
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094894841243893761/0/3130332e3136302e33322e302f32332d3233203d3e2030.roa
File: 3130332e3136302e33322e302f32332d3233203d3e2030.roa (raw, json)
Hash identifier: WylQaiIhxibsdwDrEyIJufkXIHMaWHvFmju0+BGbF1w=
Subject key identifier: 91:36:7F:45:33:A6:CC:D5:4B:06:A7:64:69:AF:33:97:01:67:B3:C3
Certificate issuer: /CN=709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6
Certificate serial: 53F8433C84ABB2B9598CCF7AA35C5B6479EC64E6
Authority key identifier: 70:9A:73:10:67:8A:E2:AD:EE:D9:D2:0D:C8:CD:3E:62:C0:4F:0E:B6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/3130332e3136302e33322e302f32332d3233203d3e2030.roa
Signing time: Fri 10 Apr 2026 08:04:15 +0000
ROA not before: Fri 10 Apr 2026 07:59:15 +0000
ROA not after: Fri 09 Apr 2027 08:04:15 +0000
asID: 0
IP address blocks: 103.160.32.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl
rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 09:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:f8:43:3c:84:ab:b2:b9:59:8c:cf:7a:a3:5c:5b:64:79:ec:64:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6
Validity
Not Before: Apr 10 07:59:15 2026 GMT
Not After : Apr 9 08:04:15 2027 GMT
Subject: CN=91367F4533A6CCD54B06A76469AF33970167B3C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:05:e2:8a:f8:15:78:7d:48:c1:ae:0c:b3:0a:
f0:3c:55:92:be:ff:0f:d6:37:2b:40:41:f7:24:2c:
af:1b:08:7c:f2:32:e7:a2:77:89:20:bf:0f:2b:73:
13:b7:98:28:ae:7b:d6:94:84:fa:12:07:1d:2a:40:
d8:f1:68:77:2f:44:1a:0e:b1:5a:28:ad:7f:0f:1a:
60:2a:0b:d5:3b:97:9b:dc:87:81:9a:fc:a8:15:03:
a3:55:7b:aa:cd:30:1b:39:37:ed:37:de:13:42:3f:
cf:74:41:9c:89:3b:88:75:8a:26:34:7f:cc:0c:8c:
4d:62:77:24:05:02:fb:88:c0:81:fb:15:f4:33:4f:
b7:9d:4c:f5:25:34:42:ee:6f:2e:82:68:2a:a5:ee:
df:82:59:b6:f0:19:6a:9b:10:b0:8e:2d:46:d0:0e:
28:96:a7:7e:4f:73:db:7e:90:1c:ff:25:b4:f1:b3:
96:91:8c:4b:f8:35:73:2d:ca:a5:34:70:0b:8e:11:
d1:19:6e:f7:3a:7d:16:48:fd:17:07:5a:b7:d1:7c:
e3:5f:a5:36:59:a2:cd:87:c6:95:58:bd:49:d8:d6:
0e:00:24:52:4a:00:0b:88:c6:92:2c:9f:8e:09:f8:
fe:3f:fc:ad:91:46:6f:df:9b:ab:ea:75:01:33:9a:
a6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:36:7F:45:33:A6:CC:D5:4B:06:A7:64:69:AF:33:97:01:67:B3:C3
X509v3 Authority Key Identifier:
keyid:70:9A:73:10:67:8A:E2:AD:EE:D9:D2:0D:C8:CD:3E:62:C0:4F:0E:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/3130332e3136302e33322e302f32332d3233203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.160.32.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:99:24:6d:76:6f:fa:a0:b1:98:db:62:7e:9c:a3:47:1b:d4:
57:bf:18:d0:c7:7e:de:ef:9f:ad:b2:8d:c5:bb:fc:ea:2e:54:
da:d0:a3:2d:fe:12:9f:0c:5a:db:5e:c5:33:12:29:a5:9d:74:
f8:29:56:ab:ae:13:d2:cd:34:b6:10:c3:a0:07:d4:56:96:f2:
46:b9:e8:b5:0d:d2:3d:cd:7d:41:1f:45:0b:e5:62:d2:fc:5a:
46:e1:cc:6a:e0:88:87:d4:b5:49:db:a3:41:ac:d9:6b:5a:0e:
37:3a:b9:e6:b3:8a:b2:81:9d:f4:5f:fc:7b:cb:2b:26:1f:8b:
00:5f:a4:3c:87:3e:19:4d:c8:88:d4:a3:3c:f0:73:4a:51:e5:
8c:2c:0b:29:b5:ef:75:c4:73:3a:ba:39:35:a4:66:94:40:0e:
57:25:f2:3c:bd:3c:64:1a:35:95:fc:10:0a:07:2b:22:d1:e6:
58:ba:e8:22:65:a2:fc:bd:d2:e4:26:2b:12:bc:26:41:cc:81:
1b:cc:4b:ef:fd:ab:07:72:4c:13:f7:2d:56:ad:da:b2:dc:2d:
d3:a2:8d:6f:a6:e7:ae:19:3e:fc:84:e2:1a:2c:95:f7:d4:7e:
29:53:ff:57:dd:bd:6c:d1:1e:33:c8:f0:fd:30:b3:b4:20:e6:
0b:ee:01:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:23:23 2026 by rpki-client