
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e33362e3137322e302f32332d3233203d3e203535393934.roa
File: 3130332e33362e3137322e302f32332d3233203d3e203535393934.roa (raw, json)
Hash identifier: sE9x552WaMVIN9qZcVAdCkesy5eyjevIZfes/5PPpDU=
Subject key identifier: 6F:B0:9F:22:F5:96:C6:80:BF:6F:B3:2C:E6:55:0A:80:6E:7C:9C:0D
Certificate issuer: /CN=C89881B315F7E21BA948CF9CB11D1AC422106426
Certificate serial: 564198DFF86A4B74192882969C98ED3BBF63E827
Authority key identifier: C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e33362e3137322e302f32332d3233203d3e203535393934.roa
Signing time: Fri 17 Apr 2026 09:31:19 +0000
ROA not before: Fri 17 Apr 2026 09:26:19 +0000
ROA not after: Fri 16 Apr 2027 09:31:19 +0000
asID: 55994
IP address blocks: 103.36.172.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl
rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 12:52:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:41:98:df:f8:6a:4b:74:19:28:82:96:9c:98:ed:3b:bf:63:e8:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C89881B315F7E21BA948CF9CB11D1AC422106426
Validity
Not Before: Apr 17 09:26:19 2026 GMT
Not After : Apr 16 09:31:19 2027 GMT
Subject: CN=6FB09F22F596C680BF6FB32CE6550A806E7C9C0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c2:b4:6f:9c:b5:05:d1:10:69:a3:8d:00:40:
cc:6d:39:2a:8e:b1:45:95:c0:bb:fe:4a:55:19:56:
b9:68:99:3a:50:03:17:bc:c6:cf:a1:38:64:9a:24:
77:ff:e9:65:70:a8:3f:9d:ef:a0:ff:8e:08:29:ec:
f3:9b:09:69:ad:68:4f:95:4e:50:1a:40:b2:06:30:
63:57:38:66:fb:5c:9a:65:f6:8f:a1:c5:fd:d8:c1:
1c:a2:66:88:17:42:51:07:3e:d6:f7:90:fc:17:bd:
4e:81:84:45:10:0c:fe:3c:8e:27:3f:52:74:1c:f0:
be:83:46:08:36:b8:27:be:0a:4b:66:06:63:3f:9e:
bb:2b:44:74:20:6a:0c:46:96:57:d8:3e:97:37:84:
be:c9:21:8f:6d:5c:e5:b3:1b:be:82:f5:39:d7:b3:
9e:4e:b4:71:7b:de:b4:d1:26:3a:e3:0c:86:55:3d:
de:36:b1:41:7e:bc:5f:b0:f2:c6:f9:2e:73:e0:fa:
0f:0e:87:57:00:ce:ef:a4:7e:86:e5:2b:fb:b3:5e:
21:c4:0b:3b:c8:64:e1:df:3e:f8:bd:b4:bb:c0:6b:
8f:b8:e9:db:e3:1c:b1:b5:08:ea:0f:f4:74:97:1b:
0e:3a:71:08:da:39:08:86:7a:40:ba:d6:c1:fd:fd:
ca:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B0:9F:22:F5:96:C6:80:BF:6F:B3:2C:E6:55:0A:80:6E:7C:9C:0D
X509v3 Authority Key Identifier:
keyid:C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e33362e3137322e302f32332d3233203d3e203535393934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.36.172.0/23
Signature Algorithm: sha256WithRSAEncryption
45:b1:fe:4e:7c:05:f3:4a:e2:bd:3a:c4:9b:aa:f3:ac:c5:f6:
c0:52:4a:ed:c2:19:8f:84:6b:61:14:49:2c:c7:01:09:75:7f:
02:da:4e:17:02:a6:39:6d:6c:b3:8b:16:4f:9a:41:69:01:d7:
18:ad:69:76:6d:95:39:83:42:13:e3:ef:ca:43:77:23:3f:9f:
b4:bc:64:51:a4:53:55:ba:cd:b2:d3:d3:d7:2d:0a:cb:dd:df:
40:0e:0f:44:28:03:36:a8:2f:d1:d3:14:99:06:0f:1d:b7:ed:
24:63:70:f7:cb:0f:1a:1d:5e:45:98:d4:33:52:85:d4:8a:7c:
00:c9:7d:e1:61:85:65:b4:a5:6c:a3:f5:e7:57:0e:59:64:d7:
2a:70:49:a8:95:75:74:ab:ad:b4:08:30:ed:7e:fb:6d:60:a8:
ce:b2:88:85:e7:c0:c5:27:bc:aa:a0:b9:42:ef:4a:b5:2f:26:
5d:66:b2:37:2c:23:d3:76:5f:83:09:6e:d3:e9:6a:43:94:e7:
2b:d5:7b:9e:b7:06:76:0f:6d:21:a0:35:73:e5:71:d9:6a:d7:
f7:c0:2d:1f:2c:e0:23:84:80:1d:cd:8e:26:b8:d5:01:71:c0:
ac:b5:6f:a9:9c:44:73:76:1d:fc:55:ec:6f:5c:9d:d4:ee:a6:
fb:86:25:f0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:52:22 2026 by rpki-client