
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094436162547744770/0/3130332e34342e3137302e302f32342d3234203d3e20313331353036.roa
File: 3130332e34342e3137302e302f32342d3234203d3e20313331353036.roa (raw, json)
Hash identifier: LyTXFqKRNwhhCE3pcqu+AnpDTnZtyaw1LlPN2uXIVL8=
Subject key identifier: 11:67:C0:BD:AD:5B:77:15:36:96:92:48:F4:50:47:D8:6A:13:32:26
Certificate issuer: /CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163
Certificate serial: 206713129D80F6781544CEF8053C0106F9169EC2
Authority key identifier: EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/3130332e34342e3137302e302f32342d3234203d3e20313331353036.roa
Signing time: Thu 09 Apr 2026 02:00:17 +0000
ROA not before: Thu 09 Apr 2026 01:55:17 +0000
ROA not after: Thu 08 Apr 2027 02:00:17 +0000
asID: 131506
IP address blocks: 103.44.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl
rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 12:29:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:67:13:12:9d:80:f6:78:15:44:ce:f8:05:3c:01:06:f9:16:9e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163
Validity
Not Before: Apr 9 01:55:17 2026 GMT
Not After : Apr 8 02:00:17 2027 GMT
Subject: CN=1167C0BDAD5B771536969248F45047D86A133226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dc:3e:08:0b:c1:d7:7d:2b:5c:87:de:b0:af:
3c:7c:77:ca:e8:ac:8a:cc:79:95:48:3e:24:a8:dc:
8d:99:16:4c:44:b3:7f:35:ca:63:9d:6c:a3:7d:ed:
41:86:b1:d3:da:0f:38:6b:a2:ef:94:db:f3:f3:7e:
07:f6:f9:cb:2a:ca:f7:9f:23:02:be:5d:8a:ff:4a:
77:11:51:d7:48:1a:74:0c:64:b7:64:1d:4a:c5:49:
50:b9:8e:b5:af:89:57:6f:03:6f:6b:30:fb:5e:b5:
44:91:0c:f3:7c:88:a2:06:17:a9:1f:df:c1:d2:10:
a7:86:c2:ef:ad:a7:d3:73:f2:57:24:15:b0:b0:b5:
a5:01:43:41:2b:43:91:c3:05:d4:19:b7:93:8a:0f:
49:0d:6a:31:dd:91:5a:68:98:dd:e9:5f:e4:ed:ce:
98:9a:29:ff:38:f5:88:a4:ed:f4:4b:e7:7b:0c:4f:
d5:4c:9d:aa:3a:b8:68:5c:b8:8d:0a:e9:fb:10:02:
22:3d:0a:64:a2:83:f1:3a:dd:0c:18:82:eb:c4:f3:
94:13:a4:cc:67:be:87:57:67:50:48:1e:6e:0b:90:
4c:49:20:33:ac:57:3d:f4:87:99:58:b7:7c:9f:21:
c0:5b:c5:20:9d:ba:18:cc:8a:05:7b:ad:ea:43:a3:
44:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:67:C0:BD:AD:5B:77:15:36:96:92:48:F4:50:47:D8:6A:13:32:26
X509v3 Authority Key Identifier:
keyid:EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/3130332e34342e3137302e302f32342d3234203d3e20313331353036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.44.170.0/24
Signature Algorithm: sha256WithRSAEncryption
78:71:8a:b7:c0:23:21:b0:b5:81:1c:94:17:95:a3:7c:6d:bc:
19:03:38:d2:f0:d0:b2:63:c7:f7:72:5d:a2:b8:75:d7:fe:48:
ee:0a:95:15:cc:b8:7e:a0:9e:8d:0f:b4:43:2d:02:9a:b5:69:
72:27:e8:82:26:b3:9e:ce:0c:c1:54:14:79:40:b0:45:4e:3c:
7a:4d:9e:70:c6:0d:2e:3c:1d:1a:66:5d:35:67:0e:90:1f:8c:
96:e3:3c:e1:e2:79:75:82:12:91:59:51:55:43:c0:07:89:c0:
32:c2:65:3d:9e:1d:07:b5:47:14:cc:d1:b5:09:be:10:1a:fd:
c7:f0:78:9b:76:ee:8c:34:65:8f:59:95:75:12:90:75:d2:8d:
59:14:55:6d:c8:08:fb:fa:a6:67:63:3e:c1:67:43:5b:66:00:
2e:62:c1:0a:b0:aa:fc:07:c2:8c:94:44:a4:66:c5:09:c2:96:
51:07:3a:bf:e0:cb:d3:39:de:b0:c9:a1:ac:c6:e6:f3:74:47:
80:cb:bc:33:db:f3:7b:b0:87:fe:a8:bf:13:cc:89:fa:33:f7:
a0:f0:fc:e6:1d:94:53:33:34:ec:10:8f:c5:fb:d3:a9:13:54:
f1:df:b0:fb:7e:e3:98:c3:b4:51:e8:50:9f:84:af:a8:e0:3b:
8d:00:bb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 15:20:49 2026 by rpki-client