
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055385718764929025/0/3130332e3234352e32332e302f32342d3234203d3e2034383132.roa
File: 3130332e3234352e32332e302f32342d3234203d3e2034383132.roa (raw, json)
Hash identifier: dXrhnb27qG4k8MBvWI1Yo0GAVS5BxdWPFYcv+YuYno8=
Subject key identifier: B5:2C:06:07:78:E4:22:95:23:58:86:39:91:74:E0:80:3C:1C:F4:A0
Certificate issuer: /CN=A918C4250000/serialNumber=78A515C1A913D89B4134674C867CEE6B49AE149E
Certificate serial: 6F6EC6EBC8BD72A1EC2D6E8D625B9975CDF91D0E
Authority key identifier: 78:A5:15:C1:A9:13:D8:9B:41:34:67:4C:86:7C:EE:6B:49:AE:14:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKUVwakT2JtBNGdMhnzua0muFJ4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/3130332e3234352e32332e302f32342d3234203d3e2034383132.roa
Signing time: Wed 18 Mar 2026 01:39:43 +0000
ROA not before: Wed 18 Mar 2026 01:34:43 +0000
ROA not after: Wed 17 Mar 2027 01:39:43 +0000
asID: 4812
IP address blocks: 103.245.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/78A515C1A913D89B4134674C867CEE6B49AE149E.crl
rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/78A515C1A913D89B4134674C867CEE6B49AE149E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKUVwakT2JtBNGdMhnzua0muFJ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 04:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:6e:c6:eb:c8:bd:72:a1:ec:2d:6e:8d:62:5b:99:75:cd:f9:1d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C4250000, serialNumber=78A515C1A913D89B4134674C867CEE6B49AE149E
Validity
Not Before: Mar 18 01:34:43 2026 GMT
Not After : Mar 17 01:39:43 2027 GMT
Subject: CN=B52C060778E42295235886399174E0803C1CF4A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:71:75:c9:51:bc:95:63:9c:1b:99:37:6b:78:
df:f1:b0:de:42:ec:fa:61:ac:d6:72:d0:4e:ef:67:
fc:9c:ca:2b:02:57:5a:b3:ab:9e:a7:81:36:1b:80:
0e:03:ad:38:6c:de:84:09:bf:05:57:96:68:0e:4f:
ff:79:7e:04:25:66:08:c6:01:a0:a3:b7:87:ce:13:
79:33:fa:8f:31:a6:93:ea:ca:56:62:02:8d:b8:2c:
b0:93:03:3a:c2:dd:76:f5:49:55:3c:89:90:95:2d:
71:cb:4a:b3:cc:58:06:65:6f:12:e7:a7:fe:f1:5a:
9e:86:ec:b7:3c:d9:39:89:bc:0d:23:5b:92:f0:33:
b4:f7:cf:47:e1:6d:9c:6f:e3:ec:05:06:46:6a:3d:
ce:0a:48:3c:ad:49:c7:6e:a1:7c:5a:ca:14:b8:0b:
41:5a:61:35:40:f8:0c:0f:03:ea:20:7a:66:ee:4d:
32:c2:7f:1f:2b:4c:18:ba:3d:ec:e1:01:1f:61:bb:
f4:e3:83:01:ea:20:7e:24:bb:aa:b9:d8:e1:bc:a2:
65:5d:07:26:13:ae:6e:90:14:84:d9:52:99:df:c1:
2e:cd:9c:9a:f8:fe:fb:17:a6:28:08:e9:31:1b:95:
1c:31:ca:5e:a5:c2:44:8d:0b:d2:71:07:68:f7:16:
d1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2C:06:07:78:E4:22:95:23:58:86:39:91:74:E0:80:3C:1C:F4:A0
X509v3 Authority Key Identifier:
keyid:78:A5:15:C1:A9:13:D8:9B:41:34:67:4C:86:7C:EE:6B:49:AE:14:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/78A515C1A913D89B4134674C867CEE6B49AE149E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKUVwakT2JtBNGdMhnzua0muFJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/3130332e3234352e32332e302f32342d3234203d3e2034383132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.245.23.0/24
Signature Algorithm: sha256WithRSAEncryption
01:0e:9a:bb:71:30:8f:2b:41:00:d0:14:5f:6c:28:4e:f1:e3:
61:92:d6:9c:4d:e9:e1:d0:89:b3:f3:51:ae:bd:50:50:29:3e:
89:f4:87:a8:dc:7c:81:58:65:46:83:db:da:ff:85:40:d9:5e:
2c:ff:b1:e3:c2:ed:ab:ce:9f:1a:06:ab:71:46:0f:17:ed:35:
f6:d9:e4:b3:45:20:e6:84:f4:21:c2:50:42:c9:b0:09:6f:43:
9e:ab:a0:46:44:6a:09:4b:a3:08:4e:d3:ec:4e:03:b8:cd:ad:
83:b9:43:aa:f8:e7:3f:a1:52:ab:71:09:41:22:cf:4a:34:f4:
4c:55:d0:4b:f9:4b:36:40:c7:b6:f2:02:77:86:bc:13:23:41:
8d:4d:be:2d:58:c6:fc:8f:03:f4:c5:6b:fc:b9:0d:ba:0e:a9:
c0:ae:e4:b5:74:5e:2c:ca:4b:73:3d:65:d0:10:06:13:61:67:
e6:1b:57:dc:c1:ea:2c:5d:cd:65:50:02:f3:bd:07:37:ae:40:
b7:6e:86:ac:08:3f:9e:59:13:96:96:00:97:e8:62:99:a9:42:
9d:09:ea:08:78:5b:3d:06:ee:d7:2b:4c:5a:da:e5:67:fc:cb:
40:30:e6:28:fb:8b:ce:ab:a3:41:19:39:25:80:57:92:5a:87:
f1:1a:43:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:05:25 2026 by rpki-client