
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096329455162425347/0/3130332e3131342e3130302e302f32332d3233203d3e20313334373638.roa
File: 3130332e3131342e3130302e302f32332d3233203d3e20313334373638.roa (raw, json)
Hash identifier: 8EUsY1FOP+kfcojyiQIJhs7eZqQCDpcYaj67dwbvujQ=
Subject key identifier: 11:AF:A5:9F:FC:88:2A:2D:CA:F4:A5:8E:0F:1A:CD:79:B8:4A:6B:81
Certificate issuer: /CN=C7470BC41735EF04A8D35A523E87865C640FD17A
Certificate serial: 6D4EAE86A86B30502887F464B6D7751B4C18DA4E
Authority key identifier: C7:47:0B:C4:17:35:EF:04:A8:D3:5A:52:3E:87:86:5C:64:0F:D1:7A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/3130332e3131342e3130302e302f32332d3233203d3e20313334373638.roa
Signing time: Thu 23 Apr 2026 06:44:35 +0000
ROA not before: Thu 23 Apr 2026 06:39:35 +0000
ROA not after: Thu 22 Apr 2027 06:44:35 +0000
asID: 134768
IP address blocks: 103.114.100.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.crl
rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 09:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:4e:ae:86:a8:6b:30:50:28:87:f4:64:b6:d7:75:1b:4c:18:da:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C7470BC41735EF04A8D35A523E87865C640FD17A
Validity
Not Before: Apr 23 06:39:35 2026 GMT
Not After : Apr 22 06:44:35 2027 GMT
Subject: CN=11AFA59FFC882A2DCAF4A58E0F1ACD79B84A6B81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:22:3f:c4:aa:2b:70:d7:6e:9e:53:c1:bd:55:
20:67:24:08:21:d2:14:c1:19:f1:2f:66:0a:bf:b9:
fb:70:20:6b:48:45:99:24:67:68:7b:2b:f6:14:0d:
b4:1a:30:79:b3:d4:85:49:81:d0:62:57:28:5e:f7:
a5:dc:35:82:5b:29:eb:00:15:a8:ad:9d:e8:32:de:
e4:31:a1:fc:15:4d:7a:0f:22:4c:d0:17:5b:0a:a8:
e4:a2:98:f5:08:9f:3b:9a:82:dc:92:b8:da:4a:a3:
9f:3a:2d:8e:bf:a4:dd:2b:cf:c3:9b:72:40:39:67:
b9:df:0b:b6:56:71:9b:f6:04:1e:84:3a:46:20:5b:
23:f6:33:f3:a8:bc:de:1f:63:08:23:87:0e:72:43:
69:05:e2:d5:95:58:be:8e:00:e1:8d:26:9e:70:23:
c7:1f:15:4d:67:cb:37:34:2d:d8:f4:f7:28:01:02:
3d:d5:5b:bd:5a:15:54:86:8a:55:d4:f3:be:25:14:
19:bb:e7:8c:f7:18:af:3d:cb:b3:c6:ea:6a:23:84:
1a:ba:a3:7f:df:21:12:a2:c3:3a:01:f2:11:3d:c6:
ef:35:9d:0f:fc:28:25:31:73:10:23:87:af:6a:83:
56:1c:20:1b:6b:ae:01:c9:d7:99:1e:86:ef:77:52:
42:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AF:A5:9F:FC:88:2A:2D:CA:F4:A5:8E:0F:1A:CD:79:B8:4A:6B:81
X509v3 Authority Key Identifier:
keyid:C7:47:0B:C4:17:35:EF:04:A8:D3:5A:52:3E:87:86:5C:64:0F:D1:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/3130332e3131342e3130302e302f32332d3233203d3e20313334373638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.114.100.0/23
Signature Algorithm: sha256WithRSAEncryption
05:d3:36:fd:02:b9:ec:fb:ea:c2:13:73:b2:11:93:c5:f7:a3:
4a:9c:2b:9e:77:d6:0d:4f:74:46:a7:2a:b9:af:6d:a9:b4:1e:
ba:ad:4b:27:ca:0f:be:79:6d:d3:0c:4f:4c:23:47:cb:c2:56:
d1:d4:f6:4c:00:2b:25:02:1b:5e:af:76:e9:79:d6:10:ee:5c:
29:e8:c0:b2:bb:9c:0b:59:86:2c:75:ea:00:d9:28:80:5e:20:
2d:5c:92:b5:8c:52:42:5f:08:a4:62:f7:fd:f9:3c:22:49:db:
a0:93:cc:3a:77:12:3a:64:ef:65:ee:c2:be:1b:d3:33:92:80:
60:f9:40:26:0c:19:6b:0b:55:12:b4:a4:44:ab:9f:a7:07:6b:
02:5c:48:12:96:1f:77:0f:cf:fa:4d:f7:0b:d2:f3:53:83:1e:
9f:c2:d5:ee:4d:d0:a3:b7:97:41:3d:86:94:b2:7d:a4:fb:ab:
82:55:71:d7:1b:c4:da:64:f5:24:cb:93:41:95:82:07:48:d5:
9e:d4:1d:ae:2a:4a:dc:8a:fb:fc:11:ab:0e:3a:b8:f3:4f:69:
ab:77:32:c4:8a:66:73:5b:21:6e:e9:cf:02:56:a1:a3:a0:66:
b6:5d:76:74:2a:42:43:6f:a6:c0:27:e3:6c:a1:6c:27:6f:74:
62:44:cb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:03:10 2026 by rpki-client