:92:c4:92:2b:c5:e3:db:9a:99:d6:13:
8e:63:39:7b:a8:0e:2e:8c:b6:2c:f0:fa:f4:f9:a2:
b9:5c:b2:50:a5:43:86:36:52:93:7a:bc:fe:3b:35:
14:ea:89:90:0f:ec:88:c2:74:58:8d:e4:f1:d6:20:
a9:8e:78:b4:22:f4:11:b1:ca:b9:b6:2d:ce:b3:b4:
1d:67:73:04:f0:b1:5e:18:5a:04:3f:4d:88:1e:25:
07:ff:b2:14:a0:99:35:16:cd:26:49:4e:a1:59:62:
4b:be:4e:e4:7e:41:6d:4c:18:13:f5:d1:80:09:55:
f1:60:e8:f9:ae:1a:04:4b:9e:99:42:49:fe:3c:08:
4b:c7:70:f8:b8:2c:57:cd:12:37:31:4e:1f:e7:0e:
e2:71:6b:b6:60:49:a3:e9:c5:ef:74:55:c3:2b:72:
c0:83:f3:08:53:ba:55:f3:60:c4:f3:b5:07:62:25:
57:03:e9:66:e5:95:b6:98:a0:90:8b:5f:20:2d:11:
9a:67:fc:ee:7d:e3:c7:c3:b2:e3:ca:81:a2:96:25:
4e:1a:63:52:5f:84:17:f9:99:ac:70:a8:1c:a1:47:
40:d4:29:ab:97:5a:4e:57:3b:9b:44:66:db:a0:17:
31:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BB:FA:61:8D:55:F2:BD:53:1F:EB:0A:DF:82:C2:D8:0B:9E:53:0E
X509v3 Authority Key Identifier:
keyid:96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/3130332e34312e302e302f32322d3232203d3e20313331353734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.41.0.0/22
Signature Algorithm: sha256WithRSAEncryption
13:53:22:08:a7:de:b9:a4:f4:7a:bc:04:a1:f1:2a:86:ba:dd:
81:d1:19:11:ea:a0:d1:4c:27:2e:c6:eb:cb:5c:17:4a:c1:c3:
58:0d:9a:b9:b1:5d:31:6b:30:37:64:bb:20:c4:a6:56:5b:1d:
73:82:0b:90:b0:57:ca:0e:54:17:7b:bf:2b:d2:2f:2f:3b:47:
49:3f:db:89:d7:98:18:af:5f:f6:ed:58:80:fe:42:fe:67:c1:
d0:c1:f0:1e:82:2d:55:37:fd:9d:b3:73:62:01:4f:d7:2d:9a:
2d:4b:da:46:16:01:84:f9:11:32:b4:b0:a5:5b:af:c1:5c:db:
88:74:17:c8:c3:09:bc:e0:16:f5:b2:4c:18:72:69:f6:a5:e8:
28:c0:94:2c:27:82:e0:52:5c:c6:50:3d:d9:1c:63:2b:af:85:
22:66:78:1a:04:ba:08:1a:1f:c9:c8:70:db:ed:92:ee:07:71:
d5:f1:c0:59:26:63:c9:85:53:95:ca:3e:7e:ff:c9:68:c3:ec:
4d:e2:cc:a5:79:de:ce:a0:84:90:11:0d:11:3a:fa:3c:38:92:
20:3b:30:6f:4c:68:4e:a1:4f:ab:78:4b:0f:8c:03:0d:91:54:
92:cf:70:df:6d:a1:59:d8:15:3d:82:05:c3:5d:01:26:fb:2a:
61:8d:80:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:38 2026 by rpki-client