
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094526146340454402/0/3130332e3131362e3133392e302f32342d3234203d3e20313332353336.roa
File: 3130332e3131362e3133392e302f32342d3234203d3e20313332353336.roa (raw, json)
Hash identifier: hYlgJEXB7Dd9KGHTO3cLjmWdOWvw6dSpXmtbfRhgLq0=
Subject key identifier: 48:53:3F:53:D0:E1:F1:D9:4E:DB:FE:E8:03:80:89:0F:EF:B7:6C:F7
Certificate issuer: /CN=F21B617F46E5DD760AE56A21B6890185B53C70E0
Certificate serial: 6AF13793FEF8F03081BA0FA93ED701E4C34325A2
Authority key identifier: F2:1B:61:7F:46:E5:DD:76:0A:E5:6A:21:B6:89:01:85:B5:3C:70:E0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/3130332e3131362e3133392e302f32342d3234203d3e20313332353336.roa
Signing time: Thu 09 Apr 2026 07:48:20 +0000
ROA not before: Thu 09 Apr 2026 07:43:20 +0000
ROA not after: Thu 08 Apr 2027 07:48:20 +0000
asID: 132536
IP address blocks: 103.116.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.crl
rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 07:16:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:f1:37:93:fe:f8:f0:30:81:ba:0f:a9:3e:d7:01:e4:c3:43:25:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F21B617F46E5DD760AE56A21B6890185B53C70E0
Validity
Not Before: Apr 9 07:43:20 2026 GMT
Not After : Apr 8 07:48:20 2027 GMT
Subject: CN=48533F53D0E1F1D94EDBFEE80380890FEFB76CF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:92:0c:26:35:68:79:2a:2b:3c:a3:66:d2:44:
7e:06:66:6d:74:f7:dc:a6:35:62:c8:a6:f9:1e:26:
8e:4b:e6:6f:bd:46:4e:99:98:10:23:0b:d6:8b:a9:
88:97:78:51:57:38:dd:8b:bd:93:98:9f:bb:00:32:
18:66:da:6b:a8:4f:75:3c:14:24:9f:cd:4c:98:55:
a3:7c:eb:c7:cf:e6:84:55:8e:f7:08:0f:3d:1f:e8:
f9:69:6e:8a:48:b2:77:04:3f:74:6d:37:f8:e4:c8:
cb:e4:cc:f1:07:11:59:8e:c5:9e:b8:b1:a9:a0:a4:
74:5f:ee:07:58:b7:6e:4b:69:8d:b2:8c:c1:74:d4:
a6:4e:87:23:ac:19:9a:35:89:06:8c:33:0a:5c:46:
4e:a4:1a:15:72:94:71:30:a0:3b:0b:b5:98:1f:77:
8e:07:c1:ad:51:e6:d4:91:a3:f8:7d:c1:0f:f3:47:
0d:a3:72:60:c0:32:44:79:4c:88:02:9e:3d:f9:08:
af:b5:39:a3:29:0b:87:37:9c:82:50:e4:bb:47:a9:
a8:e9:94:96:15:78:60:89:7f:3c:8b:e5:0d:c0:4f:
06:89:35:1c:3e:f0:00:fc:21:77:87:48:f0:75:6c:
ce:d0:14:14:07:0a:3a:57:15:ab:92:69:42:b2:9d:
ea:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:53:3F:53:D0:E1:F1:D9:4E:DB:FE:E8:03:80:89:0F:EF:B7:6C:F7
X509v3 Authority Key Identifier:
keyid:F2:1B:61:7F:46:E5:DD:76:0A:E5:6A:21:B6:89:01:85:B5:3C:70:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/3130332e3131362e3133392e302f32342d3234203d3e20313332353336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.116.139.0/24
