
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096329455162425347/0/3130332e3131342e3130322e302f32332d3233203d3e20313334373638.roa
File: 3130332e3131342e3130322e302f32332d3233203d3e20313334373638.roa (raw, json)
Hash identifier: 2aUtg9N7ABlvs59nOCLfFgQksoT6ePMcy7K6msG3ND0=
Subject key identifier: 59:B9:15:F8:67:FE:E4:C7:CE:0D:39:29:74:DA:BB:D9:C8:40:94:BE
Certificate issuer: /CN=C7470BC41735EF04A8D35A523E87865C640FD17A
Certificate serial: 0C6C76D964BBB59A603D53259579A34AAB02A54B
Authority key identifier: C7:47:0B:C4:17:35:EF:04:A8:D3:5A:52:3E:87:86:5C:64:0F:D1:7A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/3130332e3131342e3130322e302f32332d3233203d3e20313334373638.roa
Signing time: Thu 23 Apr 2026 06:44:35 +0000
ROA not before: Thu 23 Apr 2026 06:39:35 +0000
ROA not after: Thu 22 Apr 2027 06:44:35 +0000
asID: 134768
IP address blocks: 103.114.102.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.crl
rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 09:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:6c:76:d9:64:bb:b5:9a:60:3d:53:25:95:79:a3:4a:ab:02:a5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C7470BC41735EF04A8D35A523E87865C640FD17A
Validity
Not Before: Apr 23 06:39:35 2026 GMT
Not After : Apr 22 06:44:35 2027 GMT
Subject: CN=59B915F867FEE4C7CE0D392974DABBD9C84094BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:04:5d:48:98:1b:8f:df:7b:02:c3:3d:14:33:
e7:b9:20:ad:eb:3e:4c:4f:fc:d2:a4:a8:cf:a0:fb:
a4:39:95:04:21:b9:ea:37:28:8d:b1:ff:4a:a5:13:
96:e0:d6:71:45:d8:f2:79:de:ce:bc:f4:75:94:d5:
0c:a4:5a:43:ce:b3:b1:79:36:4e:05:f3:d2:03:cb:
08:57:2c:8e:d8:64:ff:8a:2c:c8:f0:6b:26:33:a9:
2f:fe:f8:6a:af:09:e4:45:de:10:26:6e:d8:f4:d5:
1e:7e:15:1b:c3:87:45:a0:00:cd:8b:8e:14:a0:11:
d2:75:a9:4b:42:60:28:c9:95:4c:2f:1d:64:f9:75:
71:a3:ba:3b:6f:3b:06:77:6f:80:7a:d5:5e:a7:41:
47:46:0b:2d:a5:19:ad:fa:70:3c:c4:cc:62:ae:66:
88:b7:2a:ed:d6:6d:38:62:8f:a7:5b:6f:72:3d:3d:
32:85:c1:16:45:58:2a:44:37:b2:24:f1:de:87:80:
2d:c1:d9:bc:1c:9d:92:72:ca:9b:38:a1:bb:56:e2:
18:bc:a1:c5:2d:13:2c:84:a2:33:55:05:b5:6c:75:
9d:d2:c1:15:02:f2:1a:64:ff:38:67:48:62:12:72:
b0:75:16:84:9d:ce:8d:95:2c:d8:14:37:2f:39:6e:
da:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B9:15:F8:67:FE:E4:C7:CE:0D:39:29:74:DA:BB:D9:C8:40:94:BE
X509v3 Authority Key Identifier:
keyid:C7:47:0B:C4:17:35:EF:04:A8:D3:5A:52:3E:87:86:5C:64:0F:D1:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/3130332e3131342e3130322e302f32332d3233203d3e20313334373638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.114.102.0/23
Signature Algorithm: sha256WithRSAEncryption
26:0f:d9:d6:10:dd:e3:ed:46:e4:c7:4e:88:74:42:1f:48:1d:
40:f9:5b:7e:87:37:c0:64:5f:18:c4:00:2d:51:74:9c:0f:94:
3b:a1:65:9a:0b:23:6b:92:2e:ad:6a:9c:83:32:3f:39:b0:94:
ab:c3:52:d6:9b:26:8a:d5:98:67:8e:cc:ae:7e:c8:a9:73:0e:
48:52:cd:11:2e:51:e9:88:7d:c8:80:2f:c5:9f:b4:7f:99:ce:
ab:8f:e4:ef:d2:0c:13:6f:82:f1:b5:c7:e5:a2:94:87:af:0f:
ca:68:bc:41:47:2a:e7:48:e0:e6:90:82:c7:7b:62:e1:b3:04:
c7:43:63:01:9f:1b:73:25:55:f4:ca:d0:77:74:c6:39:e2:70:
da:9e:d3:ad:a5:39:05:4e:3d:d1:fa:df:56:71:cc:cd:e0:a9:
4f:6e:5a:8a:e8:b3:6b:ea:96:66:8c:44:96:28:fe:d6:16:d3:
70:09:f5:e0:9f:f8:7e:08:f2:70:44:3a:13:e3:27:55:3b:0a:
cb:4f:f4:11:25:a9:bb:66:5d:2f:e7:0d:33:a5:61:13:c4:76:
44:bb:d5:19:21:ca:a4:71:1f:92:eb:9d:df:f4:35:ca:b5:71:
a8:f3:94:3c:cd:b1:e1:d9:9a:23:4d:cb:bb:f8:28:46:92:45:
c8:74:8c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:03:09 2026 by rpki-client