
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094488874987552769/1/3130332e35392e3134382e302f32342d3234203d3e20313531323533.roa
File: 3130332e35392e3134382e302f32342d3234203d3e20313531323533.roa (raw, json)
Hash identifier: gnukCDvsqNyCVACBmsNfTO0KD/jq92GKKJvSZ41/0Wk=
Subject key identifier: 38:64:79:47:7C:74:F4:21:88:3A:5F:39:68:7F:9C:50:4F:63:1E:2C
Certificate issuer: /CN=56F83115BDB2EC8491CB95EE1BC68BE786A3615A
Certificate serial: 089C9A489DD278CEC7D5109D01D8BE94191E5BD9
Authority key identifier: 56:F8:31:15:BD:B2:EC:84:91:CB:95:EE:1B:C6:8B:E7:86:A3:61:5A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/3130332e35392e3134382e302f32342d3234203d3e20313531323533.roa
Signing time: Thu 09 Apr 2026 05:22:29 +0000
ROA not before: Thu 09 Apr 2026 05:17:29 +0000
ROA not after: Thu 08 Apr 2027 05:22:29 +0000
asID: 151253
IP address blocks: 103.59.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.crl
rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 04:16:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:9c:9a:48:9d:d2:78:ce:c7:d5:10:9d:01:d8:be:94:19:1e:5b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56F83115BDB2EC8491CB95EE1BC68BE786A3615A
Validity
Not Before: Apr 9 05:17:29 2026 GMT
Not After : Apr 8 05:22:29 2027 GMT
Subject: CN=386479477C74F421883A5F39687F9C504F631E2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5d:ac:e0:86:e2:12:a1:4b:61:f1:43:4a:81:
af:c1:e4:37:3b:dc:ce:cd:ef:bb:70:ac:81:19:c3:
d6:a0:54:0c:42:dd:75:69:b7:2c:45:fb:18:00:f5:
eb:9d:ed:27:39:c8:64:50:c0:41:e0:01:d2:33:c8:
1a:2b:9e:0d:0e:b0:53:b0:22:b3:53:6d:f3:23:1a:
bd:33:6b:b9:1b:f2:da:ef:d2:a8:24:ac:b5:27:cb:
a1:f3:70:ca:a9:d1:7b:2c:7c:65:1f:df:3c:bd:ce:
9e:6d:51:81:80:63:ca:df:16:fe:b3:8d:1a:13:f1:
7e:c8:06:b9:08:3c:d5:7b:f4:9f:04:ba:14:bc:09:
0f:1c:a1:79:f3:21:2e:d7:a0:1a:89:aa:9c:e1:ac:
13:1d:e2:52:81:25:e0:7d:83:50:d9:ec:e9:6d:54:
ae:2e:39:79:e3:c9:b7:ff:31:43:ed:b6:cf:05:1b:
87:f7:52:73:7a:82:2d:e1:fb:28:91:eb:98:b0:36:
b2:9a:5c:9e:ec:7b:30:45:3d:be:fc:58:0a:46:c4:
92:e9:a5:ea:f1:e4:52:aa:4d:b6:57:ae:3a:53:d0:
92:a7:08:d9:18:de:60:2f:d6:6d:25:60:29:ee:90:
55:c7:4a:49:9e:9f:bc:5b:ee:b0:bc:89:02:c3:e6:
41:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:64:79:47:7C:74:F4:21:88:3A:5F:39:68:7F:9C:50:4F:63:1E:2C
X509v3 Authority Key Identifier:
keyid:56:F8:31:15:BD:B2:EC:84:91:CB:95:EE:1B:C6:8B:E7:86:A3:61:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/3130332e35392e3134382e302f32342d3234203d3e20313531323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.59.148.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:fe:32:ab:4c:b4:26:89:2a:21:bd:2e:e3:3d:f7:56:b4:c6:
bb:ee:7f:91:04:6e:1c:ea:5b:8b:c5:e2:d1:9a:e0:b7:f8:0a:
bf:d1:8e:ac:86:cb:e7:7c:9e:72:d0:ce:36:21:f0:c9:d6:69:
22:25:c9:ca:14:ff:fa:34:8b:4c:f5:40:01:0f:85:5f:56:97:
51:ac:cc:4c:15:21:7a:2d:87:d1:93:b5:d2:39:c9:c5:36:ac:
ce:66:4a:85:67:ed:25:c4:e2:bf:02:ee:b9:62:cc:fd:99:3b:
9d:09:3e:6f:18:65:67:99:07:24:25:85:16:2e:b2:8e:86:36:
17:0f:1d:41:5c:cd:95:30:51:84:51:82:a1:fe:b4:80:94:88:
76:da:51:67:69:b9:ef:ff:b7:27:9c:8a:0c:78:b8:d7:6e:45:
6f:21:e7:b3:12:82:68:c5:ab:ab:d7:8d:7c:3d:1e:fd:2d:13:
68:17:b7:89:62:7f:64:7f:72:ca:f7:5d:0d:77:cb:1b:e3:49:
75:00:0c:76:2c:e1:56:65:1f:8c:7d:2b:63:d9:d8:76:3e:d4:
cf:e3:91:c2:d5:3d:14:41:2e:a8:9e:9a:ae:4b:80:7d:88:2a:
08:e1:19:eb:4d:76:de:16:5f:1b:34:77:65:ad:c3:dc:d5:bc:
92:5c:48:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:26:34 2026 by rpki-client