
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130332e37312e3230302e302f32322d3234203d3e203435303632.roa
File: 3130332e37312e3230302e302f32322d3234203d3e203435303632.roa (raw, json)
Hash identifier: 1Mw5T3hOXCVQj9b4el0G0KQAaC8/638S+jOyRN3nnag=
Subject key identifier: 18:E6:22:D5:4D:B9:F9:41:FC:2A:04:7D:2B:91:99:49:8B:55:80:BD
Certificate issuer: /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial: 19E93DFF829284D4788CF810DCC90599082A747E
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130332e37312e3230302e302f32322d3234203d3e203435303632.roa
Signing time: Fri 10 Apr 2026 05:56:00 +0000
ROA not before: Fri 10 Apr 2026 05:51:00 +0000
ROA not after: Fri 09 Apr 2027 05:56:00 +0000
asID: 45062
IP address blocks: 103.71.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:e9:3d:ff:82:92:84:d4:78:8c:f8:10:dc:c9:05:99:08:2a:74:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Validity
Not Before: Apr 10 05:51:00 2026 GMT
Not After : Apr 9 05:56:00 2027 GMT
Subject: CN=18E622D54DB9F941FC2A047D2B9199498B5580BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ed:85:83:91:cf:33:e9:3c:61:93:47:71:25:
20:70:c6:a4:fb:03:1d:a7:82:32:73:00:83:3a:47:
3e:b8:09:3b:1b:42:c6:67:5c:98:2c:07:6c:e8:fa:
aa:40:29:ef:e3:f6:36:5e:4d:91:3c:62:52:2c:3f:
bc:96:5e:c7:bc:a3:36:d8:2d:1c:4d:0d:cf:d5:78:
c7:53:3c:39:1e:a9:fa:de:18:02:4d:e1:75:7b:7f:
2a:32:17:07:b7:9a:27:45:13:6f:a4:cb:23:96:0a:
70:b2:97:d9:0c:39:27:e6:3a:31:a2:84:5e:4e:e0:
4f:b9:80:ee:f4:28:6c:e2:ea:06:db:b3:36:d5:37:
70:7d:ca:8a:53:66:eb:a4:66:33:05:74:6a:88:1e:
dc:b4:ba:e8:45:2d:d6:fa:c5:56:dc:45:fa:a4:ca:
49:1b:4f:93:fa:6e:49:36:f9:a8:a9:23:f2:f5:76:
98:65:76:5e:06:9b:73:6c:ba:87:3e:46:03:aa:34:
3a:2d:63:f1:6f:7a:61:00:cf:f1:bd:3c:b4:64:d0:
79:7b:aa:dc:fa:c1:80:65:39:b8:02:3c:82:c2:a6:
1c:93:07:40:3c:19:2d:9e:81:d5:36:37:c8:0d:cd:
a7:55:64:70:71:0d:42:1e:b2:1d:0d:83:cf:b0:e1:
0d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E6:22:D5:4D:B9:F9:41:FC:2A:04:7D:2B:91:99:49:8B:55:80:BD
X509v3 Authority Key Identifier:
keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130332e37312e3230302e302f32322d3234203d3e203435303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.71.200.0/22
Signature Algorithm: sha256WithRSAEncryption
94:af:1a:6b:da:f8:49:5e:c7:11:c3:9b:8c:a1:63:f6:c7:8d:
4e:6e:10:11:28:ff:89:6f:a8:8b:5e:ea:e5:b3:74:26:bc:f6:
b6:18:14:94:a5:e5:00:fa:61:49:a2:fc:d1:ca:15:e6:cc:9a:
66:8a:26:f6:a5:a8:b7:f5:27:1d:de:42:40:46:53:fb:33:34:
12:b1:4b:1f:0d:e0:97:71:e7:b2:6d:82:64:84:28:bb:f5:77:
56:65:09:57:9c:32:c2:12:87:42:01:e5:71:76:d9:8e:ee:0f:
19:c6:81:3b:d6:72:37:d6:00:45:1d:be:03:01:9c:f4:42:01:
80:cd:1b:0d:6b:17:ca:45:9a:f2:88:1c:51:49:2b:a1:a7:4e:
83:37:1b:68:fc:f0:7a:a0:52:50:21:4a:31:e5:76:d2:fc:57:
7b:71:b2:42:dc:7c:38:a4:8f:19:37:94:33:c5:fd:69:46:1d:
30:b4:4d:0d:53:b5:1f:83:eb:5a:c4:b2:e1:26:b3:58:52:96:
52:b4:2d:51:a0:43:fc:4c:a8:cc:6b:86:ce:91:b0:cc:15:c9:
f1:ea:eb:c0:99:28:c2:7b:1a:f1:53:a1:05:31:1c:19:83:b3:
7a:06:ab:e5:70:fd:76:b6:fc:2e:38:b1:8c:2c:2a:a5:f9:e7:
ac:a1:64:30
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:13 2026 by rpki-client