
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e33362e3137322e302f32342d3234203d3e203535393934.roa
File: 3130332e33362e3137322e302f32342d3234203d3e203535393934.roa (raw, json)
Hash identifier: I5UGbRoOfUU5QBdCSlSCqmpqdbB7I8akmT6RfSVDKBI=
Subject key identifier: 30:EF:3C:09:5C:55:CA:6D:1A:61:F5:9E:3C:3C:05:A7:D6:9F:56:31
Certificate issuer: /CN=C89881B315F7E21BA948CF9CB11D1AC422106426
Certificate serial: 094B996A4303617C360B5CC2114FBAF7A98E920B
Authority key identifier: C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e33362e3137322e302f32342d3234203d3e203535393934.roa
Signing time: Fri 17 Apr 2026 09:31:19 +0000
ROA not before: Fri 17 Apr 2026 09:26:19 +0000
ROA not after: Fri 16 Apr 2027 09:31:19 +0000
asID: 55994
IP address blocks: 103.36.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl
rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 12:52:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:4b:99:6a:43:03:61:7c:36:0b:5c:c2:11:4f:ba:f7:a9:8e:92:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C89881B315F7E21BA948CF9CB11D1AC422106426
Validity
Not Before: Apr 17 09:26:19 2026 GMT
Not After : Apr 16 09:31:19 2027 GMT
Subject: CN=30EF3C095C55CA6D1A61F59E3C3C05A7D69F5631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:65:a5:30:b5:1e:6c:d0:79:cf:6c:49:5d:02:
bd:52:96:2e:05:46:70:07:f3:a4:04:8c:07:52:c9:
d3:d0:20:80:a0:43:af:d6:76:3d:c7:3a:a6:bc:ec:
2b:27:10:db:bb:2f:d3:bf:c8:ce:43:a8:1c:1a:46:
d3:69:04:9b:f8:db:3e:8a:48:3b:ec:4c:0a:63:12:
17:80:c2:87:67:5c:eb:e0:5c:bc:4b:04:25:99:96:
d0:ad:a4:ca:57:e2:37:f5:1c:08:59:2c:6b:65:4e:
da:0b:6d:4b:9b:47:32:6e:7a:8e:2f:69:b4:02:1d:
ee:93:e7:22:f6:72:f6:03:a2:25:d5:80:72:48:b8:
b6:2d:05:5f:4f:db:34:bd:90:9a:c8:a9:b2:7e:be:
03:5a:cc:49:2b:3e:48:ef:45:c0:dd:81:8c:89:ed:
8a:dd:9e:e2:6f:ee:ea:b2:db:0a:da:06:52:29:dd:
fb:27:fc:d2:bf:7a:4e:0e:8c:b7:d8:47:69:ea:e3:
55:c0:65:22:c2:29:50:1d:e7:70:29:70:fc:8e:7f:
d6:a9:ce:44:e4:7c:3f:64:f8:1a:09:19:b7:3b:ff:
07:c8:79:e8:89:01:d1:40:67:02:9f:dd:4d:ce:0c:
3a:de:0f:c1:7b:9a:3c:3b:20:8e:cd:66:30:02:71:
15:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EF:3C:09:5C:55:CA:6D:1A:61:F5:9E:3C:3C:05:A7:D6:9F:56:31
X509v3 Authority Key Identifier:
keyid:C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e33362e3137322e302f32342d3234203d3e203535393934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.36.172.0/24
Signature Algorithm: sha256WithRSAEncryption
39:b9:81:2f:d2:6a:2b:4d:cb:95:20:db:e5:69:39:ff:4f:03:
b9:1f:47:8d:ef:5c:3c:e1:d9:13:1f:24:39:c2:58:69:ee:c9:
0d:e2:64:a3:35:1a:35:1c:28:17:fa:b4:da:64:b0:b0:6b:09:
13:c1:61:3e:9b:9f:20:4a:b9:45:c6:c8:e1:ab:b2:03:95:18:
6c:3b:05:54:3c:63:cb:63:bd:11:6b:4d:16:79:d9:59:d7:bc:
e9:fc:89:22:e2:c5:44:b0:e4:b7:b6:b1:89:da:90:0b:ec:63:
25:6a:98:67:37:20:08:f0:56:3e:9c:86:87:73:65:70:34:61:
ec:ae:ae:00:71:94:ca:61:cc:58:f8:81:df:71:47:19:fb:13:
6d:aa:fa:ab:48:5e:35:1b:93:30:df:07:00:3e:37:57:9e:6c:
aa:cb:6d:77:fa:50:4c:be:06:b9:f9:53:45:05:4d:ce:26:7e:
d3:a1:95:27:47:6c:e9:48:38:22:df:8c:6f:2a:67:d5:f8:bd:
20:13:aa:38:cb:0a:6e:5b:74:c1:14:f1:b6:18:fa:d4:8f:5d:
8d:0a:f3:0b:b4:0c:1f:37:f1:ce:07:f1:ea:d8:b5:6c:1f:12:
31:f6:c8:08:70:4c:ba:4d:b7:82:c8:d0:d1:50:ca:12:d7:70:
b2:5f:4a:da
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:52:59 2026 by rpki-client