
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1069195700119535618/0/3130332e36312e3137362e302f32322d3234203d3e20333939313338.roa
File: 3130332e36312e3137362e302f32322d3234203d3e20333939313338.roa (raw, json)
Hash identifier: lfso3iitwNXOWpDhN+K/LYRuYJB9b0kiLHNKSA+teTM=
Subject key identifier: 3A:A7:B7:BB:F0:14:02:FA:AB:2C:C1:B6:88:09:E8:58:65:68:60:EB
Certificate issuer: /CN=AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341
Certificate serial: 37D0323032A47689FC76C9FF74B5A84BBC9620D0
Authority key identifier: AB:4A:AC:80:49:BF:A0:F4:F2:78:AC:22:38:5C:A9:AB:CA:B9:A3:41
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/3130332e36312e3137362e302f32322d3234203d3e20333939313338.roa
Signing time: Thu 29 Jan 2026 10:03:20 +0000
ROA not before: Thu 29 Jan 2026 09:58:20 +0000
ROA not after: Thu 28 Jan 2027 10:03:20 +0000
asID: 399138
IP address blocks: 103.61.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.crl
rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Feb 2026 11:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:d0:32:30:32:a4:76:89:fc:76:c9:ff:74:b5:a8:4b:bc:96:20:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341
Validity
Not Before: Jan 29 09:58:20 2026 GMT
Not After : Jan 28 10:03:20 2027 GMT
Subject: CN=3AA7B7BBF01402FAAB2CC1B68809E858656860EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:46:b4:79:2a:cf:d0:2b:21:c3:0f:0b:08:d8:
60:f2:f7:10:0a:78:52:03:0f:cd:69:fa:2c:6c:2f:
e7:5c:47:2e:22:17:66:70:f3:53:aa:d2:ba:0e:cc:
73:a8:1e:5d:06:33:6a:3d:94:95:74:1f:17:1a:88:
b1:a8:9d:ae:77:90:5d:ca:cc:5e:0c:fc:b1:97:be:
69:a0:b9:64:79:fe:8d:4a:73:b8:99:c6:2a:d9:19:
7a:ee:92:60:4c:d4:19:5f:17:a6:d7:8a:02:1e:06:
15:69:e6:75:35:1e:fa:4b:29:97:c1:c5:ca:3a:3a:
81:b4:e6:ea:af:4a:56:d1:91:ce:88:97:40:ee:33:
d7:f4:13:2e:3b:82:46:e9:82:7f:7f:97:d9:2b:c3:
30:87:5a:2a:1e:ee:4f:33:fd:42:a0:44:ed:de:52:
04:10:d5:33:c1:bc:6e:07:5f:7d:7d:c6:33:91:60:
10:54:07:fd:3d:e2:3a:1b:5d:f3:07:8b:bd:87:95:
45:fe:0c:60:51:68:38:8a:d7:76:45:52:9c:07:ec:
49:61:53:32:43:2f:a2:aa:a4:13:42:51:6f:a7:16:
7d:0b:60:9f:bb:5e:fd:c9:b6:53:72:a7:fa:ab:bd:
60:74:2f:d1:a2:29:d2:43:fd:e6:5e:39:47:4c:7d:
89:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A7:B7:BB:F0:14:02:FA:AB:2C:C1:B6:88:09:E8:58:65:68:60:EB
X509v3 Authority Key Identifier:
keyid:AB:4A:AC:80:49:BF:A0:F4:F2:78:AC:22:38:5C:A9:AB:CA:B9:A3:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/3130332e36312e3137362e302f32322d3234203d3e20333939313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.61.176.0/22
Signature Algorithm: sha256WithRSAEncryption
