
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3130332e38382e33322e302f32322d3332203d3e20313336313838.roa
File: 3130332e38382e33322e302f32322d3332203d3e20313336313838.roa (raw, json)
Hash identifier: jQqLEWUxduW+9IQ9JLGbp8S9ysifXuIYjYCe/8hazZs=
Subject key identifier: 0F:5C:33:C6:BE:AB:50:79:ED:05:B9:1B:86:B0:46:89:25:40:84:29
Certificate issuer: /CN=0A37AC88E303F4BB834C180B06F250ADE69700BF
Certificate serial: 22247D3228325F57E67D69A37B22F063F9A53136
Authority key identifier: 0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3130332e38382e33322e302f32322d3332203d3e20313336313838.roa
Signing time: Tue 21 Apr 2026 16:17:45 +0000
ROA not before: Tue 21 Apr 2026 16:12:45 +0000
ROA not after: Tue 20 Apr 2027 16:17:45 +0000
asID: 136188
IP address blocks: 103.88.32.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:21:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:24:7d:32:28:32:5f:57:e6:7d:69:a3:7b:22:f0:63:f9:a5:31:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A37AC88E303F4BB834C180B06F250ADE69700BF
Validity
Not Before: Apr 21 16:12:45 2026 GMT
Not After : Apr 20 16:17:45 2027 GMT
Subject: CN=0F5C33C6BEAB5079ED05B91B86B0468925408429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d0:6a:d8:dd:30:a7:be:1e:bf:cb:43:c2:03:
80:fc:c0:e4:a0:98:3d:fa:f2:a3:14:8e:2e:ba:c1:
9a:8b:f6:42:22:e6:ef:ec:7c:ca:d1:b8:a4:b0:0c:
b4:1c:cc:c1:81:f1:f3:4f:73:f9:47:66:f1:49:ff:
e4:56:4a:03:1d:fa:eb:0d:9d:b2:de:e8:9d:ae:c4:
fe:31:f2:5f:80:3c:04:03:2c:a5:fd:53:ba:6a:ae:
54:6c:7d:7c:9d:cf:91:75:bb:9d:b3:da:5b:5f:32:
a5:d3:d6:d8:19:bd:8f:9e:8c:78:d1:c0:75:6d:68:
fb:45:87:ed:35:87:86:70:bc:f3:e1:c2:ea:9d:ce:
9a:fe:c4:fe:cf:38:7d:aa:c7:64:ba:8b:58:5e:09:
79:d1:c2:a8:52:d8:9f:8e:a4:e6:60:3a:20:db:93:
ac:c3:5e:d5:5b:4e:86:ab:57:08:6f:c9:c7:ac:65:
e8:5c:20:72:82:85:b5:ed:f2:fb:51:84:fd:ed:cd:
aa:dc:a1:8e:6e:28:a7:df:b3:9b:90:e5:97:61:53:
cd:0f:79:12:a4:4f:45:c0:fa:2b:0f:c9:e3:5b:ac:
9d:ee:68:b4:ab:43:f7:d3:2d:c5:05:57:26:0e:6f:
55:a2:c0:b1:af:09:9a:a4:f7:3f:12:d9:9f:83:61:
bc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5C:33:C6:BE:AB:50:79:ED:05:B9:1B:86:B0:46:89:25:40:84:29
X509v3 Authority Key Identifier:
keyid:0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3130332e38382e33322e302f32322d3332203d3e20313336313838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.88.32.0/22
Signature Algorithm: sha256WithRSAEncryption
84:ec:6a:0c:3b:09:b9:94:80:a0:61:8c:21:20:a0:da:16:33:
7d:92:c3:a1:90:41:ec:9a:c1:37:61:24:4a:de:f5:16:04:3d:
ce:ea:9c:3e:5c:3f:51:34:29:f9:35:06:24:0c:24:db:15:2a:
f3:39:e0:0b:b2:13:5b:e3:cd:9c:42:29:29:fd:75:1a:0d:fd:
54:52:ac:46:36:bb:d6:60:5a:59:9f:26:0e:2e:13:06:53:12:
c1:29:9d:b1:58:a3:bf:2c:9a:74:b4:30:94:ad:56:00:96:fd:
37:fc:13:6f:f4:2e:9e:37:dc:c0:f6:f0:a4:d1:44:00:ee:4c:
50:9d:ac:9f:e6:da:49:9d:e1:26:2c:d6:46:f6:d3:bf:f3:57:
d9:08:81:9e:3b:62:5a:70:a5:4e:1c:79:a5:ed:8a:62:4d:10:
4e:97:e5:26:30:36:b4:83:11:bf:c8:1d:dd:fc:c1:34:68:0d:
2f:5e:d1:0d:2f:64:78:d6:3b:2a:8d:63:79:8c:83:3e:69:7a:
a8:3f:bb:28:18:ab:06:1e:f7:2b:a4:db:8d:a2:9b:09:16:9d:
e1:74:bc:5d:06:55:93:b3:c3:c6:cc:fd:fe:f8:49:c8:d6:9d:
a3:d7:7e:c8:ed:ed:2c:0c:1e:50:52:8b:41:ee:36:40:99:aa:
2f:11:44:93
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 18:03:36 2026 by rpki-client