
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097041815845994499/0/3130332e37382e3132362e302f32332d3233203d3e203633363534.roa
File: 3130332e37382e3132362e302f32332d3233203d3e203633363534.roa (raw, json)
Hash identifier: ZP+h20JkWqSxKh8vbW484Nj0Ejp6CZykPD9jcY7GQqk=
Subject key identifier: B1:37:90:C9:5A:AB:E0:02:9C:8A:DE:AD:22:0E:10:B8:80:16:16:4D
Certificate issuer: /CN=CD2AB13A444BFE19493186434EE872CEC8A1952E
Certificate serial: 79CFB5D11897AB67160CDA65BADFE86554871205
Authority key identifier: CD:2A:B1:3A:44:4B:FE:19:49:31:86:43:4E:E8:72:CE:C8:A1:95:2E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/3130332e37382e3132362e302f32332d3233203d3e203633363534.roa
Signing time: Wed 22 Apr 2026 03:15:30 +0000
ROA not before: Wed 22 Apr 2026 03:10:30 +0000
ROA not after: Wed 21 Apr 2027 03:15:30 +0000
asID: 63654
IP address blocks: 103.78.126.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 03:14:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:cf:b5:d1:18:97:ab:67:16:0c:da:65:ba:df:e8:65:54:87:12:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD2AB13A444BFE19493186434EE872CEC8A1952E
Validity
Not Before: Apr 22 03:10:30 2026 GMT
Not After : Apr 21 03:15:30 2027 GMT
Subject: CN=B13790C95AABE0029C8ADEAD220E10B88016164D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:bb:88:8a:8e:47:e7:d1:eb:17:c4:b1:5f:c4:
64:8d:ab:29:6f:ff:1c:98:5e:99:86:92:f8:62:e1:
71:c8:32:7f:8b:ce:8d:db:fe:b7:4d:33:ea:01:52:
72:33:69:1d:3c:ca:47:33:36:77:b7:6f:67:eb:ea:
75:b4:7e:d8:d2:08:80:c3:f6:fc:fa:6d:fa:1d:08:
ec:62:a1:4b:52:65:44:a9:20:af:d2:e3:d9:6a:18:
e6:c0:f0:b3:94:f3:4e:bf:7f:ef:ba:a1:77:24:7e:
c0:ea:88:dc:f3:8a:da:b9:7a:dd:cc:45:61:04:16:
81:a7:b6:15:0c:9c:05:9c:ef:4d:82:cd:1c:a0:50:
82:86:d1:b9:7a:d9:a3:f9:75:10:10:d9:5e:1b:80:
a2:4d:d5:d5:65:4a:ed:0f:6e:dd:9d:6b:35:3a:33:
9d:f7:fc:59:84:f8:1e:4b:6e:af:e0:da:46:3d:5d:
96:c1:1c:d4:17:63:5a:b8:2d:94:87:75:6d:6e:41:
d4:0b:cc:75:a6:e9:a6:5e:55:c4:79:3e:31:4b:09:
f8:59:b1:40:5a:36:20:c4:b7:52:39:04:ec:0e:d6:
9c:79:c1:9d:54:34:b0:2f:bd:5f:a1:6c:c0:d7:88:
8a:f1:8c:8f:27:f4:34:7e:b4:1a:61:3a:ad:e4:60:
0a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:37:90:C9:5A:AB:E0:02:9C:8A:DE:AD:22:0E:10:B8:80:16:16:4D
X509v3 Authority Key Identifier:
keyid:CD:2A:B1:3A:44:4B:FE:19:49:31:86:43:4E:E8:72:CE:C8:A1:95:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/3130332e37382e3132362e302f32332d3233203d3e203633363534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.78.126.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:3f:a6:82:4a:60:da:eb:f5:0e:29:17:fc:d0:f9:35:60:a2:
93:47:53:50:36:9b:09:6e:90:be:41:74:6e:29:70:3c:58:3c:
cd:5a:29:bd:6b:36:8a:f1:0b:54:c9:39:ba:1d:5e:b0:fb:7a:
77:de:c7:63:50:19:c7:ef:a5:53:ca:0b:50:da:a6:a7:9a:f2:
41:9f:7f:65:89:3c:0d:c1:b9:41:8f:71:03:e9:62:28:a3:f8:
39:a2:75:73:1e:e6:f7:48:d1:c5:9c:80:c5:26:f6:63:c5:9d:
b3:ae:6f:55:97:44:82:e3:3f:bd:7e:a9:bb:6f:f3:3e:e4:f0:
f4:98:0d:16:a5:5a:a7:e6:c2:b8:c8:b8:89:4e:20:c3:eb:2b:
3f:50:63:0c:eb:73:11:42:35:26:93:13:94:81:e9:00:2e:e6:
1a:e7:5d:5d:01:23:4b:0d:89:30:35:ee:b5:e5:c2:5a:a2:f6:
1c:72:20:77:6d:58:90:4f:19:78:62:d7:7d:dc:5a:b4:75:2e:
03:5b:c0:ec:12:0a:8c:d2:04:f5:01:95:96:c9:da:a2:9f:8b:
d1:99:e9:69:b2:b5:a9:b4:06:16:87:8a:67:07:fa:d5:3b:93:
74:05:5d:83:74:c4:fc:4c:6d:12:7a:2d:03:6c:ba:37:4b:0e:
a1:20:93:63
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 18:20:23 2026 by rpki-client