
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099216366411448321/0/3130332e3233382e3138382e302f32322d3232203d3e20313335303631.roa
File: 3130332e3233382e3138382e302f32322d3232203d3e20313335303631.roa (raw, json)
Hash identifier: xJ7VcowKTFAh+WOZ79sCa/KDiTGsKX9YSHQBCzfiaTk=
Subject key identifier: F1:B9:A7:D5:15:A5:05:22:DF:E5:8C:D8:06:10:DC:86:8C:49:ED:77
Certificate issuer: /CN=158B95F55D548B072B42C2C2820ACE7D9908E60F
Certificate serial: 79492459668E4813044D901D3C8F7C3594DA25D5
Authority key identifier: 15:8B:95:F5:5D:54:8B:07:2B:42:C2:C2:82:0A:CE:7D:99:08:E6:0F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/3130332e3233382e3138382e302f32322d3232203d3e20313335303631.roa
Signing time: Wed 22 Apr 2026 06:18:52 +0000
ROA not before: Wed 22 Apr 2026 06:13:52 +0000
ROA not after: Wed 21 Apr 2027 06:18:52 +0000
asID: 135061
IP address blocks: 103.238.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.crl
rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 11:12:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:49:24:59:66:8e:48:13:04:4d:90:1d:3c:8f:7c:35:94:da:25:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=158B95F55D548B072B42C2C2820ACE7D9908E60F
Validity
Not Before: Apr 22 06:13:52 2026 GMT
Not After : Apr 21 06:18:52 2027 GMT
Subject: CN=F1B9A7D515A50522DFE58CD80610DC868C49ED77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4d:f1:ef:c5:6d:c7:36:8f:04:c9:e9:24:4e:
0e:ec:31:56:3d:d3:73:ed:d0:c4:ca:20:b8:a6:5c:
4b:fd:c7:a4:74:d2:f1:4c:cc:d8:d6:44:92:65:3d:
63:c5:e6:e4:1b:43:62:73:c4:70:1e:98:10:08:49:
a1:84:78:94:ab:c6:32:9c:70:db:e1:8c:e5:1b:4a:
92:0f:17:f0:77:7b:3b:e5:9f:7b:12:0a:ee:87:bf:
b0:6e:1c:19:7a:c7:fa:73:9c:07:67:4e:e6:0e:56:
fb:eb:64:80:7b:16:cf:a4:c3:7c:77:43:2f:35:df:
94:05:a0:3f:b3:06:02:c0:ea:c2:30:bb:9b:18:16:
5d:6a:85:85:80:ab:88:69:93:40:26:d7:3d:ba:73:
e8:99:5c:dc:72:e2:2a:ff:24:47:01:36:ec:39:c3:
ee:cf:c0:f4:a5:49:7e:d8:f1:d4:04:29:c9:d5:38:
54:9b:3e:c5:43:a9:3f:4c:f9:41:9e:9b:8f:de:45:
4f:1e:82:40:23:e2:ba:89:95:12:2b:3c:09:02:74:
1c:d8:2c:8b:81:f1:4c:5a:ed:bd:58:b9:a1:1e:cc:
38:d9:c4:e5:1a:ec:2d:25:96:dc:8c:ad:e8:d8:62:
e0:ae:c6:0d:2f:84:e2:8f:27:4f:17:38:b2:90:f5:
d5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B9:A7:D5:15:A5:05:22:DF:E5:8C:D8:06:10:DC:86:8C:49:ED:77
X509v3 Authority Key Identifier:
keyid:15:8B:95:F5:5D:54:8B:07:2B:42:C2:C2:82:0A:CE:7D:99:08:E6:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/3130332e3233382e3138382e302f32322d3232203d3e20313335303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.188.0/22
Signature Algorithm: sha256WithRSAEncryption
67:fc:6e:bc:fa:0f:8c:f1:d0:d6:32:ab:6a:8a:fe:2d:af:e3:
d3:b8:f9:69:50:e8:44:50:1d:56:2f:c9:2a:08:50:bf:4a:b2:
d9:ef:98:9a:35:c1:d9:a7:6d:7d:ef:4c:42:d2:e1:a6:0f:c0:
14:fc:f1:c8:e0:ae:8e:35:f5:9b:e1:11:43:89:f1:56:34:b5:
d3:28:0e:61:b4:de:2c:ac:32:4b:46:16:ef:f5:8c:90:83:c5:
08:61:3c:92:d0:97:e7:c1:61:b3:dc:20:81:e2:98:67:50:fd:
f0:00:e3:5f:cd:2b:9e:bf:03:0a:01:ce:be:4f:f0:cc:f5:42:
4e:56:e1:5a:f5:d9:e0:e7:2d:cd:22:cf:0b:29:57:7b:52:61:
64:75:b9:00:2c:e6:04:c6:80:97:91:25:f1:e9:ee:0d:46:56:
63:d5:3c:91:71:5b:88:a6:c6:b7:b0:3a:fd:87:f2:95:14:1e:
4e:04:4e:8e:d9:d8:b0:7b:ce:08:f4:a0:36:95:86:5d:b3:22:
07:c8:f9:4e:9a:59:6b:2e:a6:5a:97:91:2d:8f:a9:68:4a:08:
59:37:84:cb:be:8e:e7:d7:b4:c0:ff:7e:4c:77:f4:3e:01:1e:
13:29:fa:50:3a:53:2c:e5:66:ac:78:34:01:40:e7:a4:c1:3e:
c7:ca:35:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:27:13 2026 by rpki-client