
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095955785751461891/0/3130332e34342e3137382e302f32332d3233203d3e2034383437.roa
File: 3130332e34342e3137382e302f32332d3233203d3e2034383437.roa (raw, json)
Hash identifier: lSEivQpgfyTwattyz5XGR7SBQ4DIJ5haeZxfSmZXjnc=
Subject key identifier: 83:CB:E1:7F:05:86:33:63:13:0A:0C:AF:43:24:29:37:8A:C5:EB:CD
Certificate issuer: /CN=6DB7BEC2F251B209F570DD156FE1574B6D030B3D
Certificate serial: 17C7705D87E8072244A3C706A50109ADC82D346B
Authority key identifier: 6D:B7:BE:C2:F2:51:B2:09:F5:70:DD:15:6F:E1:57:4B:6D:03:0B:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/3130332e34342e3137382e302f32332d3233203d3e2034383437.roa
Signing time: Mon 13 Apr 2026 06:22:29 +0000
ROA not before: Mon 13 Apr 2026 06:17:29 +0000
ROA not after: Mon 12 Apr 2027 06:22:29 +0000
asID: 4847
IP address blocks: 103.44.178.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.crl
rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 07:49:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:c7:70:5d:87:e8:07:22:44:a3:c7:06:a5:01:09:ad:c8:2d:34:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6DB7BEC2F251B209F570DD156FE1574B6D030B3D
Validity
Not Before: Apr 13 06:17:29 2026 GMT
Not After : Apr 12 06:22:29 2027 GMT
Subject: CN=83CBE17F05863363130A0CAF432429378AC5EBCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:3b:bc:20:12:8f:78:a0:4b:b2:d8:b0:5b:
6a:0a:fa:3c:89:87:ba:25:13:91:0c:51:90:60:40:
83:75:e4:9a:23:5e:61:bb:a5:9a:5d:f6:5f:de:21:
06:c5:d8:6c:5e:5b:3a:49:da:4a:56:24:d6:da:c4:
26:71:9e:e4:30:b7:5c:1e:42:73:de:41:4a:9b:7e:
01:b1:e7:5b:9f:7d:e3:53:a8:c1:15:c8:a6:28:d7:
23:fd:73:f9:5a:15:be:8a:41:ec:ec:e0:32:4e:3c:
dc:05:00:bd:03:66:8b:ef:d0:71:90:c3:87:30:c2:
c9:8a:5a:ec:91:f4:bf:14:40:03:30:6b:8d:ed:fd:
92:d1:69:a8:96:03:fb:68:a0:78:2f:40:76:07:48:
3c:6a:29:0b:4c:65:46:36:8e:c1:73:b2:af:cf:fb:
bd:02:82:36:02:54:ae:97:0c:55:ce:7e:6a:24:87:
9e:23:23:8d:91:91:8a:a0:4f:22:d0:37:9d:67:39:
b8:1f:ad:ab:e7:bf:8f:9f:9f:07:88:23:6c:d4:d4:
a8:1f:ed:9d:ce:d1:60:3a:02:ca:2a:15:aa:ed:67:
da:1a:6b:92:bd:c4:e5:f6:50:ad:c4:5b:5a:87:a4:
30:0e:90:bd:95:5b:62:8f:f4:e4:d8:20:6d:ab:39:
44:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CB:E1:7F:05:86:33:63:13:0A:0C:AF:43:24:29:37:8A:C5:EB:CD
X509v3 Authority Key Identifier:
keyid:6D:B7:BE:C2:F2:51:B2:09:F5:70:DD:15:6F:E1:57:4B:6D:03:0B:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/3130332e34342e3137382e302f32332d3233203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.44.178.0/23
