
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091362986968219649/0/3130332e3136362e35322e302f32332d3234203d3e20313534333231.roa
File: 3130332e3136362e35322e302f32332d3234203d3e20313534333231.roa (raw, json)
Hash identifier: 0C8XcZ1s9U/Zhi7pGBjei7dFvtqtfA78ZraGcnjIorM=
Subject key identifier: 64:8C:90:C6:B0:0B:CA:BF:51:04:7E:54:4D:E8:50:AE:7F:76:18:FA
Certificate issuer: /CN=9B5519650F0653145F5D42879890BE1251C8F463
Certificate serial: 63F4156C48A725EECDCD160D84C082424A41B402
Authority key identifier: 9B:55:19:65:0F:06:53:14:5F:5D:42:87:98:90:BE:12:51:C8:F4:63
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B5519650F0653145F5D42879890BE1251C8F463.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/3130332e3136362e35322e302f32332d3234203d3e20313534333231.roa
Signing time: Thu 02 Apr 2026 09:19:35 +0000
ROA not before: Thu 02 Apr 2026 09:14:35 +0000
ROA not after: Thu 01 Apr 2027 09:19:35 +0000
asID: 154321
IP address blocks: 103.166.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.crl
rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B5519650F0653145F5D42879890BE1251C8F463.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 07 Apr 2026 03:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:f4:15:6c:48:a7:25:ee:cd:cd:16:0d:84:c0:82:42:4a:41:b4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B5519650F0653145F5D42879890BE1251C8F463
Validity
Not Before: Apr 2 09:14:35 2026 GMT
Not After : Apr 1 09:19:35 2027 GMT
Subject: CN=648C90C6B00BCABF51047E544DE850AE7F7618FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dc:48:40:67:0e:03:3c:a3:52:e1:eb:23:e7:
b2:c2:55:c0:88:e2:f4:96:22:a4:b4:e7:ae:68:14:
7b:3b:f7:23:7f:eb:94:65:f4:58:eb:d5:74:37:a8:
87:71:58:47:29:78:08:16:65:a3:d8:66:7d:02:d9:
18:09:f5:3b:05:61:cc:1b:39:04:2b:33:b7:97:c8:
7d:cc:dd:87:3b:ec:4a:1d:4a:44:fd:a6:5c:e2:26:
72:2c:75:5a:ea:36:61:7f:2f:ab:a6:9c:9f:23:c3:
81:7c:06:ec:b5:0b:bd:bc:f3:d8:b7:a8:47:8c:fd:
8b:6e:ae:f2:94:74:6b:ed:1c:19:45:22:1d:bd:44:
38:8d:85:d4:8d:c4:af:79:5f:8a:00:9e:73:10:74:
c6:d1:0f:68:28:9d:ff:88:fa:45:99:fb:33:89:6a:
31:9a:03:32:b5:e5:d9:24:23:0e:a8:62:20:52:ab:
a6:d3:e7:3d:1a:61:d0:3b:03:96:a2:8e:c7:89:c9:
05:ad:f7:b3:37:e6:4f:82:2a:70:bc:f4:2c:16:72:
f9:d8:0d:4f:fb:61:87:05:7c:b3:dc:b3:34:9e:4e:
2c:66:8b:a6:58:47:fc:6e:53:22:4f:9a:8d:b6:57:
e5:29:40:9f:29:fc:a3:ac:79:ab:96:4d:6b:9f:0f:
ee:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8C:90:C6:B0:0B:CA:BF:51:04:7E:54:4D:E8:50:AE:7F:76:18:FA
X509v3 Authority Key Identifier:
keyid:9B:55:19:65:0F:06:53:14:5F:5D:42:87:98:90:BE:12:51:C8:F4:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B5519650F0653145F5D42879890BE1251C8F463.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/3130332e3136362e35322e302f32332d3234203d3e20313534333231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.166.52.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:1e:fb:fa:9c:c6:fe:09:e0:48:16:f9:e7:9c:83:2e:cb:b4:
7c:c5:0f:c5:38:c5:b6:66:c7:df:46:8d:3e:f5:b4:bc:96:e4:
2d:6c:93:fc:ef:48:36:16:84:a8:4f:1c:18:9b:f9:6f:6b:b5:
b1:be:c9:4c:cb:0e:6f:ec:53:3a:a6:df:5a:69:0d:d8:9c:41:
c7:c8:bf:b7:e3:f8:33:83:d5:a9:0b:ee:0c:23:78:6e:b3:29:
35:00:10:96:4d:99:3d:32:93:4e:ea:0a:0d:71:d9:e9:ae:ea:
de:48:6a:cb:d0:bd:8a:6a:e2:09:95:bf:b3:15:4e:bf:77:96:
19:29:6b:4a:70:d9:96:f7:f4:7c:bf:21:8d:77:ba:15:ae:9d:
b5:12:f0:3a:6d:6a:cf:f5:8d:46:34:eb:3a:49:4f:15:1f:a2:
4e:d6:21:87:94:a5:84:26:61:92:a6:e3:4c:1b:38:09:94:ca:
7b:9c:c0:26:f1:0b:48:99:6d:62:01:bd:10:e4:94:cf:d9:f0:
ef:36:a8:38:72:ef:b1:dc:bd:4c:cc:a1:49:82:4b:31:14:2a:
58:9c:d7:08:f6:74:85:67:9f:04:a2:3b:4d:c2:4b:84:7f:dd:
9e:a7:76:e1:d8:40:ef:48:cd:b8:09:f6:f2:1b:b5:5a:9c:19:
88:27:12:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:09:56 2026 by rpki-client