
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577990146/0/3130332e34312e312e302f32342d3234203d3e20313331353734.roa
File: 3130332e34312e312e302f32342d3234203d3e20313331353734.roa (raw, json)
Hash identifier: XLQFYLz+tc1UxhxL0QSQ9SLNiBHi7J4Tj9p/+uW97eg=
Subject key identifier: 80:FA:E5:28:32:04:21:21:45:77:36:4B:90:26:C9:46:DE:7B:63:E6
Certificate issuer: /CN=9684E4B95F47A986892F9930EF9D9E453227439F
Certificate serial: 2A0A74828D91E4D6BC1782D351B5653EF5E4B3D1
Authority key identifier: 96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/3130332e34312e312e302f32342d3234203d3e20313331353734.roa
Signing time: Wed 13 May 2026 05:22:57 +0000
ROA not before: Wed 13 May 2026 05:17:57 +0000
ROA not after: Wed 12 May 2027 05:22:57 +0000
asID: 131574
IP address blocks: 103.41.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:0a:74:82:8d:91:e4:d6:bc:17:82:d3:51:b5:65:3e:f5:e4:b3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9684E4B95F47A986892F9930EF9D9E453227439F
Validity
Not Before: May 13 05:17:57 2026 GMT
Not After : May 12 05:22:57 2027 GMT
Subject: CN=80FAE528320421214577364B9026C946DE7B63E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bd:a7:55:02:52:ec:8f:58:fc:24:83:da:b2:
e0:fd:ef:ff:10:ea:83:7a:da:4c:50:70:a8:f1:d0:
bd:51:9d:b3:fd:bc:5e:d1:18:95:6e:6f:a5:c5:8d:
65:f2:bb:32:f9:b4:4c:78:c6:43:2e:3d:e5:0f:ea:
29:f8:40:6e:96:7a:b5:8e:20:66:b7:e7:43:0e:4f:
a2:b5:fd:8f:10:5d:92:a6:72:10:4d:00:e5:20:b3:
28:5b:3b:6c:3d:13:78:18:7b:57:61:c2:7c:7a:89:
a8:9d:67:0a:15:3c:80:0f:95:9a:e6:1a:85:35:99:
8d:5c:f8:23:ac:6d:e0:55:4b:c6:7b:80:35:7a:cb:
cd:27:b0:89:1e:29:df:dc:ba:cc:87:7a:7f:83:f9:
36:66:e8:fd:66:5d:9e:6d:4a:ed:48:e9:85:3a:51:
46:d6:37:81:f1:8d:c1:e0:c5:fc:25:f3:ea:6a:bd:
34:d6:2c:20:25:23:ba:e5:46:45:1e:e0:3a:8c:6a:
aa:15:74:a0:9f:02:86:ce:43:59:75:6c:5c:b0:d1:
eb:ae:10:15:cd:b3:45:78:bd:49:1a:65:0a:10:2b:
74:58:f6:41:89:3c:5f:68:8b:48:e8:59:44:b4:ff:
e9:58:0d:0a:ff:24:80:c2:18:31:7b:29:9f:ba:f4:
48:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FA:E5:28:32:04:21:21:45:77:36:4B:90:26:C9:46:DE:7B:63:E6
X509v3 Authority Key Identifier:
keyid:96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/3130332e34312e312e302f32342d3234203d3e20313331353734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.41.1.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:bd:a0:0f:95:f4:f1:66:c0:cc:64:6b:9b:ea:69:ac:16:95:
1c:a0:f1:32:a4:b9:c8:e2:de:68:fb:a2:40:7f:a8:ae:7e:ae:
1d:c0:ee:1d:00:33:55:d0:bf:45:c6:49:79:1b:4c:d9:b1:6c:
4d:81:b1:08:ff:4a:07:65:8f:f1:6f:5e:60:dc:51:02:0f:e7:
65:92:16:c9:39:d5:aa:3c:1a:06:8f:d4:31:83:46:9b:6d:ca:
d6:61:ed:36:68:e6:67:17:26:5b:bc:b3:ff:d6:99:7d:c6:c9:
77:a4:08:69:31:b7:e0:4f:d2:dd:56:ee:ea:a7:0e:9d:f6:53:
e1:0a:8a:b1:ad:2c:2b:72:66:aa:4f:f0:06:72:ac:b3:ca:88:
d9:6e:9f:30:24:10:50:c7:f4:b9:c6:2a:16:f9:b5:bf:58:ed:
67:08:1f:fa:0e:50:a8:6a:af:bc:a4:ae:70:20:6e:dd:93:02:
6e:79:b5:82:bc:8e:e8:65:a3:6a:d3:46:63:40:61:f1:07:90:
e2:bd:f4:5d:27:68:af:95:32:44:ae:72:c7:9e:31:96:11:b6:
a5:03:3c:57:63:47:ca:8f:70:4d:0a:e6:e6:13:fb:f9:0d:ea:
66:f1:d6:3e:98:5c:59:c0:48:b5:82:97:8c:a0:c5:ec:c6:19:
04:7d:5f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:06:03 2026 by rpki-client