
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095955785751461891/0/3130332e34342e3139382e302f32342d3234203d3e2034383030.roa
File: 3130332e34342e3139382e302f32342d3234203d3e2034383030.roa (raw, json)
Hash identifier: 6dqpVUqXBgLgk1fCILtRSZoIidor7YhnbVbc5fHfQhk=
Subject key identifier: B7:36:03:41:F6:A1:CA:C9:E0:3A:81:A5:B3:3D:D6:98:54:B2:6D:EF
Certificate issuer: /CN=6DB7BEC2F251B209F570DD156FE1574B6D030B3D
Certificate serial: 1FA95986C0674956A5ECC026963B5B8CE8B066B7
Authority key identifier: 6D:B7:BE:C2:F2:51:B2:09:F5:70:DD:15:6F:E1:57:4B:6D:03:0B:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/3130332e34342e3139382e302f32342d3234203d3e2034383030.roa
Signing time: Mon 13 Apr 2026 06:22:29 +0000
ROA not before: Mon 13 Apr 2026 06:17:29 +0000
ROA not after: Mon 12 Apr 2027 06:22:29 +0000
asID: 4800
IP address blocks: 103.44.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.crl
rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 07:49:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:a9:59:86:c0:67:49:56:a5:ec:c0:26:96:3b:5b:8c:e8:b0:66:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6DB7BEC2F251B209F570DD156FE1574B6D030B3D
Validity
Not Before: Apr 13 06:17:29 2026 GMT
Not After : Apr 12 06:22:29 2027 GMT
Subject: CN=B7360341F6A1CAC9E03A81A5B33DD69854B26DEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0f:fb:2c:49:72:e2:11:40:b9:ff:e9:fc:77:
80:5e:fc:13:0c:e0:a2:a9:fc:31:db:aa:e2:25:ec:
68:7d:e6:a9:14:25:a5:09:92:cc:0e:45:d8:de:05:
fc:18:54:53:7f:4b:f6:9f:6f:ad:71:27:da:9f:c0:
af:d1:5d:ce:8c:c4:15:27:6e:a6:92:d7:3a:c6:26:
79:2f:e1:49:99:7e:d0:62:79:02:13:dd:52:8f:0b:
a3:24:50:d3:98:ef:49:3a:bd:9b:ae:a2:d7:35:15:
c1:88:a3:f4:6f:b3:71:44:ef:9a:ec:a7:bf:4f:6b:
fc:73:23:58:26:b7:49:6f:aa:39:2b:4d:f5:a0:ee:
1a:79:d3:5a:cd:fa:94:04:81:47:13:ea:6b:b7:a8:
64:9d:aa:50:1d:57:7b:a0:0c:a4:ed:e9:fd:fe:02:
61:a8:3a:66:64:a1:39:04:bb:4e:a7:d5:03:fa:72:
f8:6f:de:02:c8:cb:3f:25:e4:f3:80:8a:db:3a:04:
d5:40:47:a4:92:e8:7b:b0:45:60:a7:2d:96:07:62:
d0:cb:92:80:13:85:f0:01:f0:8f:b5:55:0e:cb:c9:
aa:cd:bf:ac:56:18:1c:2c:3f:d4:3c:97:f6:67:bf:
8a:6b:d1:7e:d3:a6:58:98:19:46:d5:1c:ca:c8:4f:
e6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:36:03:41:F6:A1:CA:C9:E0:3A:81:A5:B3:3D:D6:98:54:B2:6D:EF
X509v3 Authority Key Identifier:
keyid:6D:B7:BE:C2:F2:51:B2:09:F5:70:DD:15:6F:E1:57:4B:6D:03:0B:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/3130332e34342e3139382e302f32342d3234203d3e2034383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.44.198.0/24
Signature Algorithm: sha256WithRSAEncryption
13:e0:27:84:69:09:f8:11:71:58:8d:eb:c4:43:47:32:c2:89:
e2:5b:09:6d:36:de:e1:b3:30:31:d7:bb:10:ef:e1:cf:b5:b9:
d6:33:62:84:a8:9c:7e:47:49:20:f9:a9:d9:f2:0d:92:e7:16:
53:04:76:95:25:02:88:66:0a:ff:8b:59:f9:4e:4c:88:4d:58:
7f:1d:1e:9e:4b:4f:36:57:81:85:e4:81:c5:43:7a:53:d5:19:
61:7b:79:f3:60:62:29:84:22:28:c4:6a:6e:d4:8a:92:9c:f0:
a0:a6:95:ee:73:ef:92:05:1c:f4:ad:5b:87:7f:54:d2:f6:cd:
ee:df:ab:7a:03:3d:ac:0e:be:5c:9c:7a:d3:b8:61:19:8f:6a:
91:fc:89:74:7e:86:a4:89:40:8f:08:52:b3:fa:d5:be:2e:a8:
a4:3d:56:e6:dc:ef:07:fd:3d:e4:04:0f:b2:54:9d:65:74:30:
12:a0:f5:35:74:0a:9e:4d:69:b3:c5:32:5d:ac:e9:58:bd:5e:
03:44:6e:2f:bc:58:af:36:08:f8:50:87:9b:9c:b0:64:67:34:
c9:cb:ce:e8:2e:0e:43:9c:dd:61:96:76:0c:88:79:5d:fc:3d:
50:d6:2e:71:66:a1:ce:f4:58:e4:1b:e3:7b:62:35:fb:fd:ca:
22:d4:6b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 13:53:34 2026 by rpki-client