
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109657629258416149/0/3130332e3233372e3234302e302f32312d3234203d3e203539303136.roa
File: 3130332e3233372e3234302e302f32312d3234203d3e203539303136.roa (raw, json)
Hash identifier: dVO/5l2P8SLtHbMGokjm4j5F0UAo9VepYQjfk/K44Lk=
Subject key identifier: C4:51:B3:9A:0E:B4:42:84:F0:5B:68:24:C7:88:12:20:E8:B4:D5:AC
Certificate issuer: /CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3
Certificate serial: 2CD979FDC33A4A2E32693BADC6D818260DB5A625
Authority key identifier: 95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/3130332e3233372e3234302e302f32312d3234203d3e203539303136.roa
Signing time: Tue 26 May 2026 07:48:38 +0000
ROA not before: Tue 26 May 2026 07:43:38 +0000
ROA not after: Tue 25 May 2027 07:48:38 +0000
asID: 59016
IP address blocks: 103.237.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl
rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 08:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:d9:79:fd:c3:3a:4a:2e:32:69:3b:ad:c6:d8:18:26:0d:b5:a6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3
Validity
Not Before: May 26 07:43:38 2026 GMT
Not After : May 25 07:48:38 2027 GMT
Subject: CN=C451B39A0EB44284F05B6824C7881220E8B4D5AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:87:48:56:e4:e9:c6:14:2b:51:52:02:0d:49:
1a:f8:81:88:33:91:eb:63:e1:36:03:cb:23:fd:00:
dd:dd:63:32:3a:71:26:bd:d6:aa:57:1e:35:12:6f:
f9:7f:3f:d9:d6:cc:a8:ca:94:14:03:85:51:f2:58:
f9:ed:19:9f:ad:12:1d:a4:fc:87:9b:a4:73:b4:3a:
6a:aa:3a:d1:4a:cd:c0:80:e4:3b:3b:d4:da:8e:5c:
29:d5:ab:0b:46:93:00:c3:47:d3:41:a1:ee:88:7d:
37:99:44:6b:af:27:05:f8:3d:5d:6a:10:58:cd:3b:
aa:87:12:fb:e7:5b:23:15:c3:a4:1f:38:c4:1e:d1:
67:e7:b1:88:b9:c5:e0:e8:db:4a:b3:a5:61:a4:f9:
fb:4a:fb:e7:0d:e3:30:dc:d4:49:10:f3:71:23:26:
7b:21:19:31:7b:56:c0:1c:8b:51:48:05:b3:db:df:
b7:4b:2e:ee:ed:29:ba:1b:b0:d1:3f:a0:5e:92:de:
8f:f3:c7:ea:d7:53:9c:5b:8c:ba:98:c0:b4:e9:a3:
7b:e7:94:94:c4:f4:32:59:de:7e:c0:c4:8b:b0:7d:
1e:c6:9a:35:6e:dd:36:c2:f0:2a:4b:70:18:4c:53:
16:3a:1b:54:8f:71:34:cb:59:d9:08:e1:20:5c:d2:
0c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:51:B3:9A:0E:B4:42:84:F0:5B:68:24:C7:88:12:20:E8:B4:D5:AC
X509v3 Authority Key Identifier:
keyid:95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/3130332e3233372e3234302e302f32312d3234203d3e203539303136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.237.240.0/21
Signature Algorithm: sha256WithRSAEncryption
64:4d:f4:d6:b2:3f:72:a5:a3:1d:e5:1b:31:43:ed:2f:87:46:
78:31:cb:df:c2:3d:57:8c:be:22:79:09:0d:6e:44:80:68:df:
86:25:9e:d7:ff:13:f9:b7:72:bb:73:9c:7c:5c:94:25:9a:ae:
23:ec:5e:b3:33:a1:f0:3d:85:81:41:69:9d:2c:2e:ec:50:b6:
25:52:bb:33:af:f2:e5:b4:e4:21:f2:1b:b6:30:3d:a8:ea:5d:
dc:96:f1:1c:6d:c1:fd:93:c1:72:37:c4:b6:1b:d6:bc:42:d9:
4f:0a:dc:94:f7:cd:94:c0:ef:a3:d8:0f:6d:9e:33:f4:cf:0f:
7d:77:9f:c1:15:94:93:36:66:92:8a:87:01:87:7b:37:b3:84:
39:30:15:0f:c5:5c:ec:31:32:dd:1f:04:6e:b5:a6:b2:be:f5:
51:b4:9f:8d:92:7d:0f:cd:1a:1d:2d:0d:68:c8:19:1f:37:92:
3d:c9:f7:78:7a:d7:db:84:bb:7b:d6:84:43:2e:71:e2:9b:3f:
91:67:03:24:a8:a7:05:64:d9:a3:c7:a7:a5:79:cd:ef:2f:ee:
10:90:af:42:cb:e2:82:69:09:64:48:89:b9:1b:6e:85:fd:9a:
31:13:cb:ea:f5:64:d3:f0:4b:e7:a8:a6:0c:f6:e9:17:73:ca:
65:b7:2c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:53:30 2026 by rpki-client