
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094811409537040386/0/3130332e34302e3139322e302f32332d3233203d3e20313337363937.roa
File: 3130332e34302e3139322e302f32332d3233203d3e20313337363937.roa (raw, json)
Hash identifier: 8krCSaNfYX3iLOiFRQl5cBRmSM0T12NtNqkmnO0sU3g=
Subject key identifier: 01:3B:45:22:50:0E:78:75:38:A8:AC:C3:59:F1:3C:0A:2F:57:2E:1F
Certificate issuer: /CN=B8D245B2C5B99498F3D8E0632643FF2259597775
Certificate serial: 1510B372E0FC4BE21C95386705291887B57273EE
Authority key identifier: B8:D2:45:B2:C5:B9:94:98:F3:D8:E0:63:26:43:FF:22:59:59:77:75
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/3130332e34302e3139322e302f32332d3233203d3e20313337363937.roa
Signing time: Fri 10 Apr 2026 02:47:10 +0000
ROA not before: Fri 10 Apr 2026 02:42:10 +0000
ROA not after: Fri 09 Apr 2027 02:47:10 +0000
asID: 137697
IP address blocks: 103.40.192.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.crl
rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 04:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:10:b3:72:e0:fc:4b:e2:1c:95:38:67:05:29:18:87:b5:72:73:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8D245B2C5B99498F3D8E0632643FF2259597775
Validity
Not Before: Apr 10 02:42:10 2026 GMT
Not After : Apr 9 02:47:10 2027 GMT
Subject: CN=013B4522500E787538A8ACC359F13C0A2F572E1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a4:34:95:cf:c0:91:98:f4:6f:93:16:6e:96:
24:39:9b:12:20:00:96:e6:b4:ad:c1:ba:f4:29:b2:
cb:72:6c:36:79:d7:fa:a4:92:dc:39:8b:41:bf:46:
75:33:23:95:31:7c:f7:c9:39:3b:d8:61:ac:5f:54:
e5:31:32:16:e7:b4:35:8c:be:70:71:3b:c1:b5:f1:
1b:fe:f8:e0:33:54:a7:8b:85:72:42:8b:6e:52:6e:
1f:14:df:3a:56:44:9e:b5:6b:cc:7d:d3:ff:fc:0c:
0f:d6:9f:ab:ce:54:0e:d2:93:44:a6:2c:f5:c3:e9:
54:2f:ab:fd:2e:71:99:66:55:15:0d:46:8c:0f:5f:
89:08:79:80:08:a4:4b:5c:10:28:69:29:0d:19:4a:
12:f6:ef:35:bf:10:ee:48:a5:eb:bc:5c:ab:23:ef:
d5:21:87:15:f2:b2:ef:5e:64:40:f2:81:a5:a2:a6:
a7:2d:e2:97:5b:7d:f3:73:c7:15:c4:74:03:1e:de:
c7:fc:56:d2:62:99:46:b0:8a:02:99:69:db:dc:70:
02:03:9a:fa:e1:f5:30:32:db:dd:3b:a9:15:a2:ac:
3e:fa:d6:1a:9e:c2:5f:b8:d8:7b:45:bd:f3:92:3b:
60:4d:72:f6:65:a7:1e:10:df:69:b2:41:d3:3a:73:
65:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3B:45:22:50:0E:78:75:38:A8:AC:C3:59:F1:3C:0A:2F:57:2E:1F
X509v3 Authority Key Identifier:
keyid:B8:D2:45:B2:C5:B9:94:98:F3:D8:E0:63:26:43:FF:22:59:59:77:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/3130332e34302e3139322e302f32332d3233203d3e20313337363937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.40.192.0/23
Signature Algorithm: sha256WithRSAEncryption
d4:3c:0d:53:49:ec:54:97:8d:d2:94:aa:e6:91:de:07:91:43:
12:1f:d2:b6:3d:98:ae:f5:3d:5b:f2:50:7c:a9:d3:22:68:42:
fe:95:1b:1a:1d:cf:13:d9:8c:a7:07:d8:da:66:06:20:88:24:
0f:fa:c6:b6:ac:a2:06:08:5a:d4:f4:21:37:78:93:bb:05:4c:
fb:bb:9e:1e:83:72:4f:fb:bc:cb:ec:15:7c:22:51:84:37:11:
0b:cf:d3:eb:b5:70:d8:73:80:06:3d:f4:37:14:6b:02:eb:48:
c7:89:cb:64:77:17:8d:06:83:32:32:3c:ac:a6:16:5f:da:bd:
c9:45:93:fd:ef:0e:b3:03:4c:d4:40:eb:18:e2:07:66:82:a2:
c3:be:52:f0:85:fc:55:cc:05:64:d8:57:6c:bd:3b:fa:e8:c9:
26:59:24:f6:df:c1:4a:5e:b8:53:3a:22:72:25:f1:c3:2f:0d:
f1:3c:1a:64:8b:c7:92:e3:9c:6b:c6:4f:f6:d0:6f:4c:b4:9f:
cc:6e:e4:6d:e3:49:ca:a4:96:66:17:53:b0:bc:e3:c9:ef:ab:
b4:d1:da:d5:f4:0c:2d:73:2f:30:40:6e:5f:95:77:1e:15:23:
c1:b6:e6:c7:10:9b:c3:9b:8f:67:22:9c:15:c2:94:77:a5:a9:
0f:eb:dc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:26:43 2026 by rpki-client