
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094151769384026113/0/3130332e3230332e3231362e302f32322d3232203d3e203633353631.roa
File: 3130332e3230332e3231362e302f32322d3232203d3e203633353631.roa (raw, json)
Hash identifier: 09DSZA+1bEtxsfBALT2vanyOFeWgc0ng9NXKOzy5OqU=
Subject key identifier: 97:DB:49:BD:69:4F:F0:E6:19:2F:C6:DD:B0:E5:1B:39:56:58:EB:4A
Certificate issuer: /CN=6741F95ED93FC3D5B5930C845F43187AE27BCF32
Certificate serial: 67904B7ADEE89D6AC5513D9D991BCE45A97BF866
Authority key identifier: 67:41:F9:5E:D9:3F:C3:D5:B5:93:0C:84:5F:43:18:7A:E2:7B:CF:32
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6741F95ED93FC3D5B5930C845F43187AE27BCF32.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094151769384026113/0/3130332e3230332e3231362e302f32322d3232203d3e203633353631.roa
Signing time: Fri 10 Apr 2026 01:41:23 +0000
ROA not before: Fri 10 Apr 2026 01:36:23 +0000
ROA not after: Fri 09 Apr 2027 01:41:23 +0000
asID: 63561
IP address blocks: 103.203.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094151769384026113/0/6741F95ED93FC3D5B5930C845F43187AE27BCF32.crl
rsync://rpki-rps.cnnic.cn/repo/A1094151769384026113/0/6741F95ED93FC3D5B5930C845F43187AE27BCF32.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6741F95ED93FC3D5B5930C845F43187AE27BCF32.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:90:4b:7a:de:e8:9d:6a:c5:51:3d:9d:99:1b:ce:45:a9:7b:f8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6741F95ED93FC3D5B5930C845F43187AE27BCF32
Validity
Not Before: Apr 10 01:36:23 2026 GMT
Not After : Apr 9 01:41:23 2027 GMT
Subject: CN=97DB49BD694FF0E6192FC6DDB0E51B395658EB4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b5:76:df:c1:e7:1d:58:46:ec:7d:a5:80:4a:
fa:4e:db:dc:27:48:2c:c1:0d:51:e8:2a:66:c0:c4:
96:57:e8:e6:6c:1f:dd:74:ee:46:f7:d2:be:40:5a:
a6:28:26:7b:56:0e:00:b8:35:33:15:f9:da:73:f6:
78:fb:5f:eb:0c:c3:76:6d:4e:70:bc:64:dd:39:65:
28:91:72:fa:ee:55:20:74:6e:f8:20:fa:e8:f6:67:
5d:79:62:e5:03:69:61:c3:4d:64:97:2c:97:4f:e0:
85:3c:65:f8:c7:8b:38:08:f5:96:64:5f:1e:cd:60:
45:c1:24:bb:9e:df:34:0d:0a:ce:8e:50:2f:e6:ed:
47:8a:d5:13:a2:ac:70:99:74:18:fa:6a:42:91:ff:
dc:0a:e7:01:ce:9e:27:5f:b1:e2:7f:b8:65:3d:66:
9b:a5:92:74:32:f7:64:24:0a:9c:d3:b8:8f:d9:14:
c0:6f:da:7f:36:7d:9e:72:93:7c:bf:f7:4b:c5:e2:
f1:7c:25:12:32:46:0c:d2:cf:14:70:89:37:7a:bc:
1a:1a:26:07:77:63:f7:c8:3d:e8:d3:be:de:0a:03:
1e:79:b2:17:0e:21:63:f7:af:6a:f0:88:fc:cb:93:
36:28:30:63:7b:1e:fe:f5:09:ec:dc:4b:48:f4:d2:
9e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DB:49:BD:69:4F:F0:E6:19:2F:C6:DD:B0:E5:1B:39:56:58:EB:4A
X509v3 Authority Key Identifier:
keyid:67:41:F9:5E:D9:3F:C3:D5:B5:93:0C:84:5F:43:18:7A:E2:7B:CF:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094151769384026113/0/6741F95ED93FC3D5B5930C845F43187AE27BCF32.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6741F95ED93FC3D5B5930C845F43187AE27BCF32.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094151769384026113/0/3130332e3230332e3231362e302f32322d3232203d3e203633353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.203.216.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:ce:5c:61:3e:79:6f:cc:e0:f3:02:7a:f2:43:48:92:de:b3:
fe:01:66:80:39:d3:b7:60:7e:3b:2c:e1:7b:02:39:53:99:54:
32:b2:f9:ad:f7:e4:06:93:9c:60:ce:2f:e8:db:f9:8c:37:81:
70:2c:cd:e5:5a:51:3f:86:41:c3:e0:df:bd:35:e6:5a:54:ec:
3b:6a:24:72:8c:e0:46:4e:00:56:13:7c:40:fc:62:6a:c6:fa:
5b:af:45:c8:26:53:60:40:23:32:45:a4:05:1b:0a:5a:5b:a5:
26:a2:6c:68:89:8a:6b:e7:fa:d7:da:d2:42:d1:45:0e:82:a6:
66:00:fc:76:e7:f5:5f:30:be:85:16:eb:a2:a1:de:1e:6e:d1:
82:d5:26:00:7f:ab:cf:56:c4:a3:83:02:fe:7a:99:b9:7e:0e:
81:cd:3a:a2:b8:ff:87:6f:14:44:cb:ad:94:20:f8:c6:1c:ca:
f2:12:1c:71:e8:99:6b:70:aa:53:6d:c4:66:35:18:9f:d5:b1:
dd:06:0f:92:11:08:28:f9:a4:88:be:22:f8:64:fc:ff:de:b8:
1b:92:bc:c9:cd:7a:d3:30:8b:12:9e:ba:e7:99:cd:03:7b:1e:
1f:dd:60:4d:ba:66:bd:c3:03:39:3d:80:06:f9:f2:aa:f6:72:
52:1b:4e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 13:53:12 2026 by rpki-client