
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094823639288709122/0/3130332e3231362e3234342e302f32322d3232203d3e2030.roa
File: 3130332e3231362e3234342e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier: pbIJ5jx/pf8/NAcf/hXOdBb+q7VleSIVTqtoc77iUsM=
Subject key identifier: 0B:EB:E3:A9:CC:04:57:F2:CB:79:76:8C:18:41:99:FE:56:5F:BF:DE
Certificate issuer: /CN=EB221959BAB62CA0F2C1844E764159F081AE413B
Certificate serial: 40F7A260ACF680BFE60F464FF97116B8F0715DF6
Authority key identifier: EB:22:19:59:BA:B6:2C:A0:F2:C1:84:4E:76:41:59:F0:81:AE:41:3B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/3130332e3231362e3234342e302f32322d3232203d3e2030.roa
Signing time: Fri 10 Apr 2026 03:34:53 +0000
ROA not before: Fri 10 Apr 2026 03:29:53 +0000
ROA not after: Fri 09 Apr 2027 03:34:53 +0000
asID: 0
IP address blocks: 103.216.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.crl
rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 09:14:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:f7:a2:60:ac:f6:80:bf:e6:0f:46:4f:f9:71:16:b8:f0:71:5d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB221959BAB62CA0F2C1844E764159F081AE413B
Validity
Not Before: Apr 10 03:29:53 2026 GMT
Not After : Apr 9 03:34:53 2027 GMT
Subject: CN=0BEBE3A9CC0457F2CB79768C184199FE565FBFDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7d:35:c1:a9:ca:7e:d0:93:f9:2a:a8:4c:ae:
14:cb:2d:c1:11:69:a4:2a:15:17:91:9e:48:10:69:
15:b0:48:a0:88:57:a4:a4:16:4e:cb:2e:6f:79:79:
8b:54:1d:91:5a:98:c4:e3:80:1b:84:9d:ec:24:b7:
a1:61:31:1e:7e:2f:3e:f4:f3:21:49:2c:5f:03:73:
a8:38:08:d7:d9:4a:84:21:f1:2e:44:03:05:f9:d2:
30:39:c6:b0:76:af:fe:cf:cb:4e:7d:39:b7:93:db:
7e:1b:83:f7:4b:69:33:d4:2e:54:f8:4b:7c:d0:7b:
e0:87:e5:08:b1:69:9f:86:fd:9d:9c:86:23:cb:e9:
b4:b9:8f:25:9e:e4:5a:4f:60:6b:a2:96:8d:6f:04:
6c:43:40:5b:14:80:bb:2b:b4:ad:73:78:b0:64:14:
b5:e4:04:a1:46:f5:6a:f1:fc:2b:74:d3:aa:1d:47:
42:a6:dd:e2:c9:9b:e2:3b:6f:3a:19:66:18:23:b6:
1e:6d:d5:65:88:1a:c4:d2:63:aa:a4:4e:ea:61:32:
fd:ea:9d:5b:97:dd:e0:fd:c7:40:a3:47:50:fd:cf:
dc:15:b0:7d:79:21:7b:c1:47:96:fd:e8:33:9b:19:
9c:75:aa:c4:28:cb:2c:19:dc:fc:0f:6a:6b:2e:3c:
8d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EB:E3:A9:CC:04:57:F2:CB:79:76:8C:18:41:99:FE:56:5F:BF:DE
X509v3 Authority Key Identifier:
keyid:EB:22:19:59:BA:B6:2C:A0:F2:C1:84:4E:76:41:59:F0:81:AE:41:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/3130332e3231362e3234342e302f32322d3232203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.216.244.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:48:79:99:a8:bc:13:1a:2a:8f:68:40:21:38:75:25:a5:5f:
