
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096251215517384705/0/3130332e3231352e33362e302f32342d3234203d3e2034383337.roa
File: 3130332e3231352e33362e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier: c1ZiU3CFAufcaGeE4yTwhPx9/vjp4a0eTfR+1DYiZ6M=
Subject key identifier: 57:06:55:73:52:30:04:3E:60:5F:22:2C:AB:F3:3F:5E:8C:02:7C:E9
Certificate issuer: /CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D
Certificate serial: 1AE5F322F0C3B01C5F9C5F732B23620B55A5D630
Authority key identifier: D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/3130332e3231352e33362e302f32342d3234203d3e2034383337.roa
Signing time: Tue 14 Apr 2026 02:00:12 +0000
ROA not before: Tue 14 Apr 2026 01:55:12 +0000
ROA not after: Tue 13 Apr 2027 02:00:12 +0000
asID: 4837
IP address blocks: 103.215.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 07:21:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:e5:f3:22:f0:c3:b0:1c:5f:9c:5f:73:2b:23:62:0b:55:a5:d6:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D
Validity
Not Before: Apr 14 01:55:12 2026 GMT
Not After : Apr 13 02:00:12 2027 GMT
Subject: CN=570655735230043E605F222CABF33F5E8C027CE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ad:5a:45:b4:b1:a0:db:b3:79:e1:54:82:12:
55:dd:c7:1c:b9:68:50:77:dd:37:2e:6d:38:01:14:
56:72:d7:08:cb:e3:97:7c:3a:61:6b:11:2f:d2:5d:
d0:6f:e7:a6:b9:4d:21:39:4a:90:7b:cc:42:4e:92:
db:ac:fd:b6:39:6b:cc:c7:95:a3:c3:31:1e:03:3f:
66:19:de:6c:f7:91:c6:68:b0:c4:68:4d:48:2f:94:
b9:42:7e:e8:78:81:c9:0c:54:f1:25:78:5d:1f:92:
8b:3f:ab:5e:67:fd:bb:57:59:75:f6:e0:35:33:ad:
a4:cb:97:76:67:95:9b:75:07:5a:4a:13:9f:28:4b:
d3:c6:c6:9b:db:37:0d:04:93:95:28:6d:45:2b:a4:
02:58:eb:89:77:5c:76:6f:ae:63:d4:c3:a7:99:32:
6d:8f:c2:e7:b2:9d:f7:df:12:e2:5c:3c:8e:d3:01:
52:fd:3f:e1:52:77:41:91:7f:af:57:75:40:4c:8d:
5c:54:86:a3:6f:c2:5c:bb:5a:84:c9:ed:c3:b7:3a:
90:48:19:16:e4:36:28:26:fd:15:5c:f1:ce:cf:9d:
af:05:a1:0c:3a:91:ee:e2:99:43:21:ca:e9:24:a4:
f4:26:0d:2a:c1:a4:0e:89:48:09:5f:ab:55:30:9c:
44:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:06:55:73:52:30:04:3E:60:5F:22:2C:AB:F3:3F:5E:8C:02:7C:E9
X509v3 Authority Key Identifier:
keyid:D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/3130332e3231352e33362e302f32342d3234203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.215.36.0/24
Signature Algorithm: sha256WithRSAEncryption
62:39:9d:ce:a6:bd:3e:77:6e:da:01:10:c4:34:ce:a8:d5:44:
