
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3130332e3231392e39322e302f32342d3234203d3e20313335303631.roa
File: 3130332e3231392e39322e302f32342d3234203d3e20313335303631.roa (raw, json)
Hash identifier: Zm6SUGGZ44NxLfUMlHLxC99JvamjFo1lnXkrUliD9dw=
Subject key identifier: EF:03:93:BD:46:79:EC:11:8E:76:49:E9:DC:5C:0A:19:58:3E:50:BD
Certificate issuer: /CN=3D426BEA44C56109707602923668D40F4458FBEF
Certificate serial: 1687486E6A96B48779242905D8F393EC2D03DC14
Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3130332e3231392e39322e302f32342d3234203d3e20313335303631.roa
Signing time: Fri 10 Apr 2026 02:22:04 +0000
ROA not before: Fri 10 Apr 2026 02:17:04 +0000
ROA not after: Fri 09 Apr 2027 02:22:04 +0000
asID: 135061
IP address blocks: 103.219.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 10:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:87:48:6e:6a:96:b4:87:79:24:29:05:d8:f3:93:ec:2d:03:dc:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF
Validity
Not Before: Apr 10 02:17:04 2026 GMT
Not After : Apr 9 02:22:04 2027 GMT
Subject: CN=EF0393BD4679EC118E7649E9DC5C0A19583E50BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:22:a3:30:f6:c3:93:30:24:82:cc:db:d5:21:
16:3b:a7:4c:2b:b6:8f:7c:27:4c:39:e6:20:c5:e1:
72:2f:60:68:12:eb:ec:3e:29:ad:8e:d2:e8:ad:3d:
e9:8e:a9:64:4c:e1:1d:a7:6a:2f:a0:59:cf:3d:36:
2d:ef:6c:6b:84:df:2a:b7:92:02:2c:47:c8:8e:35:
ab:34:14:8e:70:92:96:fe:fc:61:2f:62:1f:08:07:
9c:5a:94:c6:d7:f2:5c:38:5b:c2:1d:0e:c6:cb:19:
d5:8d:b2:ee:7d:b5:8e:2f:f8:c3:db:b6:b0:57:cb:
34:0d:dd:17:a9:c0:35:d3:c1:98:67:4d:b0:e4:5f:
f9:d2:46:b4:3a:d2:84:34:fd:9e:c4:c2:ac:58:39:
ab:dd:cd:fd:9a:2e:6e:c0:32:b7:e1:6c:75:d1:2b:
83:5b:47:b3:09:90:a4:f1:f1:27:ba:a7:f0:13:1c:
a3:7f:09:9e:bd:33:7a:d3:94:bc:df:fd:28:e1:73:
0c:dc:89:71:f2:99:4a:e1:8a:dc:5e:17:24:3f:5b:
27:11:91:d9:ae:02:bf:58:e4:fb:1f:6f:ed:a1:5e:
64:58:e2:b5:7d:79:00:71:6d:05:05:8c:5e:a4:c6:
6e:4b:90:0c:ee:e5:5e:6e:e4:f4:03:4f:6d:16:4b:
0b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:03:93:BD:46:79:EC:11:8E:76:49:E9:DC:5C:0A:19:58:3E:50:BD
X509v3 Authority Key Identifier:
keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3130332e3231392e39322e302f32342d3234203d3e20313335303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.219.92.0/24
Signature Algorithm: sha256WithRSAEncryption
25:8b:11:2a:90:30:dc:76:ee:eb:d7:7b:ed:e5:cd:9d:7d:93:
14:1a:38:34:e2:b6:7a:0d:b3:5b:71:cc:0b:35:10:18:8e:11:
5f:44:fc:3d:54:cc:ed:50:2b:98:15:f4:1c:fd:86:94:8f:91:
c7:9d:6f:06:29:55:ae:71:3b:1f:38:e4:ca:a4:d0:b6:d8:12:
cc:3b:f1:e4:33:5f:8f:e4:6e:79:cd:25:ee:79:49:d2:e1:cb:
42:0a:34:1b:1f:ba:36:2f:2b:6a:c1:59:48:50:aa:01:06:b3:
0a:d7:2f:b3:47:e6:cf:4b:35:ad:a5:c8:4e:98:62:48:96:dc:
5f:5a:be:3c:ac:a7:9f:16:4d:38:59:62:e8:65:b2:2f:5f:4c:
e6:ca:1c:1c:91:05:7a:aa:3a:3c:6c:e3:2d:ee:92:99:3a:b8:
fd:ba:14:1b:e0:c7:00:f7:27:57:cb:f5:03:0c:62:60:5a:81:
32:64:b4:9f:f4:4b:f0:ca:bd:15:8d:f7:0b:0d:4d:6d:08:ba:
7b:e9:85:e5:5b:3c:1b:f5:45:2b:a9:6f:69:e6:0c:eb:a1:20:
4d:9f:94:c2:2e:29:02:18:45:ff:81:07:e8:bc:c0:0b:2b:70:
5d:df:2b:39:69:04:90:02:6b:22:a0:8f:e7:c7:f8:10:d4:d6:
3d:4c:41:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:26:39 2026 by rpki-client