
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130332e37342e34382e302f32322d3234203d3e203233373234.roa
File: 3130332e37342e34382e302f32322d3234203d3e203233373234.roa (raw, json)
Hash identifier: i5kwWATpp0iNkWYN88i7E+Qp1L3krXStVCLPGvs52fE=
Subject key identifier: C2:2A:BB:A8:CB:2D:13:09:F6:05:14:50:95:EF:EA:2D:AC:52:1D:DA
Certificate issuer: /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial: 65D1A17349D215F8834680E851B9440469E60E12
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130332e37342e34382e302f32322d3234203d3e203233373234.roa
Signing time: Fri 10 Apr 2026 06:07:17 +0000
ROA not before: Fri 10 Apr 2026 06:02:17 +0000
ROA not after: Fri 09 Apr 2027 06:07:17 +0000
asID: 23724
IP address blocks: 103.74.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:d1:a1:73:49:d2:15:f8:83:46:80:e8:51:b9:44:04:69:e6:0e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Validity
Not Before: Apr 10 06:02:17 2026 GMT
Not After : Apr 9 06:07:17 2027 GMT
Subject: CN=C22ABBA8CB2D1309F605145095EFEA2DAC521DDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:77:4c:c2:ff:0f:32:6d:90:0b:74:14:8c:8c:
a6:92:54:76:bf:6e:7d:13:17:b2:3a:3e:97:07:f2:
5e:92:a5:5d:e3:10:c5:f4:d3:04:ca:da:db:87:3f:
9c:ac:58:01:1d:5b:ab:73:c9:81:97:ba:b4:63:8a:
1c:71:c0:80:01:96:60:a4:06:e5:fd:ac:ab:d3:09:
5f:f0:91:84:a8:3f:ec:0f:ab:4c:b8:41:3f:bb:04:
4b:51:e2:fe:e9:86:93:de:d5:2f:82:a2:e8:21:c6:
06:8e:65:55:4a:9e:b8:b0:08:c7:46:70:84:c1:71:
fb:9f:02:ef:7a:0f:4a:74:64:05:f1:9d:15:f6:b8:
66:87:7f:d5:cf:f5:be:99:c2:90:6f:bc:e3:4a:b1:
f5:2a:8a:0e:91:66:eb:c6:c2:3e:58:83:d6:e4:d3:
88:32:d7:fa:d8:65:4e:85:87:40:71:c0:bc:f8:f1:
d7:98:c6:be:d8:2f:6b:0a:55:0d:56:fb:e2:b4:48:
d5:b8:d5:08:3c:43:4f:2e:0e:a5:14:5a:6a:44:57:
a9:05:ba:5b:a5:27:f2:fa:69:30:46:8f:06:bd:7f:
77:89:6c:1d:84:01:6c:52:81:25:2d:35:3b:70:34:
22:7b:f8:fb:a4:19:1a:68:b1:c6:21:84:a0:14:cd:
88:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2A:BB:A8:CB:2D:13:09:F6:05:14:50:95:EF:EA:2D:AC:52:1D:DA
X509v3 Authority Key Identifier:
keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/3130332e37342e34382e302f32322d3234203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.74.48.0/22
Signature Algorithm: sha256WithRSAEncryption
32:38:cd:76:75:8a:c4:43:d7:08:85:22:76:a1:24:9b:2e:80:
42:e0:5a:4b:b8:59:9c:df:a8:b1:0b:67:66:f9:1c:e3:10:02:
5a:fd:f2:f0:fa:a0:93:40:ba:e0:17:48:03:20:e6:0e:5d:13:
2a:15:8e:d7:89:f5:d0:b2:c4:5f:94:97:e3:d0:66:f1:6c:33:
0d:cd:41:17:7b:ea:af:a7:db:e4:77:fd:66:98:53:29:54:a9:
8e:1b:ed:07:cf:96:66:0e:3f:53:9e:40:64:94:4d:45:5c:a0:
42:00:1a:25:a5:80:f1:50:fa:10:79:70:7a:32:64:4c:91:c5:
26:50:e3:c6:43:7a:9b:9c:96:ae:ef:9f:48:da:71:b8:4f:fe:
3f:16:8d:df:68:88:0e:8c:86:a9:b5:3d:d6:fb:3e:8f:a8:94:
8a:72:aa:d2:37:86:09:be:51:98:cb:07:9c:bb:1d:b6:3a:e8:
de:8e:13:9e:ed:1f:f6:69:ce:0a:82:27:3a:e1:41:4b:f9:f5:
04:95:d5:14:8c:e3:5c:3c:20:af:a3:1b:48:c5:2a:22:9a:15:
05:09:40:be:18:53:2f:1e:9d:83:54:2d:5e:e4:db:e1:75:02:
b5:56:17:14:55:c9:e4:29:3e:33:19:8f:5a:40:0a:53:d0:98:
22:e7:47:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:28 2026 by rpki-client