
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096251215517384705/0/3130332e3231352e33372e302f32342d3234203d3e203536303436.roa
File: 3130332e3231352e33372e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier: Lhyaq+8kPJ3DhpaP9dDOkRV3Hx7/hgYp232NNc/+3UU=
Subject key identifier: FB:03:68:27:9B:89:E5:12:D5:4C:A7:A6:44:B1:3F:2B:F0:8C:38:FF
Certificate issuer: /CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D
Certificate serial: 56A99E0739E18400361A62E0BFA7822D7C91FED6
Authority key identifier: D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/3130332e3231352e33372e302f32342d3234203d3e203536303436.roa
Signing time: Tue 14 Apr 2026 02:00:13 +0000
ROA not before: Tue 14 Apr 2026 01:55:13 +0000
ROA not after: Tue 13 Apr 2027 02:00:13 +0000
asID: 56046
IP address blocks: 103.215.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 07:21:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:a9:9e:07:39:e1:84:00:36:1a:62:e0:bf:a7:82:2d:7c:91:fe:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D
Validity
Not Before: Apr 14 01:55:13 2026 GMT
Not After : Apr 13 02:00:13 2027 GMT
Subject: CN=FB0368279B89E512D54CA7A644B13F2BF08C38FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:69:bf:82:ed:93:f2:26:d9:71:bc:4f:11:f3:
41:ee:62:9c:38:a0:aa:29:e9:78:83:80:a6:a4:55:
c4:2f:77:d7:be:f8:12:5d:0d:81:b1:b2:0b:54:88:
c5:77:21:bf:8a:3f:b5:ad:98:0b:8a:18:4a:16:12:
05:b7:41:c5:fe:e5:7a:f8:d1:ff:eb:2a:bc:29:2e:
37:d2:7b:63:97:85:54:19:b4:82:ae:e6:3f:bb:94:
bd:4e:9f:04:39:0d:53:09:4f:96:73:fd:ae:d4:0b:
ff:e8:8b:ed:c5:5d:49:0a:a3:e4:e9:a3:c9:22:ed:
f0:12:47:1d:0d:9d:65:f7:1e:db:47:f6:79:43:43:
d4:ec:f1:76:36:24:35:59:a2:a6:3a:ad:b9:e5:71:
3c:ad:e8:e2:b6:e7:84:07:9d:61:a7:e8:07:8e:02:
af:d4:dd:b3:c3:df:31:a6:bf:e1:78:c3:7b:86:e2:
63:5a:ea:92:31:13:2e:38:19:ab:e0:d7:f3:48:92:
3d:72:d4:73:5a:35:17:8d:40:c8:f4:31:8d:c8:88:
53:59:76:df:1c:b8:1e:23:7a:0e:2a:7a:a3:5f:c2:
29:bd:36:4f:8a:fb:88:2a:cd:83:1f:42:06:6a:f5:
cd:37:db:8e:2a:8b:b0:81:86:50:59:80:52:7b:a7:
36:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:03:68:27:9B:89:E5:12:D5:4C:A7:A6:44:B1:3F:2B:F0:8C:38:FF
X509v3 Authority Key Identifier:
keyid:D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/3130332e3231352e33372e302f32342d3234203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.215.37.0/24
Signature Algorithm: sha256WithRSAEncryption
91:a0:73:53:a0:02:82:24:d8:84:cc:97:f1:62:e4:31:25:91:
3b:06:38:89:d7:5f:a1:4e:50:a4:ab:6f:f3:38:15:45:74:d5:
91:50:2b:4f:a1:30:56:76:6f:92:bd:f4:3b:b5:79:0d:21:74:
54:6a:86:fe:cb:48:25:4c:5b:a3:3a:20:4a:ad:dd:ce:11:66:
b2:f8:68:5a:d2:22:f0:39:de:00:3c:9e:2c:f9:74:e9:e1:ac:
64:c6:e6:cd:1f:b1:5a:92:0e:44:ce:a1:ee:46:ab:de:91:0f:
b9:d7:9b:a3:6e:f1:ce:3d:2e:a7:04:f3:04:e1:ed:68:c4:f0:
26:1e:14:6e:7a:9e:0e:78:44:dc:27:72:39:15:a3:e8:be:9b:
ed:c7:d3:41:ed:b1:7f:31:82:f5:80:ca:46:3f:d2:51:65:9a:
c7:fc:f6:48:8a:5b:b4:aa:30:c0:10:e3:26:bf:72:cb:67:4e:
1a:49:47:24:6e:0e:a5:43:81:e7:a5:07:1c:f6:c4:95:21:98:
50:5b:70:7c:96:4a:21:80:86:4a:c1:62:a4:04:22:5c:72:ba:
9c:d5:80:06:3e:bf:54:ae:47:7a:fc:96:b2:5c:18:e4:4c:41:
7b:98:c8:66:37:5f:9d:b8:7e:5e:9f:a8:20:e5:14:ad:05:62:
4c:7d:a3:43
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:01:38 2026 by rpki-client