
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096009996593790978/0/3130332e36392e31362e302f32322d3232203d3e20313531323836.roa
File: 3130332e36392e31362e302f32322d3232203d3e20313531323836.roa (raw, json)
Hash identifier: pipFRX3g8zpKBxJfoHYgo/R05QsqXUeAMaREmbsYQc4=
Subject key identifier: EC:86:20:40:0F:4D:5E:0A:BE:1D:E9:C7:AA:8B:15:05:19:DD:AC:EB
Certificate issuer: /CN=AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B
Certificate serial: 773ED93E5B2C94EB18902BC8B185BA5AA45FACE7
Authority key identifier: AE:75:E2:C9:D8:4A:1A:D9:33:AE:35:2A:5C:AA:95:BD:6D:33:E4:4B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/3130332e36392e31362e302f32322d3232203d3e20313531323836.roa
Signing time: Mon 13 Apr 2026 09:58:13 +0000
ROA not before: Mon 13 Apr 2026 09:53:13 +0000
ROA not after: Mon 12 Apr 2027 09:58:13 +0000
asID: 151286
IP address blocks: 103.69.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.crl
rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:3e:d9:3e:5b:2c:94:eb:18:90:2b:c8:b1:85:ba:5a:a4:5f:ac:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B
Validity
Not Before: Apr 13 09:53:13 2026 GMT
Not After : Apr 12 09:58:13 2027 GMT
Subject: CN=EC8620400F4D5E0ABE1DE9C7AA8B150519DDACEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6a:dc:2e:70:e2:73:45:18:9b:60:9e:7e:c7:
76:b8:61:d7:81:3d:3c:56:14:92:dc:3b:36:06:56:
92:28:c6:99:2a:c9:ed:62:ce:10:60:47:77:ef:b6:
4c:a7:e5:de:db:43:ef:6c:bb:b1:14:b8:9e:60:e7:
d0:30:d2:1e:b0:3c:a8:20:5f:3f:95:26:b6:1a:2c:
a8:dc:45:8a:25:5f:6c:69:79:19:d7:d2:78:2d:33:
7f:a7:60:a9:94:ac:78:06:95:14:4b:d1:1e:1b:18:
30:43:11:93:b6:55:5d:eb:00:2e:a0:d4:eb:76:c1:
31:3b:54:11:dc:87:d9:7a:35:70:ec:61:6a:52:be:
56:b1:75:89:67:f8:52:50:d3:62:05:2a:3b:b9:78:
71:b0:1b:61:a5:ce:86:c5:6f:0c:93:a1:fa:cd:25:
0b:d6:27:f8:0b:c8:0f:84:c3:42:ee:f9:6a:44:21:
9d:5b:da:c5:14:52:b8:b0:09:be:bc:72:9e:29:1b:
16:85:52:9f:df:73:99:53:99:d9:3d:13:0a:ef:44:
5e:1c:2c:e6:4b:ad:19:b1:3d:7a:6a:3a:14:c6:ab:
3b:ea:62:50:c3:8c:4e:91:2c:6b:3c:c0:54:ee:1b:
dd:7b:8f:a9:9b:f9:71:ad:fe:1c:82:c6:33:f4:2e:
8e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:86:20:40:0F:4D:5E:0A:BE:1D:E9:C7:AA:8B:15:05:19:DD:AC:EB
X509v3 Authority Key Identifier:
keyid:AE:75:E2:C9:D8:4A:1A:D9:33:AE:35:2A:5C:AA:95:BD:6D:33:E4:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/3130332e36392e31362e302f32322d3232203d3e20313531323836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.69.16.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:e5:23:88:25:80:38:c5:ae:2b:72:4e:75:e2:4b:77:0b:8d:
70:d2:71:af:ab:8f:04:fe:9f:df:de:0e:0a:54:c5:f9:fa:01:
92:a2:1a:51:3a:6d:ff:9a:5e:57:b5:68:f9:4e:df:0a:b3:44:
61:33:a2:c2:c6:da:9b:7e:e5:3b:41:a4:19:0d:d5:9d:4a:5f:
e6:6d:65:26:47:5e:4e:0e:93:af:cd:61:c3:ce:da:0e:26:7e:
e9:1d:1b:e4:6e:93:b3:97:65:30:0f:e9:fb:56:7e:46:a9:0e:
c0:30:da:7c:0b:6a:31:f1:2b:60:46:be:1f:14:6b:52:18:8e:
06:5d:2f:d1:76:2c:06:ec:65:0b:e3:40:f7:20:68:f9:54:bc:
b0:d7:43:dd:1b:f9:83:c1:05:2b:63:84:5b:02:d4:72:98:5e:
76:1e:bd:a6:8d:7a:10:6d:f2:2c:b5:6f:f5:30:b8:61:bb:ad:
88:94:97:f3:04:ac:8f:22:ac:9e:d5:4e:f1:bb:ea:08:4a:2d:
b7:97:86:d7:d4:b2:30:d1:ed:3e:74:c9:d7:b3:6f:75:05:fa:
d8:db:f9:c5:35:79:af:05:1b:f0:29:a8:c2:11:a8:1b:79:0a:
23:ad:cc:d4:7a:42:ed:2a:a6:17:fc:99:db:1b:b6:7f:47:f9:
02:51:0d:5f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:53:35 2026 by rpki-client