
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096638331497742338/0/3130332e3234362e3135322e302f32322d3232203d3e2034383337.roa
File: 3130332e3234362e3135322e302f32322d3232203d3e2034383337.roa (raw, json)
Hash identifier: TYMvRP8H57trbvzGCEYABh6fzOINS3SRdnWTsOOJTPk=
Subject key identifier: F2:B9:CE:22:D2:B5:4A:1B:EA:A6:8B:5C:5A:3D:61:69:15:6B:0B:67
Certificate issuer: /CN=A885AC793FB5E02C3AF1358C8DD23412EA28CC0B
Certificate serial: 694E4D91E629B2167C05FC94CA5563ADECC5A2A3
Authority key identifier: A8:85:AC:79:3F:B5:E0:2C:3A:F1:35:8C:8D:D2:34:12:EA:28:CC:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/3130332e3234362e3135322e302f32322d3232203d3e2034383337.roa
Signing time: Thu 16 Apr 2026 07:12:59 +0000
ROA not before: Thu 16 Apr 2026 07:07:59 +0000
ROA not after: Thu 15 Apr 2027 07:12:59 +0000
asID: 4837
IP address blocks: 103.246.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:4e:4d:91:e6:29:b2:16:7c:05:fc:94:ca:55:63:ad:ec:c5:a2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A885AC793FB5E02C3AF1358C8DD23412EA28CC0B
Validity
Not Before: Apr 16 07:07:59 2026 GMT
Not After : Apr 15 07:12:59 2027 GMT
Subject: CN=F2B9CE22D2B54A1BEAA68B5C5A3D6169156B0B67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9d:e2:12:c5:ab:01:d7:49:c5:3d:cb:53:9f:
7b:1d:fa:e5:00:56:50:54:e3:74:cb:18:43:42:00:
e6:93:d6:79:a5:7c:b7:eb:f6:c7:e6:f6:3f:f9:7f:
fe:5d:4e:4e:fd:fd:07:60:2c:3d:81:2d:b5:5f:4f:
a7:e0:9d:cd:e1:97:6b:eb:7e:20:51:9d:e9:77:72:
60:3b:f2:b4:31:74:09:1f:45:fa:46:a2:7a:ed:ce:
4a:24:e2:9b:fc:07:ed:e6:8d:38:6c:fc:db:d7:ec:
13:e2:4c:55:c1:f0:13:66:a9:3c:05:b7:ae:6b:62:
2d:7d:81:38:f8:f5:f6:18:92:53:46:67:87:94:39:
5f:b8:45:03:9d:39:f5:69:78:ce:67:dc:8d:38:64:
a6:74:71:4b:31:10:fc:39:48:5a:36:61:88:e7:c2:
fe:c7:c8:fd:79:ea:d5:a9:fa:75:04:00:2b:d9:81:
b5:f0:79:4e:e0:d8:e1:da:fc:51:ea:b6:90:6d:19:
7c:fc:0a:ad:dc:e6:34:e4:d7:47:e2:65:54:ec:be:
c6:85:15:e4:ca:a4:e7:99:ad:f2:22:9a:89:18:9e:
02:a6:f9:f5:17:22:14:1b:3d:44:12:34:b6:d6:7e:
0e:e2:5d:77:df:74:b1:33:9a:ff:5d:85:05:6a:0c:
e7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B9:CE:22:D2:B5:4A:1B:EA:A6:8B:5C:5A:3D:61:69:15:6B:0B:67
X509v3 Authority Key Identifier:
keyid:A8:85:AC:79:3F:B5:E0:2C:3A:F1:35:8C:8D:D2:34:12:EA:28:CC:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/3130332e3234362e3135322e302f32322d3232203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.246.152.0/22
Signature Algorithm: sha256WithRSAEncryption
35:61:af:87:92:fc:4b:94:27:3b:1c:77:4a:c5:e3:4a:60:2c:
09:62:87:23:c9:48:a6:3c:d2:ec:01:27:e4:48:7f:c2:d9:07:
a7:e9:ac:90:61:79:70:0e:37:fe:8d:f8:6a:bb:4f:44:2e:91:
90:40:08:dc:93:82:46:7f:61:ce:77:1b:df:2b:db:b5:94:d0:
75:ab:bd:6a:18:3b:11:e7:d6:0c:55:ac:81:d7:b8:dd:74:e3:
91:8b:bc:4d:85:1f:d9:9e:10:89:81:ce:d9:b6:aa:7d:0c:b4:
d8:6b:de:fb:e0:39:27:70:60:72:71:06:8c:f8:ff:e1:32:21:
ba:94:e9:f5:33:46:cd:da:f4:e8:22:72:9a:d3:3d:2a:d4:14:
e0:83:fb:f8:78:a6:89:05:e5:31:09:be:50:11:e5:f4:45:f1:
18:7b:47:b8:f2:93:ac:22:74:45:d2:c7:1b:ca:fe:dc:c2:d6:
5d:9b:9e:5e:39:d6:ed:a2:ff:db:f4:b3:2e:26:4a:49:0c:7f:
93:e7:71:84:64:25:2f:0c:83:2c:59:df:bf:3b:e7:e7:62:a3:
15:e7:52:2e:f2:8b:26:d6:fd:82:b2:20:ae:a3:fd:a1:16:83:
12:a1:90:c3:23:73:24:33:82:4c:38:ee:ae:07:4c:6d:70:cd:
c7:6a:6a:94
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:26:49 2026 by rpki-client