
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101012581839011843/0/3130332e3233332e3133382e302f32332d3233203d3e203633363937.roa
File: 3130332e3233332e3133382e302f32332d3233203d3e203633363937.roa (raw, json)
Hash identifier: uOCqEKaImN5wNlAYjTqBY4smG8MJ0enpKts3XJnKdC4=
Subject key identifier: 20:B2:EF:3F:DB:6F:D4:A9:EF:13:16:4A:91:D3:67:83:5D:E2:FD:13
Certificate issuer: /CN=7E97B2869243296A265D98767FC04F1998D143DE
Certificate serial: 10DF8EADF540DCC9A509EAFDA5A773AD951FE587
Authority key identifier: 7E:97:B2:86:92:43:29:6A:26:5D:98:76:7F:C0:4F:19:98:D1:43:DE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/3130332e3233332e3133382e302f32332d3233203d3e203633363937.roa
Signing time: Mon 27 Apr 2026 05:16:21 +0000
ROA not before: Mon 27 Apr 2026 05:11:21 +0000
ROA not after: Mon 26 Apr 2027 05:16:21 +0000
asID: 63697
IP address blocks: 103.233.138.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.crl
rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:df:8e:ad:f5:40:dc:c9:a5:09:ea:fd:a5:a7:73:ad:95:1f:e5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E97B2869243296A265D98767FC04F1998D143DE
Validity
Not Before: Apr 27 05:11:21 2026 GMT
Not After : Apr 26 05:16:21 2027 GMT
Subject: CN=20B2EF3FDB6FD4A9EF13164A91D367835DE2FD13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:65:08:16:4f:61:00:e0:f7:cd:12:3d:a7:ff:
7f:ef:68:8a:13:53:91:d3:82:60:83:f1:21:b8:51:
eb:59:5b:99:b8:e5:c5:79:6b:fe:b7:f6:a8:ea:a3:
36:34:06:9b:28:ad:16:1e:c6:fb:f2:d3:2d:43:c3:
81:1b:e3:bf:b8:82:63:a9:60:ae:d8:ee:a6:ca:1d:
2d:2d:62:42:31:5e:a2:94:ea:2e:f3:71:70:f8:b9:
f1:0a:48:a0:a7:f0:1b:e5:32:b4:35:2f:b2:fc:72:
e8:0f:ae:35:55:51:ee:d9:31:ae:43:65:45:18:f3:
93:5f:14:fd:ae:a6:2e:df:18:9d:ed:51:de:7f:7f:
5f:bd:bb:16:51:67:75:93:53:ac:10:19:c9:f9:a1:
16:63:49:1e:95:0e:a1:bb:82:e4:d6:00:8d:7d:38:
71:e4:c0:56:1a:df:85:b5:6d:98:b5:0b:87:23:b9:
80:dd:d0:64:63:9f:42:58:f6:c4:77:ad:a6:c7:45:
95:7c:03:f0:bd:43:f3:b3:fc:e0:11:f5:9a:1e:8a:
81:92:d4:56:d4:2a:78:da:b9:23:21:51:b9:e0:dc:
ad:1b:bc:4c:71:e5:49:0f:e0:8f:59:23:62:83:d4:
df:77:a4:02:ec:22:85:81:ee:30:77:09:13:42:73:
10:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B2:EF:3F:DB:6F:D4:A9:EF:13:16:4A:91:D3:67:83:5D:E2:FD:13
X509v3 Authority Key Identifier:
keyid:7E:97:B2:86:92:43:29:6A:26:5D:98:76:7F:C0:4F:19:98:D1:43:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/3130332e3233332e3133382e302f32332d3233203d3e203633363937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.233.138.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:47:fc:40:f9:15:43:bc:1d:b4:e3:e0:ed:08:bd:af:65:49:
9d:00:c7:18:55:51:6a:40:0e:86:d4:39:5d:4e:33:93:2d:c4:
e8:17:cd:87:f1:c0:b8:d1:c4:8e:17:91:e5:86:c9:84:14:e4:
4c:16:e0:01:48:09:fb:5a:b9:27:92:97:42:aa:00:d8:1d:2f:
b5:9f:76:41:d1:5d:62:a8:a6:7e:aa:55:0f:7a:ee:07:7b:21:
3a:48:c2:52:a8:e2:fb:4d:da:4c:e0:da:cc:78:6c:18:2e:9b:
56:b3:d3:77:98:61:0b:8a:54:ed:89:0e:28:4a:5e:89:94:94:
a8:9e:86:b0:df:e7:79:5e:d9:25:84:f4:8f:1e:49:7e:ea:4e:
5e:ab:8b:73:b1:9b:4e:fc:ac:ad:f6:88:6b:45:60:c1:ea:46:
64:6b:af:e1:94:88:d9:b0:bb:73:a1:c0:cc:02:7b:48:90:0b:
7e:e6:d5:ea:9e:27:56:1f:5e:7d:9e:3e:73:52:d3:37:4e:ba:
12:2c:b9:b6:cd:80:3d:c1:40:52:bb:ca:e0:db:09:2c:14:ee:
d0:a1:03:d5:df:7d:c4:f0:9d:93:cd:e3:bb:64:34:04:3a:b4:
7f:ae:6f:bf:60:f9:77:4a:21:3c:f7:97:3c:ce:51:61:a4:42:
61:af:83:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:30 2026 by rpki-client