
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e33362e3137332e302f32342d3234203d3e2034383131.roa
File: 3130332e33362e3137332e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier: Al9N7MzoQ7x80Xo+j+nATgNvu3q4u9jvM+lB01r74rc=
Subject key identifier: 6A:F3:F5:93:BA:A0:17:25:5B:3B:73:79:46:81:DF:79:28:C1:5A:E8
Certificate issuer: /CN=C89881B315F7E21BA948CF9CB11D1AC422106426
Certificate serial: 760BB28BB84839FC725E305B6922FB0F3165EC17
Authority key identifier: C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e33362e3137332e302f32342d3234203d3e2034383131.roa
Signing time: Fri 17 Apr 2026 09:31:19 +0000
ROA not before: Fri 17 Apr 2026 09:26:19 +0000
ROA not after: Fri 16 Apr 2027 09:31:19 +0000
asID: 4811
IP address blocks: 103.36.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl
rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 12:52:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:0b:b2:8b:b8:48:39:fc:72:5e:30:5b:69:22:fb:0f:31:65:ec:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C89881B315F7E21BA948CF9CB11D1AC422106426
Validity
Not Before: Apr 17 09:26:19 2026 GMT
Not After : Apr 16 09:31:19 2027 GMT
Subject: CN=6AF3F593BAA017255B3B73794681DF7928C15AE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:df:50:a4:c3:6c:59:3a:36:2c:f5:5b:ab:36:
b8:86:1f:91:e5:48:e0:57:8f:ec:73:88:50:9c:06:
62:8c:0e:70:94:77:90:71:f0:32:e7:ef:b4:a7:d7:
fe:61:4f:7e:d7:20:78:25:37:06:81:a4:3c:1f:b7:
fc:99:4b:03:24:bf:5d:7d:ce:79:df:61:59:03:32:
a2:34:c2:90:53:9e:37:a0:17:3c:3e:93:2e:e0:7f:
67:a9:16:ec:e9:dd:61:8a:45:13:a9:04:f5:9a:a8:
f8:b7:49:76:a9:49:3e:d9:59:d6:bc:3f:15:e2:52:
6c:a6:40:30:e7:69:e9:2a:dc:42:5d:91:71:2f:3b:
11:3a:ad:21:d7:4e:6c:46:52:82:bd:ad:0e:49:33:
5f:cf:d0:f0:6c:0e:78:8a:0c:f1:94:94:54:da:31:
f3:e6:46:e0:1e:1a:d8:b8:76:6b:f4:b8:fa:3e:64:
7e:d3:71:39:b7:b6:78:72:55:49:80:5e:6e:62:c2:
d4:f8:0d:d3:7d:93:ed:15:84:4c:bf:e2:9e:18:a3:
4d:0f:58:24:ae:b0:4c:3f:52:62:62:5b:b9:c3:6f:
3c:d4:fa:a7:db:9b:ac:90:de:fb:a3:c1:ce:a0:77:
e7:f1:92:1a:33:f6:c4:90:3d:2d:6e:1a:c2:0b:11:
5a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F3:F5:93:BA:A0:17:25:5B:3B:73:79:46:81:DF:79:28:C1:5A:E8
X509v3 Authority Key Identifier:
keyid:C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e33362e3137332e302f32342d3234203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.36.173.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:0d:51:07:77:e4:6b:fd:6d:da:7d:57:e3:18:6c:e9:84:41:
a8:7c:22:eb:f1:dc:a4:1b:b1:21:9c:b6:71:d5:39:6f:d5:91:
78:d8:bd:7c:b9:fe:b2:76:fe:fd:99:42:00:42:5e:b8:9b:2f:
86:fe:28:b5:e8:ba:65:c6:49:50:1c:dd:c4:0c:e6:79:a0:19:
fb:58:21:b0:5d:af:5e:4b:46:98:46:00:72:58:11:f7:6a:9e:
32:42:8a:f1:4b:d2:c6:6a:21:2a:2e:fe:56:0c:6a:d6:01:d6:
fd:f4:bd:8a:82:07:40:53:d4:28:43:66:cb:6f:d6:5f:0c:d0:
b3:a0:0f:1a:c6:1f:e9:45:57:bc:2d:8e:89:57:7d:5e:07:26:
02:84:2b:4e:c1:67:aa:7e:49:f7:d4:0b:22:04:e1:4d:a3:fb:
f1:f9:cf:cf:9e:20:7d:02:76:38:0e:0b:73:fb:a1:70:72:6b:
83:12:0a:55:15:3d:03:2c:a3:79:98:9f:8d:4a:7b:45:23:7a:
85:38:3c:f4:48:21:22:a3:36:09:c9:74:14:95:94:f6:08:a9:
0b:1c:5d:4e:c3:24:a1:b5:85:9a:2f:8e:e7:bb:ac:ff:a7:5a:
8a:0c:f0:e6:5b:75:4a:64:fe:6d:d4:45:97:87:c5:85:02:33:
c6:19:fc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:53:00 2026 by rpki-client