
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094436162547744770/0/3130332e3135362e3138362e302f32332d3233203d3e20313331353036.roa
File: 3130332e3135362e3138362e302f32332d3233203d3e20313331353036.roa (raw, json)
Hash identifier: 1JZmCTUiVlI9g97MG2LUDDqwRiW30/dY2H1cmpnp/7k=
Subject key identifier: 0F:64:CE:FC:CE:A8:FE:CC:9A:9D:A2:64:B2:B7:9D:9F:BE:B2:71:FE
Certificate issuer: /CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163
Certificate serial: 0F0FB1BB6059F7460273A25A0BAB9D277BC71052
Authority key identifier: EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/3130332e3135362e3138362e302f32332d3233203d3e20313331353036.roa
Signing time: Thu 09 Apr 2026 02:00:18 +0000
ROA not before: Thu 09 Apr 2026 01:55:18 +0000
ROA not after: Thu 08 Apr 2027 02:00:18 +0000
asID: 131506
IP address blocks: 103.156.186.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl
rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 12:29:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:0f:b1:bb:60:59:f7:46:02:73:a2:5a:0b:ab:9d:27:7b:c7:10:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163
Validity
Not Before: Apr 9 01:55:18 2026 GMT
Not After : Apr 8 02:00:18 2027 GMT
Subject: CN=0F64CEFCCEA8FECC9A9DA264B2B79D9FBEB271FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:23:ac:b9:81:da:29:90:1b:1f:f2:6a:03:4a:
b4:d2:82:3f:f7:8d:f0:f5:72:b9:3d:4f:b9:68:9a:
24:41:bc:9d:e1:0c:e1:23:37:0f:7d:43:d4:4d:dc:
be:09:9f:47:59:01:3d:a3:78:be:35:e7:b4:63:68:
72:1b:3e:07:26:af:8f:d5:bb:d5:53:67:89:0f:e0:
c2:19:e5:21:c4:db:22:d2:fa:32:33:a4:09:7a:10:
89:73:75:9d:e4:23:e7:67:a1:10:23:23:5d:18:8f:
40:0c:fb:2e:c1:28:70:21:f3:b4:31:1c:5f:91:de:
f1:97:e8:fc:86:41:ed:4d:08:49:58:e5:83:bc:15:
d3:15:c6:9e:d5:6e:0f:be:95:0a:50:13:fd:b9:26:
19:00:a2:45:f6:08:8b:c1:dd:b5:c8:cf:5a:8f:45:
d9:a7:eb:40:46:65:94:47:52:41:9a:f8:ce:5d:a3:
b4:86:73:3d:32:f9:d3:9b:99:66:9e:89:86:8d:d7:
75:c6:df:2a:0d:b6:65:6e:65:4a:a0:87:50:55:98:
9c:58:04:f2:fa:5e:5d:e4:85:cc:bc:9d:fd:05:0d:
49:a0:b8:fd:9f:c0:62:54:e8:1d:54:1e:8c:32:bf:
77:c7:d6:63:d4:e2:86:11:50:a1:fb:c7:8c:c4:d0:
bf:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:64:CE:FC:CE:A8:FE:CC:9A:9D:A2:64:B2:B7:9D:9F:BE:B2:71:FE
X509v3 Authority Key Identifier:
keyid:EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/3130332e3135362e3138362e302f32332d3233203d3e20313331353036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.156.186.0/23
Signature Algorithm: sha256WithRSAEncryption
18:09:fa:1b:65:49:9c:fb:a1:62:f4:b7:9b:51:3a:ed:82:19:
