
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130332e37342e32382e302f32322d3234203d3e203233373234.roa
File: 3130332e37342e32382e302f32322d3234203d3e203233373234.roa (raw, json)
Hash identifier: rK3KxXEcD49EtMeGyihU4CxvoYu4FVixeBbw6pYtglY=
Subject key identifier: F4:28:93:94:8B:F2:B3:7F:C6:EF:B2:AB:C1:13:9D:9F:17:05:04:EE
Certificate issuer: /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial: 0F1EB9D84612103D84D3BD2FDC5B488FCC5F34B5
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130332e37342e32382e302f32322d3234203d3e203233373234.roa
Signing time: Fri 10 Apr 2026 06:07:17 +0000
ROA not before: Fri 10 Apr 2026 06:02:17 +0000
ROA not after: Fri 09 Apr 2027 06:07:17 +0000
asID: 23724
IP address blocks: 103.74.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:1e:b9:d8:46:12:10:3d:84:d3:bd:2f:dc:5b:48:8f:cc:5f:34:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Validity
Not Before: Apr 10 06:02:17 2026 GMT
Not After : Apr 9 06:07:17 2027 GMT
Subject: CN=F42893948BF2B37FC6EFB2ABC1139D9F170504EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:af:c5:a7:e9:d5:2a:c4:80:a4:89:f0:f4:89:
9b:4f:2d:cb:3f:1c:ef:67:c6:ac:5e:bb:ff:3b:8b:
15:33:3f:6d:0c:6c:61:9d:2f:4b:e0:5f:b3:2b:93:
c6:13:4a:06:db:a7:85:6f:e6:bd:48:e7:24:fa:5a:
d2:11:38:ce:d8:ed:a1:50:4d:aa:1d:e4:d0:54:26:
64:37:d8:e3:60:10:e9:00:7e:cc:0c:45:cb:a5:bf:
d8:0d:c2:73:fe:00:0b:4c:22:1b:9b:6b:b1:0b:3a:
b7:79:a6:66:63:7d:e8:24:4b:81:de:eb:87:08:fc:
75:c6:3a:41:c0:85:d9:9c:91:d3:8b:6b:38:0a:96:
91:b4:51:2d:55:34:e0:4b:d0:cb:17:51:bf:b3:91:
e7:ea:9e:1a:c1:45:05:7f:26:09:44:89:af:c7:83:
1b:ad:72:f4:83:dd:90:4b:69:c8:59:72:bb:db:41:
a4:1e:84:b5:db:88:62:0d:c7:2b:1b:c7:a0:58:b6:
19:3d:a5:d9:42:c4:48:7f:c2:b6:e0:0b:5a:7a:dc:
69:78:d3:1c:b3:85:cc:96:dc:33:68:86:27:ae:9d:
9d:4b:51:1a:17:20:5f:35:c8:3c:9e:07:2b:4b:cc:
76:a9:49:ca:a6:f1:d4:ce:68:5b:e9:bd:84:e0:56:
7a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:28:93:94:8B:F2:B3:7F:C6:EF:B2:AB:C1:13:9D:9F:17:05:04:EE
X509v3 Authority Key Identifier:
keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130332e37342e32382e302f32322d3234203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.74.28.0/22
Signature Algorithm: sha256WithRSAEncryption
47:de:93:64:fb:92:b2:bc:29:8c:7a:c5:f8:7c:bf:c6:e0:ab:
8a:19:57:cb:03:22:44:21:5e:10:80:9c:8c:33:00:40:26:1d:
d7:02:0a:e9:11:b2:54:bc:75:ec:f0:ff:ff:34:07:6a:a0:cc:
a2:91:31:0d:11:20:3e:fd:fa:9f:f4:3f:b6:77:88:97:99:be:
f9:3f:fb:89:c2:48:11:c5:30:81:65:2a:35:31:1d:7a:fe:a9:
22:b8:d4:ea:bc:41:91:7b:73:3a:59:a6:d7:bb:cc:47:b9:f6:
dc:46:33:98:38:63:10:c4:15:30:b0:0a:2b:1f:ef:70:bb:25:
1e:90:8d:1c:ad:fd:99:77:8e:8c:81:f6:aa:d7:21:1f:8f:b1:
21:b2:62:74:67:88:15:d9:30:49:14:8b:39:63:b9:65:f1:16:
eb:fe:8c:60:5b:ef:84:aa:51:f0:39:96:2d:d1:de:f2:ac:26:
6b:9a:17:e2:32:72:22:f8:90:8c:11:5c:c8:1b:8e:29:bf:2a:
f2:50:9c:9b:39:9f:07:84:63:57:db:2e:2c:0e:21:89:3c:3d:
dc:b6:12:71:13:46:95:be:d1:35:57:06:50:cd:71:49:88:4b:
e1:f2:31:f2:a9:96:34:d9:42:c2:dc:d4:c1:99:df:25:7f:28:
d6:71:f8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 15:20:53 2026 by rpki-client