61:d5:45:13:a3:17:9b:46:82:41:e8:5f:bb:d6:bf:3a:b9:5d:
73:2e:bb:0d:18:5e:65:e2:c0:62:f8:ae:f3:c1:82:2b:9c:33:
b8:c0:3d:8f:2e:c1:d5:5e:d5:36:f4:52:13:df:90:e3:0f:b2:
34:33:cc:d1:3b:53:e8:4c:a5:cf:78:18:b1:cd:9d:ee:8c:2f:
3b:2a:1d:fc:17:29:dd:b0:93:2e:d1:40:28:90:f9:c6:23:7b:
32:ae:1f:2e:94:74:e5:53:6a:2c:d8:28:a8:e6:03:7a:ab:71:
0b:cd:21:57:c0:49:b5:66:70:9c:e5:ba:e8:aa:ad:31:66:5c:
f1:9d:4f:fa:b7:c3:a3:39:20:b4:e6:04:ea:22:7d:2b:17:d9:
7e:25:a0:be:ac:73:f5:d5:04:91:d0:8a:c9:00:65:fe:83:eb:
19:f8:c0:a4:56:48:04:c5:1f:a0:2d:6d:c8:6b:31:fb:ed:52:
ac:78:86:b3:c2:8b:30:84:57:7f:39:b1:52:32:d6:88:df:c7:
04:c5:b0:95:13:d1:be:25:06:ab:8f:b9:f9:34:25:ce:94:4e:
74:d7:82:aa:30:f5:73:73:28:19:df:9c:a0:0e:83:9f:78:4e:
0c:a7:94:f6:f1:96:65:b4:eb:50:95:a2:55:9d:bb:5c:38:d9:
ed:a4:3d:c6
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUN9AyMDKkdon8dsn/dLWoS7yWINAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUI0QUFDODA0OUJGQTBGNEYyNzhBQzIyMzg1Q0E5QUJD
QUI5QTM0MTAeFw0yNjAxMjkwOTU4MjBaFw0yNzAxMjgxMDAzMjBaMDMxMTAvBgNV
BAMTKDNBQTdCN0JCRjAxNDAyRkFBQjJDQzFCNjg4MDlFODU4NjU2ODYwRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDURrR5Ks/QKyHDDwsI2GDy9xAK
eFIDD81p+ixsL+dcRy4iF2Zw81Oq0roOzHOoHl0GM2o9lJV0HxcaiLGona53kF3K
zF4M/LGXvmmguWR5/o1Kc7iZxirZGXrukmBM1BlfF6bXigIeBhVp5nU1HvpLKZfB
xco6OoG05uqvSlbRkc6Il0DuM9f0Ey47gkbpgn9/l9krwzCHWioe7k8z/UKgRO3e
UgQQ1TPBvG4HX319xjORYBBUB/094jobXfMHi72HlUX+DGBRaDiK13ZFUpwH7Elh
UzJDL6KqpBNCUW+nFn0LYJ+7Xv3JtlNyp/qrvWB0L9GiKdJD/eZeOUdMfYmvAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUOqe3u/AUAvqrLMG2iAnoWGVoYOswHwYDVR0j
BBgwFoAUq0qsgEm/oPTyeKwiOFypq8q5o0EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
OTE5NTcwMDExOTUzNTYxOC8wL0FCNEFBQzgwNDlCRkEwRjRGMjc4QUMyMjM4NUNB
OUFCQ0FCOUEzNDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUI0QUFDODA0OUJGQTBGNEYyNzhBQzIyMzg1Q0E5QUJDQUI5QTM0MS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjkxOTU3MDAxMTk1MzU2MTgvMC8zMTMwMzMyZTM2
MzEyZTMxMzczNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMzMzkzOTMxMzMzOC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmc9sDANBgkqhkiG9w0BAQsFAAOCAQEAYdVFE6MXm0aCQehfu9a/
Orldcy67DRheZeLAYviu88GCK5wzuMA9jy7B1V7VNvRSE9+Q4w+yNDPM0TtT6Eyl
z3gYsc2d7owvOyod/Bcp3bCTLtFAKJD5xiN7Mq4fLpR05VNqLNgoqOYDeqtxC80h
V8BJtWZwnOW66KqtMWZc8Z1P+rfDozkgtOYE6iJ9KxfZfiWgvqxz9dUEkdCKyQBl
/oPrGfjApFZIBMUfoC1tyGsx++1SrHiGs8KLMIRXfzmxUjLWiN/HBMWwlRPRviUG
q4+5+TQlzpROdNeCqjD1c3MoGd+coA6Dn3hODKeU9vGWZbTrUJWiVZ27XDjZ7aQ9
xg==
-----END CERTIFICATE-----
Generated at Mon Feb 23 03:36:37 2026 by rpki-client