
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094436162547744770/0/3130332e34342e3137312e302f32342d3234203d3e20313331353036.roa
File: 3130332e34342e3137312e302f32342d3234203d3e20313331353036.roa (raw, json)
Hash identifier: dDVB95GOdlKiem0RPeoJ+o5H0W6WPtueIHcgrjv/yyU=
Subject key identifier: 89:EE:72:D5:79:13:CC:F6:76:57:E6:84:CF:55:03:69:27:7E:D7:67
Certificate issuer: /CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163
Certificate serial: 4D3193EBE0CB750BC03D03AEB00124B58D6AD3B6
Authority key identifier: EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/3130332e34342e3137312e302f32342d3234203d3e20313331353036.roa
Signing time: Thu 09 Apr 2026 02:00:17 +0000
ROA not before: Thu 09 Apr 2026 01:55:17 +0000
ROA not after: Thu 08 Apr 2027 02:00:17 +0000
asID: 131506
IP address blocks: 103.44.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl
rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 19:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:31:93:eb:e0:cb:75:0b:c0:3d:03:ae:b0:01:24:b5:8d:6a:d3:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163
Validity
Not Before: Apr 9 01:55:17 2026 GMT
Not After : Apr 8 02:00:17 2027 GMT
Subject: CN=89EE72D57913CCF67657E684CF550369277ED767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5d:46:0e:2f:8b:75:45:53:75:9b:06:dd:51:
6f:e0:6c:16:ba:98:45:d3:1a:f4:ad:10:c7:d9:64:
70:9e:ff:63:49:98:f9:f4:7a:8c:8f:77:85:a4:72:
d7:e2:77:de:65:68:00:66:66:56:84:5d:ed:86:dc:
b5:a0:42:a7:5e:0b:b0:15:bc:13:49:ed:77:00:8c:
fc:57:d9:f9:5f:8f:65:23:49:a6:1c:ce:9e:39:64:
5e:33:2a:e0:0e:9c:12:5f:a8:8f:f6:5b:16:3a:5a:
78:ea:60:b2:cb:7d:85:fd:9f:d8:38:6a:73:f8:96:
b7:0a:bf:03:c6:55:8a:33:b4:0e:46:f8:ee:7c:a2:
02:29:33:81:04:40:d1:4e:59:80:a3:70:5a:f5:a4:
4e:59:dd:1d:32:e2:e9:37:82:fa:46:39:2d:9a:8f:
27:f0:06:f3:fc:b2:2e:14:bb:c7:5b:6b:6a:e7:ac:
48:fb:91:aa:12:ac:15:e4:e9:6c:d8:09:92:c7:3e:
f3:3e:7a:1e:8b:6d:1b:22:44:46:ea:cd:c2:f9:8f:
67:3c:47:e3:57:aa:2a:e4:47:2f:7f:7c:97:55:7d:
fd:55:df:2a:f4:88:41:6d:c1:9a:75:ec:90:dc:38:
67:2b:2a:44:49:46:36:7f:91:a0:92:04:e0:2b:a8:
85:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EE:72:D5:79:13:CC:F6:76:57:E6:84:CF:55:03:69:27:7E:D7:67
X509v3 Authority Key Identifier:
keyid:EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/3130332e34342e3137312e302f32342d3234203d3e20313331353036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.44.171.0/24
Signature Algorithm: sha256WithRSAEncryption
97:70:c8:14:c7:24:e3:93:70:02:46:53:3e:79:96:6d:e6:8f:
3c:68:f7:35:4e:43:b6:5d:1f:7b:ba:71:31:34:be:a4:3b:9b:
9b:2e:2a:2e:a0:2c:8d:49:10:4d:1c:f9:76:de:14:a4:ba:6e:
fb:f5:49:88:ad:71:3b:18:14:54:bf:60:8d:74:5a:fd:61:a2:
7a:0e:dd:3f:3d:88:e9:8b:cb:6b:ab:41:b2:e3:94:9d:0e:83:
be:9e:8e:7f:ef:dd:69:52:f7:ff:d5:d8:68:f7:8c:fb:e7:5f:
86:c2:84:39:02:05:fd:f3:30:26:46:c3:41:8f:3c:bf:87:a3:
05:eb:96:69:87:2c:48:3c:34:a8:9d:47:8b:91:85:e3:0f:43:
51:d5:cf:c2:7b:45:14:d8:4c:c8:bc:bf:fe:7b:b0:dc:0c:62:
13:88:37:f9:e4:fe:48:6a:ef:53:99:3f:8b:c7:0f:69:00:9e:
c1:e1:30:b2:95:76:2d:77:6c:8f:06:4f:a4:96:91:a8:1d:ff:
90:cc:67:18:49:3a:e1:0c:8d:c1:51:a1:39:29:73:96:d8:a9:
96:16:44:03:80:b9:23:e3:6c:c4:17:00:11:f7:92:a4:52:71:
55:d5:85:54:6e:da:a8:6b:e9:8a:26:90:d7:36:c6:42:a1:8b:
4c:2a:05:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:13 2026 by rpki-client