Signature Algorithm: sha256WithRSAEncryption
83:3c:60:08:a7:90:1f:42:19:8f:ce:4d:4b:80:31:2c:bf:3d:
78:b5:d5:d1:da:3c:d3:dc:0f:ad:e3:df:76:10:fc:cf:13:6a:
e4:39:73:1a:89:81:45:05:a5:ed:f2:1c:c5:4d:ee:85:d7:ee:
7a:ad:25:c6:c8:d9:bb:51:99:c7:20:7e:7f:54:7e:64:ac:14:
ee:7a:95:24:1f:c3:d7:32:ba:fc:ff:33:42:8b:86:36:4c:74:
74:dc:f1:1d:68:9c:da:44:0c:70:6e:43:9c:62:10:cf:58:78:
68:e8:21:98:bb:0f:8d:14:0e:84:ee:e8:fa:75:2b:cd:63:4e:
59:e4:a3:c8:4c:f0:3c:8a:09:ea:9b:57:55:65:73:c0:0d:6e:
8f:e3:7e:f8:6d:3a:bc:e0:08:09:e3:84:89:93:d5:70:94:6b:
9d:d1:e4:2b:1a:12:67:c5:cc:81:78:47:8b:31:6c:80:ce:82:
71:f9:ca:b1:b3:80:d7:64:ac:bf:c5:db:47:e5:f0:6c:3a:5b:
3b:9f:85:b7:a0:ee:8a:7c:56:17:c6:d7:c1:c9:04:61:84:74:
ce:13:ca:36:8d:b4:dd:11:0e:88:5e:e2:1f:87:4f:d4:cb:10:
80:df:46:87:1c:0b:09:d2:8d:61:96:8d:9b:04:cd:00:aa:87:
7b:6a:c5:6a
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUavE3k/748DCBug+pPtcB5MNDJaIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjIxQjYxN0Y0NkU1REQ3NjBBRTU2QTIxQjY4OTAxODVC
NTNDNzBFMDAeFw0yNjA0MDkwNzQzMjBaFw0yNzA0MDgwNzQ4MjBaMDMxMTAvBgNV
BAMTKDQ4NTMzRjUzRDBFMUYxRDk0RURCRkVFODAzODA4OTBGRUZCNzZDRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbkgwmNWh5Kis8o2bSRH4GZm10
99ymNWLIpvkeJo5L5m+9Rk6ZmBAjC9aLqYiXeFFXON2LvZOYn7sAMhhm2muoT3U8
FCSfzUyYVaN868fP5oRVjvcIDz0f6PlpbopIsncEP3RtN/jkyMvkzPEHEVmOxZ64
samgpHRf7gdYt25LaY2yjMF01KZOhyOsGZo1iQaMMwpcRk6kGhVylHEwoDsLtZgf
d44Hwa1R5tSRo/h9wQ/zRw2jcmDAMkR5TIgCnj35CK+1OaMpC4c3nIJQ5LtHqajp
lJYVeGCJfzyL5Q3ATwaJNRw+8AD8IXeHSPB1bM7QFBQHCjpXFauSaUKyneqxAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUSFM/U9Dh8dlO2/7oA4CJD++3bPcwHwYDVR0j
BBgwFoAU8hthf0bl3XYK5WohtokBhbU8cOAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDUyNjE0NjM0MDQ1NDQwMi8wL0YyMUI2MTdGNDZFNURENzYwQUU1NkEyMUI2ODkw
MTg1QjUzQzcwRTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjIxQjYxN0Y0NkU1REQ3NjBBRTU2QTIxQjY4OTAxODVCNTNDNzBFMC5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDk0NTI2MTQ2MzQwNDU0NDAyLzAvMzEzMDMzMmUz
MTMxMzYyZTMxMzMzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMjM1MzMz
Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGd0izANBgkqhkiG9w0BAQsFAAOCAQEAgzxgCKeQH0IZj85N
S4AxLL89eLXV0do809wPrePfdhD8zxNq5DlzGomBRQWl7fIcxU3uhdfueq0lxsjZ
u1GZxyB+f1R+ZKwU7nqVJB/D1zK6/P8zQouGNkx0dNzxHWic2kQMcG5DnGIQz1h4
aOghmLsPjRQOhO7o+nUrzWNOWeSjyEzwPIoJ6ptXVWVzwA1uj+N++G06vOAICeOE
iZPVcJRrndHkKxoSZ8XMgXhHizFsgM6CcfnKsbOA12Ssv8XbR+XwbDpbO5+Ft6Du
inxWF8bXwckEYYR0zhPKNo203REOiF7iH4dP1MsQgN9GhxwLCdKNYZaNmwTNAKqH
e2rFag==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:56:11 2026 by rpki-client