
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094553714812780546/0/3130332e3133302e3133322e302f32322d3232203d3e2030.roa
File: 3130332e3133302e3133322e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier: FK6td7V83xHJimYsonXy6iGnkL28lgGxO82Pj8R5j/M=
Subject key identifier: 4B:BB:3D:64:DE:32:12:EF:32:00:D7:05:92:2A:33:B4:45:3D:F8:B5
Certificate issuer: /CN=5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C
Certificate serial: 7AB38AFAE400BA9CD810E18A83CC910B16F2E9E1
Authority key identifier: 5B:AF:D5:2D:9F:B4:A3:7C:7A:13:82:A8:EF:CC:19:AC:1A:C8:F4:8C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/3130332e3133302e3133322e302f32322d3232203d3e2030.roa
Signing time: Fri 10 Apr 2026 01:01:01 +0000
ROA not before: Fri 10 Apr 2026 00:56:01 +0000
ROA not after: Fri 09 Apr 2027 01:01:01 +0000
asID: 0
IP address blocks: 103.130.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl
rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 05:43:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:b3:8a:fa:e4:00:ba:9c:d8:10:e1:8a:83:cc:91:0b:16:f2:e9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C
Validity
Not Before: Apr 10 00:56:01 2026 GMT
Not After : Apr 9 01:01:01 2027 GMT
Subject: CN=4BBB3D64DE3212EF3200D705922A33B4453DF8B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d7:b1:2a:55:c7:5f:47:0b:40:28:37:ec:6f:
fe:0f:9c:ab:a0:47:39:35:80:42:2e:c7:96:f9:02:
a9:20:11:9b:41:a6:1c:37:e3:0a:d8:90:b5:c4:4c:
d8:18:e7:fb:fc:30:a3:85:3e:a5:3e:26:94:e6:47:
c0:be:5b:5b:2a:b4:66:a5:eb:7e:b0:83:ed:31:b6:
1c:a4:18:64:11:61:36:ef:cc:bd:cb:17:d9:ee:91:
c6:97:d0:b8:55:b4:7f:41:9d:9d:47:cd:3b:2f:0d:
d3:d4:aa:95:a1:6a:85:80:a0:96:e7:6b:8d:cf:f0:
df:80:e4:0b:ee:07:11:0e:29:22:6f:6e:18:db:7b:
1d:66:5b:bc:ee:f9:67:b9:f0:71:97:d3:1f:dc:2c:
68:d2:95:a3:6d:4d:e9:aa:39:1c:12:ee:60:12:b9:
bb:95:82:e8:e5:5b:fb:53:8d:86:65:2e:b8:ed:16:
a0:02:c0:a5:e0:85:2e:c4:69:1a:52:e0:3f:9f:d2:
e6:5f:6b:a9:b5:8e:5b:cd:40:56:c5:35:bc:e3:5c:
ea:e7:f5:42:0f:e0:d7:32:dd:1d:b1:7f:df:d3:8a:
44:f5:fe:07:d6:db:ad:57:3b:51:e7:92:60:29:f0:
ac:37:46:97:3b:59:a9:3c:aa:5d:5c:55:eb:b3:e1:
3a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BB:3D:64:DE:32:12:EF:32:00:D7:05:92:2A:33:B4:45:3D:F8:B5
X509v3 Authority Key Identifier:
keyid:5B:AF:D5:2D:9F:B4:A3:7C:7A:13:82:A8:EF:CC:19:AC:1A:C8:F4:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/3130332e3133302e3133322e302f32322d3232203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.130.132.0/22
Signature Algorithm: sha256WithRSAEncryption
36:0d:aa:6e:0d:76:87:05:39:d1:7d:8b:c4:4c:49:02:88:94:
74:72:e9:eb:02:94:78:d4:31:d8:0f:83:9b:5f:fa:ac:0f:f5:
29:1f:50:79:b0:03:a8:03:3e:3f:ea:78:95:08:09:3a:0d:e3:
4c:a3:e1:e4:3f:06:0e:39:97:d6:92:72:9c:e4:95:c0:63:10:
1b:43:78:75:c3:06:dd:0c:7a:47:73:cc:68:4b:31:83:48:a8:
ba:29:68:7b:69:56:a8:e2:46:db:d8:48:ca:a2:60:22:26:90:
89:41:6f:98:96:41:6c:43:92:5f:c3:40:dc:c2:58:4c:45:50:
7f:33:4f:08:a1:43:00:a3:f6:54:c9:ca:56:37:81:b2:b2:13:
a9:3e:44:76:32:73:83:d4:1e:4f:e0:7e:45:43:ed:8d:c4:fa:
b6:12:d3:8f:e3:a8:87:dc:df:ea:b5:d6:74:61:7a:47:57:32:
0c:e2:db:98:2b:7c:da:7d:ce:44:b9:b8:41:c2:08:6c:66:3c:
ce:11:1c:31:1b:36:9a:5f:08:5c:85:de:27:36:f3:f5:f2:ed:
d4:fd:6f:9e:8d:d0:62:03:d8:a0:8c:10:c3:39:2e:cd:5f:a4:
4a:69:d0:d6:fa:75:61:12:5f:7d:f6:ae:e3:fc:f9:f5:9f:cc:
c4:24:2a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:20 2026 by rpki-client