
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094436162547744770/0/3130332e34342e3136382e302f32342d3234203d3e20313331353036.roa
File: 3130332e34342e3136382e302f32342d3234203d3e20313331353036.roa (raw, json)
Hash identifier: t2qYpUmXz6KqLk4TNdstb4nvK4+aZPP8aJubVqNa0yI=
Subject key identifier: AD:00:8D:2B:2E:50:3A:A3:FB:8A:3C:14:3D:BE:D3:84:D7:76:9F:DA
Certificate issuer: /CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163
Certificate serial: 1C8B8581AC8B63CC5DB04E2D268C3446F3E1EC65
Authority key identifier: EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/3130332e34342e3136382e302f32342d3234203d3e20313331353036.roa
Signing time: Thu 09 Apr 2026 02:00:18 +0000
ROA not before: Thu 09 Apr 2026 01:55:18 +0000
ROA not after: Thu 08 Apr 2027 02:00:18 +0000
asID: 131506
IP address blocks: 103.44.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl
rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 12:29:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:8b:85:81:ac:8b:63:cc:5d:b0:4e:2d:26:8c:34:46:f3:e1:ec:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163
Validity
Not Before: Apr 9 01:55:18 2026 GMT
Not After : Apr 8 02:00:18 2027 GMT
Subject: CN=AD008D2B2E503AA3FB8A3C143DBED384D7769FDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f8:48:85:6f:15:c2:8d:92:99:7e:16:1f:15:
fb:98:ed:a4:96:e2:7a:f5:55:ab:2c:28:3f:e0:64:
ce:43:ff:95:97:2b:c9:59:90:d9:8f:b3:71:95:6a:
47:e7:64:82:b3:26:7c:11:d0:66:05:7b:f4:90:fb:
50:ab:00:b6:0a:c4:0e:37:0a:02:f2:6c:0f:9a:b3:
42:07:6d:1b:76:21:01:4e:55:ac:e3:20:e3:d4:97:
cc:3a:9f:64:4a:ea:54:70:ab:82:2f:8f:34:07:e0:
aa:c7:79:39:fe:7c:0d:34:3e:2e:ad:16:29:51:44:
d0:c3:eb:51:56:d2:2a:b4:e4:31:63:fb:6b:b3:f9:
44:b5:50:27:f0:2f:3f:87:ae:8d:03:38:08:30:ba:
0f:87:e2:24:c3:91:fd:87:72:16:e1:2b:6e:6d:e2:
fb:ea:b6:de:22:7d:70:ef:6d:98:ea:1e:0d:35:77:
35:c2:6d:f5:74:51:77:7a:66:19:e4:12:19:17:5a:
36:54:f2:e0:bc:26:e2:38:d1:27:ca:6c:7a:67:13:
1a:d0:33:38:ec:b1:73:42:fe:01:9b:39:45:07:8c:
da:d8:38:bb:ca:a1:38:dd:17:d5:35:ad:0d:0f:20:
c2:f7:84:89:bb:23:87:ee:ac:ef:5e:22:52:d8:f5:
75:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:00:8D:2B:2E:50:3A:A3:FB:8A:3C:14:3D:BE:D3:84:D7:76:9F:DA
X509v3 Authority Key Identifier:
keyid:EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/3130332e34342e3136382e302f32342d3234203d3e20313331353036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.44.168.0/24
Signature Algorithm: sha256WithRSAEncryption
76:c0:b6:b0:46:a8:70:f0:a3:64:e4:89:e6:db:af:84:c0:0d:
68:49:e2:20:c3:43:d4:43:94:89:13:3d:68:fc:92:c5:37:dd:
cf:35:cb:d9:b1:90:6d:eb:a8:ff:24:a4:6c:63:e8:cf:14:3e:
7b:8c:8a:ea:21:e9:b9:ec:26:0a:43:f9:4a:6d:98:3b:20:fb:
5f:2d:24:a0:2e:dc:e4:df:7a:e5:3d:2e:ee:59:63:2a:03:61:
25:c8:76:aa:0b:75:43:02:0f:fb:49:f9:ee:b0:e4:78:66:5f:
44:2d:b4:a2:0e:d6:c7:16:98:9d:52:3d:81:59:11:8b:c2:cb:
28:99:0e:eb:9c:b2:ce:e2:cb:fd:0b:6a:11:94:64:9e:56:c0:
30:2f:bc:dd:91:3f:9b:be:46:da:8e:0b:44:f9:de:6d:12:59:
5e:a1:3c:bc:36:9c:74:37:b5:38:3e:e1:08:8b:dc:b7:60:0c:
65:39:df:78:77:d0:e5:48:91:03:f1:e4:66:d2:ae:1b:cc:b1:
ba:ed:b5:08:9b:b5:d7:21:49:31:cf:ae:1f:83:62:0b:d6:49:
f6:9c:5e:bc:09:a7:56:dc:4f:d1:be:00:5b:5d:68:d0:af:12:
25:51:38:7d:3d:fd:45:52:66:75:1c:8b:8c:1f:36:9a:ce:d6:
42:12:11:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 15:21:51 2026 by rpki-client