fc:4e:3a:eb:33:ea:70:89:ca:4b:a8:05:44:1e:00:3a:13:83:
cb:42:4d:5e:56:a2:e6:9c:71:ac:b4:0f:d6:71:ee:13:f0:d2:
50:5a:bc:c1:fb:2d:0f:35:16:90:66:bf:1b:a6:f1:e9:63:cb:
b5:da:06:03:58:fd:89:eb:8d:2d:c3:5b:fd:ce:85:58:e5:20:
3b:43:08:7f:5a:02:cf:05:2b:45:c2:41:6a:35:52:c4:57:86:
41:95:a2:ed:a5:60:2f:c2:9e:0f:41:a1:09:da:ec:98:dd:c4:
93:3f:ba:45:52:7e:13:56:c1:1d:5d:db:0b:a1:23:03:40:f4:
ca:7e:1e:ac:5d:58:e2:1d:f8:cf:87:0c:b5:60:e1:5c:58:0c:
bb:a0:d2:cc:81:5e:d0:54:b8:75:95:c8:89:70:69:e0:8c:6c:
aa:fc:86:7f:87:ac:9d:c4:3e:9b:50:29:2d:3f:c0:78:cf:3a:
11:dc:55:3f:14:14:a3:64:a2:e2:a5:2f:ba:d7:43:26:2d:9e:
93:80:a8:23:cf:f9:89:c8:a8:56:00:c7:ef:68:5b:f3:11:b1:
c7:62:0c:c3:cb:78:d0:9f:2c:82:47:1e:27:a5:18:d4:58:d8:
96:98:32:8e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUQPeiYKz2gL/mD0ZP+XEWuPBxXfYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUIyMjE5NTlCQUI2MkNBMEYyQzE4NDRFNzY0MTU5RjA4
MUFFNDEzQjAeFw0yNjA0MTAwMzI5NTNaFw0yNzA0MDkwMzM0NTNaMDMxMTAvBgNV
BAMTKDBCRUJFM0E5Q0MwNDU3RjJDQjc5NzY4QzE4NDE5OUZFNTY1RkJGREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJfTXBqcp+0JP5KqhMrhTLLcER
aaQqFReRnkgQaRWwSKCIV6SkFk7LLm95eYtUHZFamMTjgBuEnewkt6FhMR5+Lz70
8yFJLF8Dc6g4CNfZSoQh8S5EAwX50jA5xrB2r/7Py059ObeT234bg/dLaTPULlT4
S3zQe+CH5QixaZ+G/Z2chiPL6bS5jyWe5FpPYGuilo1vBGxDQFsUgLsrtK1zeLBk
FLXkBKFG9Wrx/Ct006odR0Km3eLJm+I7bzoZZhgjth5t1WWIGsTSY6qkTuphMv3q
nVuX3eD9x0CjR1D9z9wVsH15IXvBR5b96DObGZx1qsQoyywZ3PwPamsuPI33AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUC+vjqcwEV/LLeXaMGEGZ/lZfv94wHwYDVR0j
BBgwFoAU6yIZWbq2LKDywYROdkFZ8IGuQTswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDgyMzYzOTI4ODcwOTEyMi8wL0VCMjIxOTU5QkFCNjJDQTBGMkMxODQ0RTc2NDE1
OUYwODFBRTQxM0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRUIyMjE5NTlCQUI2MkNBMEYyQzE4NDRFNzY0MTU5RjA4MUFFNDEzQi5jZXIw
gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk0ODIzNjM5Mjg4NzA5MTIyLzAvMzEzMDMzMmUzMjMx
MzYyZTMyMzQzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
Z9j0MA0GCSqGSIb3DQEBCwUAA4IBAQAKSHmZqLwTGiqPaEAhOHUlpV/8TjrrM+pw
icpLqAVEHgA6E4PLQk1eVqLmnHGstA/Wce4T8NJQWrzB+y0PNRaQZr8bpvHpY8u1
2gYDWP2J640tw1v9zoVY5SA7Qwh/WgLPBStFwkFqNVLEV4ZBlaLtpWAvwp4PQaEJ
2uyY3cSTP7pFUn4TVsEdXdsLoSMDQPTKfh6sXVjiHfjPhwy1YOFcWAy7oNLMgV7Q
VLh1lciJcGngjGyq/IZ/h6ydxD6bUCktP8B4zzoR3FU/FBSjZKLipS+610MmLZ6T
gKgjz/mJyKhWAMfvaFvzEbHHYgzDy3jQnyyCRx4npRjUWNiWmDKO
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:19 2026 by rpki-client