
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e33362e3137322e302f32342d3234203d3e2034383131.roa
File: 3130332e33362e3137322e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier: UbBsjn7F8iaNss7OYretxEuCYbx7YH55K0Zjc4STqq4=
Subject key identifier: 8C:EC:82:47:06:68:39:8B:12:E6:6C:63:02:41:D4:24:E4:4E:99:DF
Certificate issuer: /CN=C89881B315F7E21BA948CF9CB11D1AC422106426
Certificate serial: 6458E5D708E487B40B00E7D3A7EA7D5500A00299
Authority key identifier: C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e33362e3137322e302f32342d3234203d3e2034383131.roa
Signing time: Fri 17 Apr 2026 09:31:19 +0000
ROA not before: Fri 17 Apr 2026 09:26:19 +0000
ROA not after: Fri 16 Apr 2027 09:31:19 +0000
asID: 4811
IP address blocks: 103.36.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl
rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 12:52:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:58:e5:d7:08:e4:87:b4:0b:00:e7:d3:a7:ea:7d:55:00:a0:02:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C89881B315F7E21BA948CF9CB11D1AC422106426
Validity
Not Before: Apr 17 09:26:19 2026 GMT
Not After : Apr 16 09:31:19 2027 GMT
Subject: CN=8CEC82470668398B12E66C630241D424E44E99DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9e:a9:0a:78:aa:bc:4c:67:db:58:7c:36:2d:
2b:fb:8e:39:d6:63:c5:d6:bc:c1:21:dd:8d:69:9c:
8b:49:61:e9:9c:94:28:39:55:41:a0:bd:f8:cb:da:
f2:a3:b2:a7:77:1d:a7:41:d5:2d:b8:38:8f:0c:4a:
8d:e8:b8:b2:02:d6:3a:6a:59:18:b6:df:5b:ba:ac:
c7:5f:cf:47:1d:e3:26:86:1f:ec:08:b9:d5:4c:94:
95:84:78:cc:22:bc:b8:a0:5f:13:fe:0d:8e:98:3c:
9e:01:26:d3:a6:f0:70:3b:3f:01:f1:bd:a4:eb:7b:
c4:3e:78:19:96:d2:20:59:6e:ed:39:1b:5c:bd:92:
63:19:f5:4c:c7:6d:0d:bf:3a:71:64:eb:11:65:f3:
ea:2e:d3:01:18:ed:d6:c6:10:e4:53:2b:57:96:c5:
b6:a5:35:d8:74:98:b6:eb:f4:dc:62:99:57:ff:d3:
2f:18:d6:1b:69:0a:fb:e7:93:c4:6d:3d:e2:ba:89:
de:0d:81:91:3d:80:12:e0:e9:27:0f:9c:70:15:98:
35:f7:e9:55:1d:d9:4f:c4:a3:13:18:e8:1a:99:bf:
bd:d8:c9:88:38:de:b6:27:85:b3:bb:10:72:2c:ad:
2a:83:34:8a:f0:43:ad:e4:93:67:dd:90:7a:7f:af:
8b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EC:82:47:06:68:39:8B:12:E6:6C:63:02:41:D4:24:E4:4E:99:DF
X509v3 Authority Key Identifier:
keyid:C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e33362e3137322e302f32342d3234203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.36.172.0/24
Signature Algorithm: sha256WithRSAEncryption
71:76:a1:aa:fe:0c:73:52:32:fd:1d:29:2f:94:8a:27:ab:5a:
