
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3230332e3133352e3131302e302f32342d3234203d3e203536303436.roa
File: 3230332e3133352e3131302e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier: fh9fS78iKTHn8OIFflYokzcy8pnDMzkevRXN0nwYXwc=
Subject key identifier: 31:AF:0E:0E:16:CE:62:2D:1B:EC:B3:98:E7:50:00:A6:CF:8D:80:DD
Certificate issuer: /CN=709E5125176627846677AF908E76CAE21FB95460
Certificate serial: E15338AA4D586AC18CC2D3416679CCCB50818E
Authority key identifier: 70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3230332e3133352e3131302e302f32342d3234203d3e203536303436.roa
Signing time: Tue 14 Apr 2026 07:29:25 +0000
ROA not before: Tue 14 Apr 2026 07:24:25 +0000
ROA not after: Tue 13 Apr 2027 07:29:25 +0000
asID: 56046
IP address blocks: 203.135.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl
rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
e1:53:38:aa:4d:58:6a:c1:8c:c2:d3:41:66:79:cc:cb:50:81:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709E5125176627846677AF908E76CAE21FB95460
Validity
Not Before: Apr 14 07:24:25 2026 GMT
Not After : Apr 13 07:29:25 2027 GMT
Subject: CN=31AF0E0E16CE622D1BECB398E75000A6CF8D80DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d5:70:8a:e3:ca:41:52:cb:7f:2b:53:60:a8:
a1:dc:37:58:4d:e7:f6:ef:15:30:c3:b0:23:25:09:
12:b3:36:b2:a6:5f:94:11:b2:91:e5:d9:d1:2c:b4:
70:e8:18:99:c7:0b:f4:6e:f5:f3:25:07:c8:93:29:
91:4c:e8:7d:d1:f8:e0:fd:5d:36:92:ff:1c:7d:06:
31:98:65:3c:a6:53:fb:3a:84:48:97:c4:f2:13:c6:
08:51:a9:d5:6f:cc:0f:fd:0d:0d:e4:fe:ad:a8:5f:
b8:6f:ad:72:df:ca:80:3e:1f:6b:68:6c:ce:f8:53:
e5:f6:5d:57:e8:cf:eb:62:89:07:53:6f:cc:e1:25:
e5:4a:d7:0f:59:26:65:03:db:25:71:9e:e7:82:af:
0a:b6:b7:14:6a:1c:03:0f:53:9e:47:95:99:00:8d:
fd:71:4d:1b:f5:f8:e1:e5:c6:f8:ce:78:86:fc:11:
a1:4e:35:bd:00:46:8d:43:1d:5f:96:d2:be:44:e5:
53:b7:70:87:c7:ec:f7:f3:a7:13:5a:9d:d8:7e:e6:
ec:71:06:ae:f3:87:bb:cc:42:e5:da:07:c4:39:7a:
57:53:7a:f0:93:fb:64:3e:7e:e9:78:97:aa:0c:d5:
61:df:eb:6e:78:7a:95:64:cc:8a:86:dc:69:a2:e7:
5a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AF:0E:0E:16:CE:62:2D:1B:EC:B3:98:E7:50:00:A6:CF:8D:80:DD
X509v3 Authority Key Identifier:
keyid:70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3230332e3133352e3131302e302f32342d3234203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.135.110.0/24
Signature Algorithm: sha256WithRSAEncryption
