
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097041815845994499/0/3130332e37382e3132362e302f32332d3233203d3e2034383437.roa
File: 3130332e37382e3132362e302f32332d3233203d3e2034383437.roa (raw, json)
Hash identifier: X0iD6rj5LsFjlWutUYZ76kK04W1xa6nb2omOPTwXuf0=
Subject key identifier: DA:9D:F4:55:75:3B:BC:25:04:31:F3:32:85:72:06:84:F4:91:B2:3F
Certificate issuer: /CN=CD2AB13A444BFE19493186434EE872CEC8A1952E
Certificate serial: 2004081A7690E36DEAC428B211DACEBF086BED33
Authority key identifier: CD:2A:B1:3A:44:4B:FE:19:49:31:86:43:4E:E8:72:CE:C8:A1:95:2E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/3130332e37382e3132362e302f32332d3233203d3e2034383437.roa
Signing time: Wed 22 Apr 2026 03:15:30 +0000
ROA not before: Wed 22 Apr 2026 03:10:30 +0000
ROA not after: Wed 21 Apr 2027 03:15:30 +0000
asID: 4847
IP address blocks: 103.78.126.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 03:14:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:04:08:1a:76:90:e3:6d:ea:c4:28:b2:11:da:ce:bf:08:6b:ed:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD2AB13A444BFE19493186434EE872CEC8A1952E
Validity
Not Before: Apr 22 03:10:30 2026 GMT
Not After : Apr 21 03:15:30 2027 GMT
Subject: CN=DA9DF455753BBC250431F33285720684F491B23F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:63:d7:d3:a0:39:81:e5:96:d6:66:2e:da:fa:
59:ec:8b:da:cc:72:5b:54:04:e9:d7:52:ae:ec:c4:
20:2f:71:af:f2:1d:db:41:f8:af:ad:f8:81:d5:54:
27:a1:81:3e:a3:84:fa:c5:b5:3c:bc:bb:15:2f:4b:
85:97:b5:01:ba:e9:b8:a2:b7:17:18:b2:ff:cc:8b:
f2:df:e4:11:7f:72:33:95:a1:2a:b6:da:8a:8a:c8:
f7:d4:0a:a1:65:c5:46:04:08:18:bb:fa:91:89:26:
ad:91:9b:dc:49:96:39:14:8b:aa:71:18:07:dd:a1:
27:60:05:12:6a:50:8a:86:6e:5b:76:00:20:a1:88:
95:8e:f7:4d:d7:a3:7c:ec:bc:22:34:43:1d:cf:04:
ee:71:c4:58:bd:ea:50:f2:5f:38:f8:59:83:51:75:
6a:b6:60:a0:4a:07:1c:4c:2a:8c:c7:f7:fb:81:f1:
06:56:2f:a8:c6:19:09:07:31:6d:18:0a:e7:f3:f4:
b2:d9:31:62:35:ce:4b:49:9c:73:dd:9e:5c:0c:6c:
b5:f3:9a:20:70:69:41:71:7a:40:c1:a2:23:3b:5f:
71:e7:18:6f:21:ba:46:6e:e3:2c:0a:35:88:e2:24:
c4:fd:f4:31:a3:dc:5e:7f:26:f2:98:03:b6:94:2a:
ad:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9D:F4:55:75:3B:BC:25:04:31:F3:32:85:72:06:84:F4:91:B2:3F
X509v3 Authority Key Identifier:
keyid:CD:2A:B1:3A:44:4B:FE:19:49:31:86:43:4E:E8:72:CE:C8:A1:95:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/3130332e37382e3132362e302f32332d3233203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.78.126.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:7d:cd:20:e9:12:b2:b9:b8:e6:60:e5:46:31:1f:3a:b5:a3:
fd:fb:62:ce:69:00:fd:c5:39:be:96:a2:49:17:c2:50:bc:ed:
36:98:62:0d:32:33:6d:19:c2:92:47:70:9b:f4:35:22:cf:b1:
39:94:01:06:0e:6a:9b:0d:32:d3:7d:f9:db:3a:2e:80:29:cd:
d8:81:10:c1:5d:62:80:96:65:f9:db:b6:db:1b:1e:5c:31:47:
bf:83:08:fb:2a:29:19:4e:ef:10:d3:8b:ea:cf:be:4e:81:8f:
bb:20:6f:fe:7b:eb:e0:29:76:24:76:17:db:b8:f4:e3:5a:2b:
6d:e3:72:67:1e:96:a7:f6:fa:ab:a3:86:6a:44:2a:cf:be:c9:
44:60:bc:eb:52:a0:bd:c5:fe:4c:82:cf:c1:24:c5:e6:2f:5e:
ac:a0:5f:1a:98:d0:65:3e:8c:cf:6d:71:93:32:82:cf:9a:9d:
8d:f7:a7:5d:3c:77:6e:5c:12:91:3e:93:cb:20:7d:5b:a9:fc:
eb:4b:23:a8:d1:ef:5e:d5:ec:7e:be:65:72:26:bb:50:b5:3f:
20:82:89:60:d9:c0:c3:98:7d:6c:d7:33:5e:9b:3d:87:c0:9a:
7b:35:e8:2b:7e:c5:8a:6c:1e:43:b2:c2:e6:71:f6:c3:96:67:
9a:81:d2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:45:35 2026 by rpki-client