bb:ec:63:e6:77:40:4f:59:47:aa:5b:e0:51:69:f6:5f:12:ba:
23:5c:74:fa:15:f0:63:2c:78:7c:76:58:a9:e9:bd:e2:01:c4:
43:ed:8a:c4:4d:f4:ec:29:a6:2d:22:26:9b:ff:4e:9b:2b:dd:
72:66:10:bb:de:96:34:1e:d1:be:3e:37:25:43:54:82:bb:c9:
3b:29:72:9c:40:3d:79:7b:b6:a2:d0:e1:2b:64:ec:e0:a6:2e:
fe:2f:23:b2:a1:cc:d5:1c:cb:55:0d:ca:25:2b:a0:dc:59:c1:
61:9d:6e:9c:bf:4a:d1:c5:c3:87:56:b4:14:90:75:fa:c9:33:
a0:bf:50:fa:d7:d4:b9:31:cb:ed:29:7a:18:97:cf:eb:78:98:
c8:02:d4:13:8f:f4:ed:33:5d:b7:4c:76:6e:6b:44:e8:7d:27:
e3:aa:82:33:06:d4:9d:1b:25:38:e3:47:43:5e:ab:51:f9:15:
1f:12:c8:8e:59:b9:7d:8a:db:3d:0a:e4:a3:16:6e:0f:a9:81:
57:94:e3:1e:cd:fd:9f:33:d5:75:3a:6d:ec:b1:d8:3c:6c:99:
83:75:69:44:51:41:b1:1d:ec:f0:8e:ae:0b:fa:84:a8:75:2e:
49:69:67:c3
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUZFjl1wjkh7QLAOfTp+p9VQCgApkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQy
MjEwNjQyNjAeFw0yNjA0MTcwOTI2MTlaFw0yNzA0MTYwOTMxMTlaMDMxMTAvBgNV
BAMTKDhDRUM4MjQ3MDY2ODM5OEIxMkU2NkM2MzAyNDFENDI0RTQ0RTk5REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDonqkKeKq8TGfbWHw2LSv7jjnW
Y8XWvMEh3Y1pnItJYemclCg5VUGgvfjL2vKjsqd3HadB1S24OI8MSo3ouLIC1jpq
WRi231u6rMdfz0cd4yaGH+wIudVMlJWEeMwivLigXxP+DY6YPJ4BJtOm8HA7PwHx
vaTre8Q+eBmW0iBZbu05G1y9kmMZ9UzHbQ2/OnFk6xFl8+ou0wEY7dbGEORTK1eW
xbalNdh0mLbr9NximVf/0y8Y1htpCvvnk8RtPeK6id4NgZE9gBLg6ScPnHAVmDX3
6VUd2U/EoxMY6BqZv73YyYg43rYnhbO7EHIsrSqDNIrwQ63kk2fdkHp/r4vRAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUjOyCRwZoOYsS5mxjAkHUJOROmd8wHwYDVR0j
BBgwFoAUyJiBsxX34hupSM+csR0axCIQZCYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjYzMjA2Mjk5NzE2ODEzMS8wL0M4OTg4MUIzMTVGN0UyMUJBOTQ4Q0Y5Q0IxMUQx
QUM0MjIxMDY0MjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQyMjEwNjQyNi5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2NjMyMDYyOTk3MTY4MTMxLzAvMzEzMDMzMmUzMzM2
MmUzMTM3MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzEzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGckrDANBgkqhkiG9w0BAQsFAAOCAQEAcXahqv4Mc1Iy/R0pL5SKJ6tau+xj
5ndAT1lHqlvgUWn2XxK6I1x0+hXwYyx4fHZYqem94gHEQ+2KxE307CmmLSImm/9O
myvdcmYQu96WNB7Rvj43JUNUgrvJOylynEA9eXu2otDhK2Ts4KYu/i8jsqHM1RzL
VQ3KJSug3FnBYZ1unL9K0cXDh1a0FJB1+skzoL9Q+tfUuTHL7Sl6GJfP63iYyALU
E4/07TNdt0x2bmtE6H0n46qCMwbUnRslOONHQ16rUfkVHxLIjlm5fYrbPQrkoxZu
D6mBV5TjHs39nzPVdTpt7LHYPGyZg3VpRFFBsR3s8I6uC/qEqHUuSWlnww==
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:52:21 2026 by rpki-client