Signature Algorithm: sha256WithRSAEncryption
00:11:ee:48:74:07:e7:a6:85:2b:8b:c2:4a:35:f6:c1:5c:e2:
62:43:ba:d7:a1:56:45:83:e7:1e:6d:9a:d6:ea:d7:66:aa:ea:
0f:a8:5d:85:5a:76:9f:d7:91:5b:33:d6:98:ec:d7:da:d7:c3:
26:2c:77:ac:6b:ea:98:e6:97:de:ce:2a:dd:5f:ca:d6:e1:53:
c6:a8:cd:34:57:96:4b:f9:b5:20:c0:0b:89:10:fd:ae:0d:f8:
62:cf:ba:95:42:4d:ef:5e:69:ee:49:49:a2:63:b7:e8:89:02:
8b:4c:02:f2:77:a4:fa:0a:2e:31:02:42:5b:5e:ff:b7:aa:22:
94:d7:03:fe:80:0e:df:ce:64:f6:36:13:9f:0a:32:88:b0:6c:
46:2a:23:fe:b9:4a:0f:f1:ce:34:91:54:40:78:9c:51:c4:d2:
fc:42:63:c6:2f:25:9a:85:e4:65:5b:04:4d:96:02:84:a3:71:
aa:38:6f:b2:bb:26:77:bc:f1:73:f2:92:fc:09:51:ff:e3:f4:
e5:75:cd:d7:d6:79:77:94:6a:2b:79:9c:9c:ee:21:39:d4:f8:
26:3a:5f:9b:6d:68:d2:5d:06:8e:cc:62:ee:ee:33:e1:89:4b:
ae:d7:c5:0a:5c:ab:1f:e7:11:f1:08:d2:5a:a2:77:a7:bb:37:
29:27:5d:4e
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUF8dwXYfoByJEo8cGpQEJrcgtNGswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkRCN0JFQzJGMjUxQjIwOUY1NzBERDE1NkZFMTU3NEI2
RDAzMEIzRDAeFw0yNjA0MTMwNjE3MjlaFw0yNzA0MTIwNjIyMjlaMDMxMTAvBgNV
BAMTKDgzQ0JFMTdGMDU4NjMzNjMxMzBBMENBRjQzMjQyOTM3OEFDNUVCQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvqju8IBKPeKBLstiwW2oK+jyJ
h7olE5EMUZBgQIN15JojXmG7pZpd9l/eIQbF2GxeWzpJ2kpWJNbaxCZxnuQwt1we
QnPeQUqbfgGx51uffeNTqMEVyKYo1yP9c/laFb6KQezs4DJOPNwFAL0DZovv0HGQ
w4cwwsmKWuyR9L8UQAMwa43t/ZLRaaiWA/tooHgvQHYHSDxqKQtMZUY2jsFzsq/P
+70CgjYCVK6XDFXOfmokh54jI42RkYqgTyLQN51nObgfravnv4+fnweII2zU1Kgf
7Z3O0WA6AsoqFartZ9oaa5K9xOX2UK3EW1qHpDAOkL2VW2KP9OTYIG2rOUSnAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUg8vhfwWGM2MTCgyvQyQpN4rF680wHwYDVR0j
BBgwFoAUbbe+wvJRsgn1cN0Vb+FXS20DCz0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTk1NTc4NTc1MTQ2MTg5MS8wLzZEQjdCRUMyRjI1MUIyMDlGNTcwREQxNTZGRTE1
NzRCNkQwMzBCM0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkRCN0JFQzJGMjUxQjIwOUY1NzBERDE1NkZFMTU3NEI2RDAzMEIzRC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk1OTU1Nzg1NzUxNDYxODkxLzAvMzEzMDMzMmUzNDM0
MmUzMTM3MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAWcssjANBgkqhkiG9w0BAQsFAAOCAQEAABHuSHQH56aFK4vCSjX2wVziYkO6
16FWRYPnHm2a1urXZqrqD6hdhVp2n9eRWzPWmOzX2tfDJix3rGvqmOaX3s4q3V/K
1uFTxqjNNFeWS/m1IMALiRD9rg34Ys+6lUJN715p7klJomO36IkCi0wC8nek+gou
MQJCW17/t6oilNcD/oAO385k9jYTnwoyiLBsRioj/rlKD/HONJFUQHicUcTS/EJj
xi8lmoXkZVsETZYChKNxqjhvsrsmd7zxc/KS/AlR/+P05XXN19Z5d5RqK3mcnO4h
OdT4Jjpfm21o0l0Gjsxi7u4z4YlLrtfFClyrH+cR8QjSWqJ3p7s3KSddTg==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:11 2026 by rpki-client