3d:d3:4e:38:63:26:f5:9b:d0:18:20:9a:58:33:e0:e9:98:9e:
d6:dc:05:7d:72:f8:b5:7c:dd:eb:8f:c7:fd:72:03:65:23:eb:
98:57:8a:37:ce:f6:1c:12:bf:5a:39:4c:b0:f8:72:a7:35:3e:
c4:4a:d6:9d:36:9d:63:cc:a4:7c:f1:21:82:72:1f:3c:ef:3a:
35:36:6d:16:5e:49:da:e0:55:8d:82:15:d7:50:4d:a9:2d:c1:
d2:16:47:4a:2b:4b:9b:30:79:93:98:31:8e:19:68:d1:ed:a1:
ea:73:30:5d:ac:4f:6b:b6:59:28:f7:8f:18:3b:66:40:cf:32:
82:15:b1:e2:f5:1c:3d:2b:7b:d1:07:75:85:4b:82:f8:48:05:
c1:bd:9e:c0:4f:d0:21:32:83:47:84:cf:1d:a7:51:3c:7b:1e:
3c:b3:e2:be:f8:34:4b:07:f3:e7:bd:f3:e1:f6:f9:0d:df:c8:
fe:e5:0d:3b:be:b2:8f:95:3d:61:4a:a6:12:e7:45:49:88:5f:
d7:0f:bf:64:79:15:05:c0:43:3a:3c:55:4d:51:46:f2:19:c3:
28:a3:f3:7b:7e:ec:b6:fb:01:54:a5:eb:41:32:71:af:16:b0:
42:af:a7:33
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUGuXzIvDDsBxfnF9zKyNiC1Wl1jAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDEzNThFOTZBNTI3OEFDMjE4QUZCNzE4RTJBMUJCRUY1
NEI5MTQ5RDAeFw0yNjA0MTQwMTU1MTJaFw0yNzA0MTMwMjAwMTJaMDMxMTAvBgNV
BAMTKDU3MDY1NTczNTIzMDA0M0U2MDVGMjIyQ0FCRjMzRjVFOEMwMjdDRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSrVpFtLGg27N54VSCElXdxxy5
aFB33TcubTgBFFZy1wjL45d8OmFrES/SXdBv56a5TSE5SpB7zEJOktus/bY5a8zH
laPDMR4DP2YZ3mz3kcZosMRoTUgvlLlCfuh4gckMVPEleF0fkos/q15n/btXWXX2
4DUzraTLl3ZnlZt1B1pKE58oS9PGxpvbNw0Ek5UobUUrpAJY64l3XHZvrmPUw6eZ
Mm2PwueynfffEuJcPI7TAVL9P+FSd0GRf69XdUBMjVxUhqNvwly7WoTJ7cO3OpBI
GRbkNigm/RVc8c7Pna8FoQw6ke7imUMhyukkpPQmDSrBpA6JSAlfq1UwnESzAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUVwZVc1IwBD5gXyIsq/M/XowCfOkwHwYDVR0j
BBgwFoAU0TWOlqUnisIYr7cY4qG771S5FJ0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjI1MTIxNTUxNzM4NDcwNS8wL0QxMzU4RTk2QTUyNzhBQzIxOEFGQjcxOEUyQTFC
QkVGNTRCOTE0OUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRDEzNThFOTZBNTI3OEFDMjE4QUZCNzE4RTJBMUJCRUY1NEI5MTQ5RC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2MjUxMjE1NTE3Mzg0NzA1LzAvMzEzMDMzMmUzMjMx
MzUyZTMzMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGfXJDANBgkqhkiG9w0BAQsFAAOCAQEAYjmdzqa9Pndu2gEQxDTOqNVEPdNO
OGMm9ZvQGCCaWDPg6Zie1twFfXL4tXzd64/H/XIDZSPrmFeKN872HBK/WjlMsPhy
pzU+xErWnTadY8ykfPEhgnIfPO86NTZtFl5J2uBVjYIV11BNqS3B0hZHSitLmzB5
k5gxjhlo0e2h6nMwXaxPa7ZZKPePGDtmQM8yghWx4vUcPSt70Qd1hUuC+EgFwb2e
wE/QITKDR4TPHadRPHsePLPivvg0Swfz573z4fb5Dd/I/uUNO76yj5U9YUqmEudF
SYhf1w+/ZHkVBcBDOjxVTVFG8hnDKKPze37stvsBVKXrQTJxrxawQq+nMw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:54:57 2026 by rpki-client