
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3130332e3231392e39322e302f32342d3234203d3e2034383136.roa
File: 3130332e3231392e39322e302f32342d3234203d3e2034383136.roa (raw, json)
Hash identifier: 2QtebieRngMzvOC9CMNE4XyE9xYs2YaLxwuNFpnd/eQ=
Subject key identifier: 5D:DE:D7:C4:A2:BA:87:17:4C:90:84:53:DE:FF:17:89:0D:0F:76:D8
Certificate issuer: /CN=3D426BEA44C56109707602923668D40F4458FBEF
Certificate serial: 5B7668DF7C18DC39B4FBB0172F13AE0DA86DC013
Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3130332e3231392e39322e302f32342d3234203d3e2034383136.roa
Signing time: Fri 10 Apr 2026 02:22:04 +0000
ROA not before: Fri 10 Apr 2026 02:17:04 +0000
ROA not after: Fri 09 Apr 2027 02:22:04 +0000
asID: 4816
IP address blocks: 103.219.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 10:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:76:68:df:7c:18:dc:39:b4:fb:b0:17:2f:13:ae:0d:a8:6d:c0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF
Validity
Not Before: Apr 10 02:17:04 2026 GMT
Not After : Apr 9 02:22:04 2027 GMT
Subject: CN=5DDED7C4A2BA87174C908453DEFF17890D0F76D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:60:09:3e:3f:48:2e:39:3b:e8:a4:61:9c:91:
8f:ce:07:95:61:6c:72:16:7a:26:ad:94:90:2e:8f:
6a:e7:8d:3f:11:76:91:da:8f:c3:24:fb:74:fb:63:
bd:b7:54:2f:7c:3c:ab:71:86:eb:6f:8b:f9:3e:d8:
a6:c7:16:3b:92:ea:de:e0:06:5e:12:fe:15:2c:a6:
d9:a2:c9:8c:fa:b8:a7:2a:5a:8d:b7:08:66:63:a4:
fe:a4:e0:ac:eb:28:ec:12:96:cc:1b:60:0a:5e:67:
a9:ab:86:d9:53:13:7d:ef:9a:53:95:72:4f:1b:80:
50:73:8a:88:cd:44:24:a8:3b:55:ab:6a:0c:49:4e:
d2:f8:5c:bb:a9:53:56:ad:c5:7e:a9:4f:e9:e1:c0:
5b:d3:ce:b9:30:bc:e2:e7:da:0b:97:35:70:f3:16:
a3:15:c4:84:5e:3e:6b:95:62:37:b3:e9:70:08:af:
d9:5d:f6:07:70:aa:00:d6:ae:b4:b1:8e:30:62:8c:
72:13:05:fb:85:50:04:02:57:6a:4c:48:d0:3a:26:
09:7e:09:5e:42:34:99:99:9c:c2:22:2d:a3:7b:0e:
f9:6e:af:27:36:d7:be:54:1a:80:f2:34:54:9e:7e:
49:89:a0:a5:e0:4c:a2:f9:69:40:96:36:4c:69:12:
13:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DE:D7:C4:A2:BA:87:17:4C:90:84:53:DE:FF:17:89:0D:0F:76:D8
X509v3 Authority Key Identifier:
keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3130332e3231392e39322e302f32342d3234203d3e2034383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.219.92.0/24
Signature Algorithm: sha256WithRSAEncryption
54:07:fd:b1:60:77:90:0b:5f:72:50:d7:0a:0b:a3:c3:f6:b2:
02:ea:d7:64:11:3c:39:05:fd:dd:61:85:0d:83:a7:2e:1a:08:
3c:de:08:d9:1d:a1:90:54:bf:bf:05:9b:da:b0:52:53:53:6d:
85:6b:db:94:28:66:68:43:8f:2b:f5:6f:89:7c:2d:61:bd:e8:
e0:d6:a7:49:d6:61:09:9b:a7:94:c3:cb:d2:ce:6b:40:4f:30:
2a:cc:d2:3d:97:bd:8d:5b:f7:63:e8:67:2b:85:e0:42:05:0b:
f1:7a:a5:1c:a0:09:6c:67:fa:4a:f3:fa:0c:37:1c:84:74:c6:
42:0c:a0:18:a5:1b:94:23:e3:e4:4e:68:50:1d:0c:dd:15:bf:
aa:98:a0:10:24:b2:3f:5f:ee:ca:6d:fc:1a:3b:1e:d2:96:10:
1c:ee:89:1c:ee:ac:5b:1d:98:41:f0:40:76:11:2b:b2:2c:47:
85:4a:cf:03:90:a4:b1:a7:3d:c3:a0:ff:bd:f2:69:89:ff:d4:
a0:f2:4b:fd:f2:a2:db:95:5f:4c:97:a4:8c:a4:0d:2c:95:b4:
8d:26:89:25:c2:a8:78:1e:1e:35:24:86:eb:19:c3:5a:b5:fd:
e3:05:48:40:29:dc:6d:ef:19:e9:c0:e3:4d:35:06:f4:46:fd:
6f:02:be:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:31 2026 by rpki-client