
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e3232302e3136372e302f32342d3234203d3e20313338343231.roa
File: 3130332e3232302e3136372e302f32342d3234203d3e20313338343231.roa (raw, json)
Hash identifier: LivEuvfkVA/q/iF4Epz6/x683cKqEFBnptjCon3AyBQ=
Subject key identifier: 1F:06:94:A5:C4:4D:84:B8:ED:B8:CF:A0:8D:65:EE:A1:23:AC:CD:1A
Certificate issuer: /CN=C89881B315F7E21BA948CF9CB11D1AC422106426
Certificate serial: 286E675DB7E4116036312A3903C1375087586ADF
Authority key identifier: C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e3232302e3136372e302f32342d3234203d3e20313338343231.roa
Signing time: Fri 17 Apr 2026 08:40:10 +0000
ROA not before: Fri 17 Apr 2026 08:35:10 +0000
ROA not after: Fri 16 Apr 2027 08:40:10 +0000
asID: 138421
IP address blocks: 103.220.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl
rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 12:52:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:6e:67:5d:b7:e4:11:60:36:31:2a:39:03:c1:37:50:87:58:6a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C89881B315F7E21BA948CF9CB11D1AC422106426
Validity
Not Before: Apr 17 08:35:10 2026 GMT
Not After : Apr 16 08:40:10 2027 GMT
Subject: CN=1F0694A5C44D84B8EDB8CFA08D65EEA123ACCD1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cb:b8:a0:20:d5:6b:88:ff:7a:ea:71:d6:da:
e0:83:b4:53:6a:60:bf:fd:85:e2:b3:57:94:d5:22:
86:2d:73:9f:27:d5:e6:0b:fd:2b:86:ec:15:3d:ba:
c8:1a:55:83:6f:94:74:7c:f9:cd:9d:70:18:96:dc:
53:95:ca:1c:2c:2c:e8:77:4f:8c:08:f2:ec:7d:70:
4c:4d:4b:33:c4:ff:66:50:df:15:51:97:21:90:5d:
94:ae:37:77:bb:48:3f:15:37:19:aa:65:28:95:40:
23:8a:94:8e:72:f6:0b:e1:5a:b5:ea:96:8c:07:77:
eb:f4:6a:d2:e3:db:28:d8:5e:45:7b:95:e1:24:7e:
0a:26:a0:66:59:31:cf:23:a1:ab:2b:a6:53:15:f7:
83:0f:89:2c:73:c7:4e:32:36:49:87:6f:4b:02:6a:
fe:1e:d8:75:2d:f6:b5:8d:68:c9:0b:85:42:e5:4b:
b0:18:f6:a4:d3:0a:85:f1:bb:f8:f9:70:14:eb:96:
0c:86:43:92:dc:cf:58:b5:ac:de:66:38:1e:7c:8c:
c3:cb:6a:f7:cc:e8:9a:9e:16:d2:14:06:ea:9c:c1:
70:22:1b:bc:ac:a8:eb:8b:ef:68:88:71:33:9e:32:
bb:e8:4c:e1:81:4d:3c:8f:0d:bb:f8:18:fd:42:00:
80:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:06:94:A5:C4:4D:84:B8:ED:B8:CF:A0:8D:65:EE:A1:23:AC:CD:1A
X509v3 Authority Key Identifier:
keyid:C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e3232302e3136372e302f32342d3234203d3e20313338343231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.220.167.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:3e:65:62:11:a1:2b:31:95:44:69:7f:cb:93:4c:2b:ea:e1:
50:ae:a9:ce:51:8e:2e:85:83:05:5a:09:9b:e2:c1:c3:eb:6f:
06:7a:80:d4:81:e9:95:63:cf:4b:f2:93:b9:e3:ae:aa:e2:77:
75:15:33:81:24:72:88:f4:13:19:54:a0:51:95:f3:10:ab:e3:
bf:f4:13:d9:83:91:5a:17:11:48:80:d6:d5:f0:77:59:c8:81:
0a:b5:f6:f8:02:44:d4:3e:61:fd:ad:37:a9:be:9f:6a:91:dc:
54:b8:00:09:7d:0e:cc:bc:61:44:a1:17:7c:33:70:09:78:df:
9b:e4:49:d7:3a:58:02:8c:4d:42:8b:6d:ff:f6:ed:ad:de:8c:
80:13:5b:24:62:82:1e:cb:14:00:d4:a4:2d:0b:5e:24:94:ad:
c4:e3:17:d6:22:c2:bb:e5:e9:93:7f:f6:a4:86:94:16:2a:4a:
c2:57:0f:41:84:69:87:49:61:62:a3:71:62:21:8c:6d:36:03:
d3:70:33:79:17:ae:58:c4:3d:74:91:94:64:fd:5a:89:d9:da:
23:ca:1d:17:aa:b5:1a:7c:47:22:57:e0:53:ef:16:88:14:c5:
d6:45:72:2c:97:64:92:bb:1c:32:0b:b8:da:a0:38:d1:29:14:
28:a6:71:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:16:45 2026 by rpki-client