
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094526146340454402/0/3130332e3131362e3133382e302f32332d3233203d3e2034383337.roa
File: 3130332e3131362e3133382e302f32332d3233203d3e2034383337.roa (raw, json)
Hash identifier: u8YheGaowfeKbZ8F2KkIOif91xdF76xMFEgwStwZtes=
Subject key identifier: 61:DD:25:A8:25:EE:24:6F:65:84:EA:6E:24:7F:CE:EA:5B:30:DB:85
Certificate issuer: /CN=F21B617F46E5DD760AE56A21B6890185B53C70E0
Certificate serial: 758C205510D9EF402770A9CC115D9BD095438E7B
Authority key identifier: F2:1B:61:7F:46:E5:DD:76:0A:E5:6A:21:B6:89:01:85:B5:3C:70:E0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/3130332e3131362e3133382e302f32332d3233203d3e2034383337.roa
Signing time: Thu 09 Apr 2026 07:48:20 +0000
ROA not before: Thu 09 Apr 2026 07:43:20 +0000
ROA not after: Thu 08 Apr 2027 07:48:20 +0000
asID: 4837
IP address blocks: 103.116.138.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.crl
rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 07:16:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:8c:20:55:10:d9:ef:40:27:70:a9:cc:11:5d:9b:d0:95:43:8e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F21B617F46E5DD760AE56A21B6890185B53C70E0
Validity
Not Before: Apr 9 07:43:20 2026 GMT
Not After : Apr 8 07:48:20 2027 GMT
Subject: CN=61DD25A825EE246F6584EA6E247FCEEA5B30DB85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d3:5e:55:e5:56:cc:08:32:9d:b9:d2:96:2e:
63:1b:51:17:0b:4f:8e:98:f9:eb:7e:4a:5d:05:3f:
94:01:b2:87:45:51:a1:1e:b7:b4:04:b9:17:bf:20:
dd:09:6e:93:8b:6a:6a:c4:62:45:7c:d0:2d:d1:a7:
52:3e:4d:e2:cb:55:65:51:4f:61:49:41:31:d7:1d:
21:44:2f:92:7b:d4:76:99:bc:42:7c:e1:86:00:90:
98:8a:13:5f:86:ad:ab:1a:0e:a5:5b:18:c0:34:c2:
81:20:8b:e5:57:42:28:dc:a0:01:07:44:75:81:5f:
c4:d3:14:f4:24:bf:24:cc:ac:a7:87:a7:06:0c:59:
66:34:fb:df:cb:58:f8:89:ed:26:7e:d5:32:7c:f7:
4c:24:b5:d3:57:3d:49:d0:31:4e:81:0e:82:23:d6:
66:f5:07:22:e3:7b:8e:5c:6f:58:d1:56:b2:e7:ba:
f2:98:2d:5d:18:6b:5f:32:42:7e:e3:92:5b:cf:19:
ad:1a:83:1d:c1:cd:bf:00:01:d3:97:77:6e:f7:ab:
14:11:d2:38:55:5d:e1:b4:9d:3f:d0:0e:70:cf:3b:
a6:e5:bb:23:bf:b4:d1:25:cb:d2:42:86:8a:82:76:
b3:71:18:1d:7f:4c:7c:cb:30:c0:be:46:68:fa:db:
e9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DD:25:A8:25:EE:24:6F:65:84:EA:6E:24:7F:CE:EA:5B:30:DB:85
X509v3 Authority Key Identifier:
keyid:F2:1B:61:7F:46:E5:DD:76:0A:E5:6A:21:B6:89:01:85:B5:3C:70:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/3130332e3131362e3133382e302f32332d3233203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.116.138.0/23
Signature Algorithm: sha256WithRSAEncryption
50:88:19:23:b1:ef:2e:08:c7:ea:c1:35:0b:75:2c:d6:d5:c6:
48:38:d0:82:7b:c5:6c:ab:d9:b7:04:63:ae:d3:c1:32:c4:9d:
00:64:18:fc:b7:c6:2f:a3:63:f2:1b:a1:06:3c:01:95:10:9a:
9b:ca:a0:89:dd:88:13:6c:ea:5b:19:27:3b:8b:e1:30:c4:57:
03:95:32:06:40:15:01:9d:72:05:c2:c7:a5:e4:23:16:9e:d4:
62:f9:de:be:38:7c:6e:f8:84:42:e9:df:f6:1e:a2:2e:72:73:
5a:29:bc:38:70:91:db:63:99:91:c7:c5:ee:1a:03:67:2d:c2:
c6:a3:28:1a:cf:ab:05:6b:57:52:b0:61:f7:91:44:df:8a:ea:
87:9d:1f:54:d5:ed:74:90:59:5e:2a:db:a8:ac:9d:ec:ce:8f:
36:a0:04:e0:0b:d9:10:e9:fc:44:b4:83:9d:e5:ac:8f:2b:8d:
a0:01:e5:b7:c2:dd:e1:29:e9:96:ca:32:0b:4e:e6:f3:05:76:
6d:fc:bd:1a:2d:8a:6d:b1:45:5b:f5:cd:47:77:3e:63:1a:7b:
57:f1:d6:ca:4e:f5:c8:8f:b1:63:d0:b2:a2:0d:bc:db:12:89:
da:76:ee:25:6a:81:71:85:3d:6a:80:01:0a:cc:86:b7:84:05:
93:a6:93:96
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:20 2026 by rpki-client