
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135322e302f32322d3232203d3e2034383131.roa
File: 3130332e3234382e3135322e302f32322d3232203d3e2034383131.roa (raw, json)
Hash identifier: /7rj/QcFgTDp7MvZGzIZbCKZ8StvP8QNCrn6T5j/bJw=
Subject key identifier: 10:EC:CF:BA:7E:9A:6C:F5:2F:23:B8:4F:26:58:A5:07:27:2F:0A:6C
Certificate issuer: /CN=25C6596195B162409A5AFAA92570F258BAD3C42D
Certificate serial: 63208735C4144ED1E62FF7A3F7050FFB8CAE78C9
Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135322e302f32322d3232203d3e2034383131.roa
Signing time: Thu 30 Apr 2026 02:52:41 +0000
ROA not before: Thu 30 Apr 2026 02:47:41 +0000
ROA not after: Thu 29 Apr 2027 02:52:41 +0000
asID: 4811
IP address blocks: 103.248.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:40:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:20:87:35:c4:14:4e:d1:e6:2f:f7:a3:f7:05:0f:fb:8c:ae:78:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D
Validity
Not Before: Apr 30 02:47:41 2026 GMT
Not After : Apr 29 02:52:41 2027 GMT
Subject: CN=10ECCFBA7E9A6CF52F23B84F2658A507272F0A6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9e:7b:06:66:0a:45:17:e9:b4:86:8a:62:3d:
b8:61:bc:a4:3e:dd:36:14:7a:4d:ea:4d:a6:8c:b4:
36:a1:49:3d:b9:0d:0b:0d:f8:6c:6d:50:a8:e5:86:
fb:7f:ae:d1:a3:8d:76:f7:40:9e:86:85:27:75:18:
a3:2f:2c:22:c7:f3:56:68:20:9b:3f:66:fc:dc:ca:
cd:05:07:a3:a8:5d:5d:bb:02:1c:e8:06:76:06:6d:
c5:64:3e:9d:00:59:1a:6b:46:03:a7:df:43:1b:ca:
de:16:e6:03:6c:93:25:0f:cf:cd:e0:94:e4:a3:bf:
a2:d2:4a:7a:b3:1f:48:77:9f:16:ea:09:17:16:a9:
94:fb:a3:a8:ad:0f:9d:33:1a:2e:22:51:c2:21:bc:
d9:78:38:d7:44:5f:c4:a2:f3:6b:9e:8f:34:0d:c4:
af:e5:f2:f7:67:5a:79:d4:ca:62:66:8b:50:b9:b7:
b6:27:df:07:c6:86:75:f1:18:02:27:02:84:ae:15:
85:81:c2:ea:63:d6:67:14:02:2e:e6:63:b2:14:48:
80:f3:84:b5:18:6a:f7:3d:6e:23:7e:c0:76:79:9e:
e7:02:ad:a5:42:2f:52:21:8d:c1:80:7d:22:bf:d0:
95:c0:4c:58:35:02:8f:72:3e:a9:91:7c:99:75:07:
33:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EC:CF:BA:7E:9A:6C:F5:2F:23:B8:4F:26:58:A5:07:27:2F:0A:6C
X509v3 Authority Key Identifier:
keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135322e302f32322d3232203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.248.152.0/22
Signature Algorithm: sha256WithRSAEncryption
52:07:06:79:8f:93:2d:1f:ad:89:f7:64:34:f2:8b:04:3c:4d:
f7:91:4d:2d:03:af:e7:3e:88:d3:ec:61:ac:3d:b7:fe:5a:bd:
55:02:29:ca:81:24:1b:5e:95:d7:e5:56:31:5e:56:ac:f0:6f:
36:e0:fc:c0:e8:48:6d:42:5e:79:2e:9a:5c:73:22:e4:e1:87:
1c:eb:1f:f2:d5:54:5c:c0:3c:b8:ba:f7:e1:36:33:20:5b:d6:
c0:88:fb:7c:b1:b1:be:7e:3a:6c:10:1e:e3:31:d3:25:74:f3:
78:d6:44:47:62:64:d7:e8:4d:2e:dd:d4:2b:b4:94:c7:9d:0d:
dc:40:f8:75:a9:29:75:00:c5:b3:89:14:3c:f2:e5:4f:81:e3:
31:84:e5:34:40:9e:de:84:6d:44:9c:3d:9d:02:74:c9:9f:af:
61:ee:ee:40:2b:47:48:7b:1d:34:27:2e:1f:69:fd:b5:3d:84:
3c:75:55:ef:55:ed:ab:0e:36:cc:58:f6:27:df:a4:78:9d:e2:
96:ff:e2:a0:4f:cb:a5:54:3f:37:2d:31:f8:23:5c:ef:63:5c:
18:bc:37:43:b4:23:e8:26:1b:9c:e9:82:a3:8f:e5:df:ce:92:
90:e8:3d:89:90:6e:cc:d6:83:48:69:d9:68:36:3b:59:f5:84:
74:30:72:a5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 12:18:30 2026 by rpki-client