
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3130332e39352e3235332e302f32342d3234203d3e20313335303631.roa
File: 3130332e39352e3235332e302f32342d3234203d3e20313335303631.roa (raw, json)
Hash identifier: yMF0p/lcZWTISZO4h47Ok2hFzVIhZhErYoOxBASevj8=
Subject key identifier: 74:DB:81:2B:A2:71:B8:FE:A7:04:D0:21:BC:18:D8:A6:08:F2:A0:B4
Certificate issuer: /CN=3D426BEA44C56109707602923668D40F4458FBEF
Certificate serial: 4313AABE5DE5AFDB6192B59F655BD3B30AF75EB1
Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3130332e39352e3235332e302f32342d3234203d3e20313335303631.roa
Signing time: Fri 10 Apr 2026 02:21:09 +0000
ROA not before: Fri 10 Apr 2026 02:16:09 +0000
ROA not after: Fri 09 Apr 2027 02:21:09 +0000
asID: 135061
IP address blocks: 103.95.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 10:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:13:aa:be:5d:e5:af:db:61:92:b5:9f:65:5b:d3:b3:0a:f7:5e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF
Validity
Not Before: Apr 10 02:16:09 2026 GMT
Not After : Apr 9 02:21:09 2027 GMT
Subject: CN=74DB812BA271B8FEA704D021BC18D8A608F2A0B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:58:cd:ba:38:46:0b:e5:01:2f:38:8b:07:f1:
f1:b1:1d:16:01:85:d9:24:84:40:5f:05:42:7d:73:
73:19:9e:5a:ce:73:89:25:24:88:28:24:cf:1f:94:
4d:92:03:82:ad:3c:95:4f:09:62:67:9c:97:25:2f:
36:b2:60:02:b1:e0:f2:53:13:3c:d4:59:13:c6:c6:
f5:b3:53:46:3f:59:d1:9e:b4:f2:a7:0c:26:24:04:
63:29:52:f3:44:76:a9:69:44:16:14:ad:f7:96:23:
a6:29:42:b7:07:2f:20:12:da:f0:25:02:10:85:2d:
4b:f1:48:7d:72:e9:77:08:9b:9c:6e:1d:6b:72:0f:
e5:7b:16:80:0e:7e:f9:98:c2:c1:4f:33:3f:7a:66:
6d:a3:78:28:79:5d:41:a6:d6:57:6b:38:af:85:de:
24:1d:94:1c:35:ab:d9:08:5a:d5:9d:32:e5:5a:39:
48:b7:23:ce:c5:53:80:fa:8c:56:fd:4b:d2:8c:f5:
f5:7d:cb:fd:22:7e:af:9e:f9:bc:d2:ea:bd:48:a2:
49:c2:cd:ee:4f:dd:37:c4:a4:25:b3:c6:07:69:5d:
ee:36:33:3d:2e:8f:27:6e:6f:bb:83:64:0f:0a:40:
90:66:69:3d:86:6e:97:dc:36:b4:ce:46:ef:69:0e:
30:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DB:81:2B:A2:71:B8:FE:A7:04:D0:21:BC:18:D8:A6:08:F2:A0:B4
X509v3 Authority Key Identifier:
keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3130332e39352e3235332e302f32342d3234203d3e20313335303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.95.253.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:0a:52:69:58:5e:f4:1f:f6:4c:0b:51:19:52:d6:2c:be:6c:
19:4f:39:6f:bb:5a:dc:e0:c9:69:70:ff:a6:0f:ee:c3:d5:b8:
e4:f5:79:83:f0:ea:89:23:b2:8b:2a:a8:6f:22:44:2c:35:c5:
27:3d:7f:00:3d:ea:06:06:43:f7:c7:e6:8c:10:d8:36:0c:ad:
7a:0f:05:cd:16:c2:da:dd:7a:e6:31:39:37:ae:da:78:03:1f:
ae:87:fb:26:58:bd:7f:63:82:3f:70:b3:fb:55:cc:f4:c1:0c:
5b:0a:d1:9f:dc:2f:e3:34:d1:98:d0:31:33:e7:ac:75:d2:e5:
76:cf:91:f7:9f:25:ba:4b:5f:ac:a9:cd:af:6e:69:34:2a:9a:
18:47:ee:08:06:d6:5a:23:0a:0f:46:0f:ec:a1:bc:cd:3d:a8:
99:49:13:18:4a:26:ef:bc:d5:9c:1b:f0:0b:3d:f9:50:9e:f2:
cb:6b:d2:c0:67:0c:76:cd:6d:45:49:97:bb:00:89:45:5e:c0:
80:d2:16:b9:b7:f1:b1:7a:41:51:ba:12:4f:eb:cb:9c:58:e7:
c4:da:ed:de:77:e0:9e:e9:8c:f3:b1:af:1a:e7:8c:e7:54:87:
58:1f:77:84:93:8d:2f:a8:d1:ba:8c:23:6b:c7:5f:0b:6d:6a:
ac:f5:39:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:26:41 2026 by rpki-client