97:b8:eb:8c:83:b9:6e:a1:f4:84:04:38:e7:ce:a3:13:7c:8c:
78:75:45:8e:6e:4d:40:4f:af:a6:2e:10:90:2a:5e:21:d2:d8:
00:aa:76:3a:03:8d:3b:ff:ac:60:e0:49:56:fa:2e:42:5a:76:
ea:18:9a:22:7e:73:5e:42:10:54:75:ef:80:a4:77:f5:e1:e9:
e1:c1:18:21:de:75:42:e3:e1:bf:9f:16:bb:ec:1c:24:78:25:
6c:f3:16:a7:08:15:1a:76:a8:2c:bb:6f:6e:24:e8:7f:23:c8:
1d:57:b2:33:ff:f7:64:64:44:29:8d:23:6a:56:48:d0:7b:1a:
da:5b:f7:93:b4:1f:d5:4c:35:7d:ff:12:4a:07:d6:e7:de:f9:
08:e8:68:25:93:16:ff:f8:2e:1c:e0:e7:49:9e:4f:49:cc:a3:
d2:30:3c:97:2d:9b:39:42:bf:45:56:f4:24:df:22:07:26:14:
da:84:c7:6b:bc:49:85:61:d7:e3:cc:85:cc:48:88:87:41:8c:
54:2f:85:b4:e1:21:81:fc:17:d8:7d:86:74:b9:16:28:62:00:
c3:69:1c:fd:21:22:08:53:88:21:eb:94:2b:b8:51:1d:6a:af:
bc:60:c9:2e:b6:80:a6:7a:cb:ca:89:b0:ec:af:72:76:83:99:
8f:d9:d6:ef
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUAOFTOKpNWGrBjMLTQWZ5zMtQgY4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIx
RkI5NTQ2MDAeFw0yNjA0MTQwNzI0MjVaFw0yNzA0MTMwNzI5MjVaMDMxMTAvBgNV
BAMTKDMxQUYwRTBFMTZDRTYyMkQxQkVDQjM5OEU3NTAwMEE2Q0Y4RDgwREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp1XCK48pBUst/K1NgqKHcN1hN
5/bvFTDDsCMlCRKzNrKmX5QRspHl2dEstHDoGJnHC/Ru9fMlB8iTKZFM6H3R+OD9
XTaS/xx9BjGYZTymU/s6hEiXxPITxghRqdVvzA/9DQ3k/q2oX7hvrXLfyoA+H2to
bM74U+X2XVfoz+tiiQdTb8zhJeVK1w9ZJmUD2yVxnueCrwq2txRqHAMPU55HlZkA
jf1xTRv1+OHlxvjOeIb8EaFONb0ARo1DHV+W0r5E5VO3cIfH7PfzpxNandh+5uxx
Bq7zh7vMQuXaB8Q5eldTevCT+2Q+ful4l6oM1WHf6254epVkzIqG3Gmi51pdAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUMa8ODhbOYi0b7LOY51AAps+NgN0wHwYDVR0j
BBgwFoAUcJ5RJRdmJ4Rmd6+QjnbK4h+5VGAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjMzMDg1OTA5MjM3NzYwMS8wLzcwOUU1MTI1MTc2NjI3ODQ2Njc3QUY5MDhFNzZD
QUUyMUZCOTU0NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIxRkI5NTQ2MC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwOTYzMzA4NTkwOTIzNzc2MDEvMC8zMjMwMzMyZTMx
MzMzNTJlMzEzMTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAMuHbjANBgkqhkiG9w0BAQsFAAOCAQEAl7jrjIO5bqH0hAQ4586j
E3yMeHVFjm5NQE+vpi4QkCpeIdLYAKp2OgONO/+sYOBJVvouQlp26hiaIn5zXkIQ
VHXvgKR39eHp4cEYId51QuPhv58Wu+wcJHglbPMWpwgVGnaoLLtvbiTofyPIHVey
M//3ZGREKY0jalZI0Hsa2lv3k7Qf1Uw1ff8SSgfW5975COhoJZMW//guHODnSZ5P
Scyj0jA8ly2bOUK/RVb0JN8iByYU2oTHa7xJhWHX48yFzEiIh0GMVC+FtOEhgfwX
2H2GdLkWKGIAw2kc/SEiCFOIIeuUK7hRHWqvvGDJLraApnrLyomw7K9ydoOZj9nW
7w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:50:24 2026 by rpki-client