
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098791527330611202/0/3130332e32352e36342e302f32332d3233203d3e2034383132.roa
File: 3130332e32352e36342e302f32332d3233203d3e2034383132.roa (raw, json)
Hash identifier: Nq6gNiMaaKFWixnw61ZZIDSmy1W/Glh2AAvq8ITBxjk=
Subject key identifier: 2C:E5:31:AB:37:17:61:63:EF:2E:F4:AA:94:75:4D:AC:F3:B7:92:30
Certificate issuer: /CN=65339B7A6B7988AA6EF40EF864D58BFE051E018B
Certificate serial: 0A80622250C80C528EE2926B832CC87395C4DA91
Authority key identifier: 65:33:9B:7A:6B:79:88:AA:6E:F4:0E:F8:64:D5:8B:FE:05:1E:01:8B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/3130332e32352e36342e302f32332d3233203d3e2034383132.roa
Signing time: Tue 21 Apr 2026 02:39:08 +0000
ROA not before: Tue 21 Apr 2026 02:34:08 +0000
ROA not after: Tue 20 Apr 2027 02:39:08 +0000
asID: 4812
IP address blocks: 103.25.64.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl
rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:40:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:80:62:22:50:c8:0c:52:8e:e2:92:6b:83:2c:c8:73:95:c4:da:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65339B7A6B7988AA6EF40EF864D58BFE051E018B
Validity
Not Before: Apr 21 02:34:08 2026 GMT
Not After : Apr 20 02:39:08 2027 GMT
Subject: CN=2CE531AB37176163EF2EF4AA94754DACF3B79230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:36:e8:59:2d:94:61:9a:5b:20:94:99:ee:8d:
33:d3:57:d9:69:ee:f7:15:fd:5c:74:62:88:5b:36:
46:f9:48:5d:d0:92:f9:d7:ed:24:23:19:a5:78:4b:
3c:31:7b:bb:67:cb:aa:e8:52:2f:2c:d5:f4:7c:26:
49:8f:9e:8b:1c:c5:9c:6b:8d:df:6a:b7:31:eb:10:
81:df:93:d1:53:67:ad:56:87:6e:28:cd:50:08:ef:
e9:23:33:b6:2e:0b:54:cd:91:1d:54:b1:b9:88:9c:
c8:9b:74:21:72:12:17:1e:20:46:f7:08:7b:bd:41:
f2:46:97:b8:c0:86:01:63:0b:4c:7b:8d:f5:f4:5c:
0c:23:1b:d5:da:6f:36:7c:80:0a:30:61:81:c0:59:
fb:64:bd:d5:7c:23:73:1a:53:d7:e6:16:11:d1:84:
57:4e:96:b1:f5:72:e5:35:ac:20:db:7d:f4:6f:70:
1f:c5:1e:80:e4:66:c9:14:fd:a8:2a:ba:b1:aa:d8:
de:7d:e6:07:2f:e9:fd:03:06:ec:8c:27:9f:c4:7c:
5f:20:bf:e0:55:8e:09:04:ec:2a:c5:f5:47:7b:ed:
d3:cc:0d:32:fc:b8:e5:90:4b:f3:9a:b6:47:d4:e2:
5e:27:1b:fd:c8:59:e2:e8:9a:05:a8:9b:d9:9c:72:
b4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E5:31:AB:37:17:61:63:EF:2E:F4:AA:94:75:4D:AC:F3:B7:92:30
X509v3 Authority Key Identifier:
keyid:65:33:9B:7A:6B:79:88:AA:6E:F4:0E:F8:64:D5:8B:FE:05:1E:01:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/3130332e32352e36342e302f32332d3233203d3e2034383132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.25.64.0/23
Signature Algorithm: sha256WithRSAEncryption
33:12:d7:e0:6d:ef:0c:6b:6f:ab:d4:ec:95:9b:7b:12:cd:f6:
5f:16:e9:34:b9:65:77:2c:af:b0:c5:2d:86:e7:41:81:dc:2d:
ba:d5:73:13:b8:66:eb:91:a6:cc:74:a2:2f:e7:ed:89:15:17:
6b:ea:b3:6e:be:46:f6:4b:64:61:63:93:90:95:a0:59:ce:bc:
07:0b:35:48:9a:2a:53:1a:b8:c5:16:9a:c4:39:4c:b3:98:78:
30:fe:d2:c6:84:c0:78:c7:31:9e:d8:20:48:0e:bb:e0:c0:7c:
c3:af:97:ea:66:2a:87:25:7a:d5:c7:15:3c:73:24:9d:96:85:
06:2d:7e:19:90:31:be:12:af:6a:dd:b1:42:27:34:68:57:67:
96:69:38:ec:f2:43:eb:f3:26:53:85:4a:c2:55:04:23:8b:4e:
96:20:53:8e:7e:91:01:e9:9a:22:3f:4a:b4:0d:71:9c:19:ba:
d0:5f:35:cd:f3:0d:da:a5:17:29:c0:61:65:48:fb:f8:ea:64:
8b:07:84:35:7a:6b:5b:b4:97:30:fc:9d:b6:30:bc:9a:fb:cf:
5a:1d:66:bb:e4:92:df:9d:d4:ae:ad:2c:83:02:0c:62:6b:99:
74:7d:fa:27:e3:dd:ff:81:c4:26:3d:eb:e7:02:18:12:63:4f:
6c:2b:55:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 08:24:36 2026 by rpki-client