
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098786411550605315/0/3130332e3137372e32382e302f32332d3233203d3e2034383132.roa
File: 3130332e3137372e32382e302f32332d3233203d3e2034383132.roa (raw, json)
Hash identifier: Gc371QAkNWpFgCcVdOap59vyzowXtB1F+c+4kbmEyNs=
Subject key identifier: 3C:06:24:2A:59:14:20:66:78:4C:68:97:B7:6C:CD:5D:41:A5:35:0B
Certificate issuer: /CN=8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794
Certificate serial: 385019AE7F3242188D8C9A5CAB9D0793B1DC06F0
Authority key identifier: 8D:C9:C0:3E:9D:EC:6A:8F:91:CB:72:21:5C:9A:4A:9B:8C:68:17:94
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/3130332e3137372e32382e302f32332d3233203d3e2034383132.roa
Signing time: Tue 21 Apr 2026 01:50:03 +0000
ROA not before: Tue 21 Apr 2026 01:45:03 +0000
ROA not after: Tue 20 Apr 2027 01:50:03 +0000
asID: 4812
IP address blocks: 103.177.28.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl
rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 00:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:50:19:ae:7f:32:42:18:8d:8c:9a:5c:ab:9d:07:93:b1:dc:06:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794
Validity
Not Before: Apr 21 01:45:03 2026 GMT
Not After : Apr 20 01:50:03 2027 GMT
Subject: CN=3C06242A59142066784C6897B76CCD5D41A5350B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0f:9a:4e:80:b2:40:bc:f5:54:ca:0a:a9:44:
aa:e5:55:2a:94:f7:80:91:34:d6:8f:2a:8d:bf:9a:
08:31:2e:ac:99:10:6e:e9:96:c3:f2:03:f1:8d:1a:
8a:4e:e1:0d:19:af:f2:16:0b:d0:56:72:e1:3b:e2:
17:b0:24:4c:b0:50:27:e4:fa:cf:e0:b4:7d:a8:24:
4c:2b:9f:24:a4:36:70:8f:da:1e:0f:7e:cd:a2:22:
c4:f8:65:68:d9:95:a4:0a:fb:56:4d:c1:2d:bd:a4:
b4:c5:1d:79:89:28:38:f8:9e:02:30:28:0f:76:ba:
36:12:7b:86:23:55:a6:b6:d8:82:38:59:bd:41:53:
b5:65:94:77:dc:44:15:6d:1c:59:29:a9:7f:55:97:
95:49:c4:19:93:34:fe:26:14:1f:c9:17:ea:ac:74:
31:7d:12:da:41:6f:7e:e4:c2:2a:81:f4:87:ee:32:
cb:4f:a7:75:04:14:35:9b:48:7e:3f:b5:54:4c:d3:
69:20:b5:48:47:74:03:e2:57:77:de:bc:a4:d3:15:
f0:72:55:bd:4d:1f:bf:d3:4d:e8:16:c5:ad:05:0f:
0d:b0:4a:b0:e7:1c:67:ca:ff:02:93:27:5c:4b:91:
09:be:5c:65:80:1c:a2:cb:0d:77:ce:5b:a3:f3:e1:
71:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:06:24:2A:59:14:20:66:78:4C:68:97:B7:6C:CD:5D:41:A5:35:0B
X509v3 Authority Key Identifier:
keyid:8D:C9:C0:3E:9D:EC:6A:8F:91:CB:72:21:5C:9A:4A:9B:8C:68:17:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/3130332e3137372e32382e302f32332d3233203d3e2034383132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.177.28.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:19:f9:c2:bb:e7:29:e7:ba:1e:f1:70:ab:f5:0b:1b:1e:0f:
11:95:e0:3b:b2:2c:49:00:33:7a:43:04:43:b0:f3:5d:ae:10:
d4:66:9f:4d:65:f8:df:8d:e5:7b:18:c2:5b:31:96:31:62:1f:
5b:89:3e:17:a2:79:2c:58:69:be:82:32:dc:d8:a6:a4:f9:a6:
04:fe:bb:ef:87:4a:f2:e7:c3:1b:3f:37:e9:18:6a:39:32:85:
f1:e7:5d:cc:64:ba:5f:1e:13:bf:a0:0c:57:ec:90:37:cc:42:
ef:20:a1:4e:e9:8d:eb:47:b3:7e:4b:8f:93:66:77:d2:9c:ee:
31:20:ad:e5:ca:06:4f:f4:cc:06:88:23:4b:43:c1:2e:49:14:
ce:17:19:ab:95:79:17:fa:d5:dc:d6:96:2b:58:f2:02:a1:65:
11:79:fc:a7:6f:45:0d:92:62:2e:de:50:fa:01:65:9a:3c:53:
b3:13:c2:47:18:eb:a1:7f:f2:3a:82:f7:98:5e:71:85:dd:26:
6d:c4:8b:28:5f:33:3b:9a:28:50:f7:12:96:93:d1:e0:ab:5f:
dd:12:4c:09:9f:00:fd:fa:1b:6e:03:b0:63:cd:2c:74:ab:f3:
cb:75:25:48:bd:14:c9:15:26:82:18:8b:4a:7f:b6:89:07:bb:
71:ac:2d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 08:24:35 2026 by rpki-client