
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101412082315689991/0/3130332e3134372e3132342e302f32342d3234203d3e203137363231.roa
File: 3130332e3134372e3132342e302f32342d3234203d3e203137363231.roa (raw, json)
Hash identifier: h0YZk3m9PfR3qf/OG78Z8ldBE8xpriz8QQrGcV+RdXA=
Subject key identifier: FB:8C:3F:99:BE:AB:C1:30:AE:80:67:94:B9:64:22:B9:34:79:75:12
Certificate issuer: /CN=71EA1C8B2E9DD939FDA693CF00BB78605B206B03
Certificate serial: 15A4AF19137357E4BD2C48DC85D0D391C62F7FF3
Authority key identifier: 71:EA:1C:8B:2E:9D:D9:39:FD:A6:93:CF:00:BB:78:60:5B:20:6B:03
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/3130332e3134372e3132342e302f32342d3234203d3e203137363231.roa
Signing time: Tue 28 Apr 2026 07:44:48 +0000
ROA not before: Tue 28 Apr 2026 07:39:48 +0000
ROA not after: Tue 27 Apr 2027 07:44:48 +0000
asID: 17621
IP address blocks: 103.147.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.crl
rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:a4:af:19:13:73:57:e4:bd:2c:48:dc:85:d0:d3:91:c6:2f:7f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71EA1C8B2E9DD939FDA693CF00BB78605B206B03
Validity
Not Before: Apr 28 07:39:48 2026 GMT
Not After : Apr 27 07:44:48 2027 GMT
Subject: CN=FB8C3F99BEABC130AE806794B96422B934797512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:32:c1:a7:60:99:ba:d1:e0:be:12:5b:80:04:
c1:fe:1d:0b:94:e2:90:83:57:9a:37:85:1f:e9:38:
df:f5:bb:c7:cf:5a:2c:80:c6:c5:d8:24:b0:e7:c8:
05:bc:63:cc:f2:94:0f:8d:8b:a7:11:2e:37:fd:a1:
62:ac:29:05:ab:f0:f5:95:6e:3d:bd:09:cb:d5:7b:
1e:41:54:9b:2e:24:7a:14:b5:43:62:28:e3:53:b9:
92:86:8c:26:69:a1:43:cf:74:f5:27:f0:f2:3c:27:
3e:8b:68:f9:79:fb:b0:48:6c:83:b9:f2:b3:0c:85:
24:74:2f:71:06:01:59:03:d0:74:3c:2d:07:5b:a4:
fc:7b:75:f6:61:e1:5d:f4:dd:88:23:bc:12:8f:ca:
65:c0:ec:e3:fc:d4:c0:6b:b2:7d:83:66:e1:e5:fc:
fc:07:af:4a:2c:c6:1b:7b:8a:c1:a9:ad:93:30:43:
60:b0:1f:8a:ec:59:b0:ad:72:2b:37:04:51:f6:a7:
da:60:26:a8:51:36:df:b5:3c:f8:b7:f1:86:35:89:
0e:3a:c2:cc:cb:26:44:2b:e3:73:72:47:e1:53:46:
83:cf:5a:30:59:a6:c0:f1:e3:c1:a9:a7:3a:07:40:
98:73:76:6f:70:c6:0a:d6:5b:7e:95:4c:a1:4c:57:
b7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8C:3F:99:BE:AB:C1:30:AE:80:67:94:B9:64:22:B9:34:79:75:12
X509v3 Authority Key Identifier:
keyid:71:EA:1C:8B:2E:9D:D9:39:FD:A6:93:CF:00:BB:78:60:5B:20:6B:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/3130332e3134372e3132342e302f32342d3234203d3e203137363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.147.124.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:d3:98:a1:03:ff:be:47:bb:3a:e8:8e:43:e4:02:33:57:2b:
c0:b5:ab:0f:52:93:a9:74:f6:22:c7:00:88:1b:7d:80:59:4e:
02:55:41:43:5b:6f:f3:0d:66:04:be:af:bf:c9:1f:18:2f:7f:
5c:12:00:9f:14:c4:9a:9b:b6:51:6f:54:b7:b1:53:af:21:90:
24:14:5f:03:e6:e1:b8:a8:72:fc:f8:51:82:63:ae:c6:e9:4c:
cf:10:6f:1e:e4:38:85:3e:fa:27:50:6d:8a:f5:c8:ec:42:aa:
57:6f:a3:dc:28:0f:b6:9b:ca:3d:24:c6:16:aa:af:ff:39:54:
07:2c:8a:ac:e3:96:b2:53:ef:e6:cf:f3:7c:db:fb:c5:fa:a6:
50:dc:19:e7:f8:06:54:78:21:34:2f:0b:a2:9f:a4:2e:72:b9:
95:16:75:af:5d:df:6b:d1:c3:64:03:d7:98:67:d5:aa:be:2c:
f5:8f:96:95:f5:04:ca:4e:63:fc:df:58:05:93:64:13:17:b0:
82:22:97:1b:e3:00:28:8f:13:a3:f7:ad:ee:bc:e9:7a:20:67:
f1:1c:bf:66:ef:03:80:7e:54:0f:49:b2:0a:a4:51:c7:32:54:
23:cb:62:1c:a7:ab:aa:04:db:2b:d8:43:38:31:27:42:39:49:
6c:7f:fa:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:00:55 2026 by rpki-client