fd:dd:7c:e5:f8:5e:b3:56:91:ee:0f:42:54:97:98:b4:b9:72:
38:0b:b2:41:03:2d:92:b6:08:4f:a1:21:38:2f:96:ac:81:d7:
72:bb:29:9c:77:2d:77:67:d6:60:5c:b7:76:5d:2e:cb:a4:7d:
d7:eb:15:bf:fa:b3:58:fa:97:13:d0:4d:52:d6:79:4f:ae:4c:
50:83:a3:05:2a:64:5b:f2:66:46:ea:00:d4:5d:25:7e:0e:70:
4c:69:e5:3a:e4:04:15:e6:81:d5:30:97:96:e5:69:ca:a3:ac:
63:d6:b2:cc:10:46:0e:c5:db:ed:f2:c7:16:10:c2:00:19:bd:
3f:7d:97:5b:f6:0b:43:2a:f3:6e:ab:e3:2f:14:4c:94:ad:d0:
3a:09:80:eb:dc:b5:fc:5c:c4:a1:23:bf:05:66:9b:9f:cd:25:
15:4f:57:54:3e:d2:56:7d:48:a0:b2:5e:b0:5d:f7:70:da:b4:
22:8a:b3:69:92:04:15:da:6e:b9:cd:61:37:8a:98:83:1c:a2:
d9:32:5a:60:5b:b3:8a:d3:70:ac:db:ec:57:05:d7:fc:42:a9:
2b:5d:ac:0a:78:0a:14:20:cf:bd:3e:0f:53:ba:3e:97:f9:cb:
55:fe:2f:de
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUDw+xu2BZ90YCc6JaC6udJ3vHEFIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUVBRjIxRjIxRjk1MURGRkNFOEVCOUNGMjk2RjhGOTI0
RDZENTE2MzAeFw0yNjA0MDkwMTU1MThaFw0yNzA0MDgwMjAwMThaMDMxMTAvBgNV
BAMTKDBGNjRDRUZDQ0VBOEZFQ0M5QTlEQTI2NEIyQjc5RDlGQkVCMjcxRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvI6y5gdopkBsf8moDSrTSgj/3
jfD1crk9T7lomiRBvJ3hDOEjNw99Q9RN3L4Jn0dZAT2jeL4157RjaHIbPgcmr4/V
u9VTZ4kP4MIZ5SHE2yLS+jIzpAl6EIlzdZ3kI+dnoRAjI10Yj0AM+y7BKHAh87Qx
HF+R3vGX6PyGQe1NCElY5YO8FdMVxp7Vbg++lQpQE/25JhkAokX2CIvB3bXIz1qP
Rdmn60BGZZRHUkGa+M5do7SGcz0y+dObmWaeiYaN13XG3yoNtmVuZUqgh1BVmJxY
BPL6Xl3khcy8nf0FDUmguP2fwGJU6B1UHowyv3fH1mPU4oYRUKH7x4zE0L93AgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUD2TO/M6o/syanaJksredn76ycf4wHwYDVR0j
BBgwFoAU7q8h8h+VHf/OjrnPKW+Pkk1tUWMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDQzNjE2MjU0Nzc0NDc3MC8wL0VFQUYyMUYyMUY5NTFERkZDRThFQjlDRjI5NkY4
RjkyNEQ2RDUxNjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRUVBRjIxRjIxRjk1MURGRkNFOEVCOUNGMjk2RjhGOTI0RDZENTE2My5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDk0NDM2MTYyNTQ3NzQ0NzcwLzAvMzEzMDMzMmUz
MTM1MzYyZTMxMzgzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzMzMTM1MzAz
Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWecujANBgkqhkiG9w0BAQsFAAOCAQEAGAn6G2VJnPuhYvS3
m1E67YIZ/d185fhes1aR7g9CVJeYtLlyOAuyQQMtkrYIT6EhOC+WrIHXcrspnHct
d2fWYFy3dl0uy6R91+sVv/qzWPqXE9BNUtZ5T65MUIOjBSpkW/JmRuoA1F0lfg5w
TGnlOuQEFeaB1TCXluVpyqOsY9ayzBBGDsXb7fLHFhDCABm9P32XW/YLQyrzbqvj
LxRMlK3QOgmA69y1/FzEoSO/BWabn80lFU9XVD7SVn1IoLJesF33cNq0IoqzaZIE
Fdpuuc1hN4qYgxyi2TJaYFuzitNwrNvsVwXX/EKpK12sCngKFCDPvT4PU7o+l/nL
Vf4v3g==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:20:53 2026 by rpki-client