
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3130332e38372e302e302f32322d3232203d3e2030.roa
File: 3130332e38372e302e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier: iYZP8hYPSXTEiu7byLJi0Y6C1RzTeRDoPPTG9Lps5eI=
Subject key identifier: 1A:0F:4D:D1:B8:CD:6C:39:E2:78:48:50:A5:B5:83:4E:8E:B2:22:35
Certificate issuer: /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial: 6B12A7570A5C40AD662A89CCA38D33DBDCA6310F
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3130332e38372e302e302f32322d3232203d3e2030.roa
Signing time: Thu 23 Apr 2026 07:54:10 +0000
ROA not before: Thu 23 Apr 2026 07:49:10 +0000
ROA not after: Thu 22 Apr 2027 07:54:10 +0000
asID: 0
IP address blocks: 103.87.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:39:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:12:a7:57:0a:5c:40:ad:66:2a:89:cc:a3:8d:33:db:dc:a6:31:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Validity
Not Before: Apr 23 07:49:10 2026 GMT
Not After : Apr 22 07:54:10 2027 GMT
Subject: CN=1A0F4DD1B8CD6C39E2784850A5B5834E8EB22235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:76:10:7a:2c:96:91:8d:70:4d:88:0b:4d:36:
33:cb:e5:87:4c:92:d3:3a:35:de:72:48:de:af:e0:
83:9d:45:03:c7:3c:c8:8d:cc:2e:eb:31:d6:a8:57:
85:b0:21:93:2c:63:b4:39:68:d6:a6:94:29:b3:04:
f1:8e:4c:f5:55:72:61:46:66:8a:24:22:28:c0:7b:
16:21:93:d6:22:69:65:da:06:2a:bc:dc:73:d5:04:
05:09:d9:74:5f:0d:76:9f:7b:11:8f:21:e7:b7:a4:
22:fd:2d:bd:c0:9b:35:09:41:0a:fb:d9:76:fe:03:
08:e6:24:0a:b3:52:14:a8:59:a1:1f:4a:87:be:db:
51:47:14:c5:98:9f:f5:c0:1d:60:42:2b:3e:a1:0b:
af:5f:1d:2f:e8:5d:bb:70:19:0a:ea:59:5a:f7:bb:
bd:b2:df:b9:d5:15:0f:1d:b2:69:a7:db:e1:89:d7:
bd:43:9d:26:b7:40:6c:26:2f:ca:9f:35:b1:af:02:
74:83:c6:7a:48:cd:57:9a:51:b9:43:ff:68:91:8c:
78:d2:bf:b5:ec:58:5a:fd:c4:3f:9d:bc:0c:11:80:
4a:43:6b:d0:3e:e8:87:00:38:c4:b2:5d:c7:0a:cc:
6e:ed:da:a1:e6:3d:01:a4:f4:a4:ef:00:2b:bc:e1:
ba:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0F:4D:D1:B8:CD:6C:39:E2:78:48:50:A5:B5:83:4E:8E:B2:22:35
X509v3 Authority Key Identifier:
keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3130332e38372e302e302f32322d3232203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.87.0.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:da:a9:cc:bf:64:db:6f:30:c5:fc:b9:84:9a:fb:3c:04:ef:
e8:89:6a:0a:39:c5:35:41:1b:b5:45:7b:c8:01:a8:42:7d:29:
71:dc:30:fe:d3:f0:e5:69:dd:71:3c:2b:2d:6a:d5:2f:c3:a3:
ca:a0:43:d2:c4:54:c7:c8:b1:e8:79:86:ed:c3:d9:db:60:82:
2e:24:1f:2c:9e:76:75:cb:68:ad:59:1d:ca:50:10:8e:88:a0:
bf:84:f7:1b:c3:9a:69:8c:77:31:93:00:95:03:c9:2e:85:60:
af:66:68:1b:6c:f2:b0:c2:af:2c:27:92:52:37:d3:0f:47:05:
b1:c9:57:a6:ad:42:cf:fd:91:61:c1:27:e1:35:92:9b:12:08:
aa:f3:b8:9f:2f:10:79:91:07:8b:45:b8:ae:95:a9:84:3c:6e:
18:ba:d7:1f:29:79:15:37:e5:9f:d1:06:97:73:d2:f4:34:7d:
88:f0:d8:9c:60:2e:4c:8c:d0:6b:aa:ae:af:bb:33:3c:62:ff:
1f:e6:44:36:06:42:04:57:9b:08:9b:93:d2:2c:ab:47:2e:12:
34:bf:1d:13:8d:4d:40:7f:08:cd:b3:2b:70:f3:5b:da:90:e7:
ef:80:0b:b1:90:88:12:e9:5e:4b:dc:35:05:c6:4c:ce:25:cc:
a1:38:a7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:37 2026 by rpki-client