
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e3233382e3138342e302f32332d3233203d3e203535393934.roa
File: 3130332e3233382e3138342e302f32332d3233203d3e203535393934.roa (raw, json)
Hash identifier: U86y2pWfRpvA/Qc80njgiyVqAEwVkTh9omuYjbYPgmw=
Subject key identifier: A2:D4:76:B7:AB:35:22:F4:F1:3E:64:0A:20:85:7C:F2:E1:34:FC:89
Certificate issuer: /CN=C89881B315F7E21BA948CF9CB11D1AC422106426
Certificate serial: 5022598AAD8946641A3F1F477498D5D397EA19AA
Authority key identifier: C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e3233382e3138342e302f32332d3233203d3e203535393934.roa
Signing time: Fri 17 Apr 2026 10:04:03 +0000
ROA not before: Fri 17 Apr 2026 09:59:03 +0000
ROA not after: Fri 16 Apr 2027 10:04:03 +0000
asID: 55994
IP address blocks: 103.238.184.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl
rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 12:52:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:22:59:8a:ad:89:46:64:1a:3f:1f:47:74:98:d5:d3:97:ea:19:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C89881B315F7E21BA948CF9CB11D1AC422106426
Validity
Not Before: Apr 17 09:59:03 2026 GMT
Not After : Apr 16 10:04:03 2027 GMT
Subject: CN=A2D476B7AB3522F4F13E640A20857CF2E134FC89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f0:6e:68:1d:82:87:3a:9d:00:41:1a:6d:d2:
fe:bf:89:ec:c6:c7:83:5b:fa:82:3f:44:95:13:03:
d5:00:23:2e:45:aa:6e:d8:d9:a6:60:4c:7f:9e:4f:
54:c7:04:74:46:df:87:a7:b1:9f:57:65:6d:5b:28:
3b:da:11:de:a6:77:ce:91:22:be:4d:5d:0f:68:fd:
21:23:27:8b:11:8a:d4:76:1d:3c:83:03:eb:1a:4e:
22:93:71:fa:52:13:db:06:2a:03:2e:9c:c0:e0:50:
de:14:9a:ea:46:ee:7f:dc:3c:5c:69:1d:ac:3c:f2:
9d:af:f9:52:e5:d4:e2:21:de:a5:27:1b:07:dd:ab:
7f:4b:3c:fc:bd:c4:8e:7a:43:b9:98:cc:af:cf:bc:
4b:d7:01:c0:2f:3c:e1:1b:89:14:16:a8:b6:12:b4:
65:33:67:71:c5:8e:7d:74:5f:71:7d:f3:dd:91:7a:
b2:f4:44:eb:23:d3:61:2c:e0:ce:01:02:67:26:28:
7e:cf:14:5b:6e:94:40:27:1f:06:a8:01:77:c4:07:
b7:90:85:59:54:c1:0a:ae:2e:1f:c0:15:e4:40:cf:
1e:1f:40:31:81:1a:07:98:e2:89:4d:6b:7b:ce:de:
40:0d:b5:a0:9f:ff:70:77:35:56:db:83:42:ad:cb:
6c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D4:76:B7:AB:35:22:F4:F1:3E:64:0A:20:85:7C:F2:E1:34:FC:89
X509v3 Authority Key Identifier:
keyid:C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e3233382e3138342e302f32332d3233203d3e203535393934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.184.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:55:ca:2d:9e:08:c9:cd:df:19:52:08:e0:b7:07:4e:f2:86:
4c:b7:af:e4:a1:bd:27:d3:f5:09:04:4a:f1:99:0b:64:8d:02:
c2:67:9c:ad:fd:75:5a:48:d3:94:0b:72:f8:85:27:dc:88:ef:
f1:8f:02:4f:aa:47:7a:b8:7a:1a:5a:01:b0:68:bb:f8:e4:02:
ea:fd:6d:c8:f3:ef:04:74:57:62:f0:5c:a0:40:50:b9:85:43:
a4:49:5e:61:a9:e7:7d:4b:62:be:00:4e:16:08:52:0c:39:e2:
28:a8:4e:bb:90:4f:9a:e1:67:d8:b2:ad:27:61:57:61:da:35:
3a:26:9b:78:0f:12:cd:d4:4b:63:8d:58:1c:5c:bc:e0:d2:9e:
fe:f9:38:fe:54:42:44:ca:73:c3:9a:fc:3b:ad:6a:f1:4f:ab:
3b:cc:ea:05:19:21:94:22:2d:bc:40:f7:70:56:5e:9d:4c:d6:
2c:a5:31:54:86:86:33:ed:94:a5:16:b3:a3:78:69:28:84:c1:
1b:84:f6:e7:0a:60:5f:55:ac:49:a2:81:35:44:53:5a:11:c7:
e4:7c:2c:7a:d1:85:5b:ab:7b:fe:fd:e4:52:d4:50:39:33:1a:
79:66:3c:dd:d9:f0:0d:13:f7:e8:b7:9a:9b:e8:2f:0f:5f:fb:
c5:ae:6c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:53:00 2026 by rpki-client