
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096689320682586114/0/3130332e3233362e3132322e302f32342d3234203d3e2030.roa
File: 3130332e3233362e3132322e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: PDUqHiXtaBvwn66/fDKMVP8kGki7lnOZa10mr/WECFI=
Subject key identifier: E3:C2:7E:65:FA:12:74:EB:AB:F0:60:D0:62:16:9E:D1:4E:AC:A8:32
Certificate issuer: /CN=526198C6FEC4729E2A08209CDB07E7BD6537198F
Certificate serial: 72D3B48577D0B4924F2BF9E4F02F2A6B27498931
Authority key identifier: 52:61:98:C6:FE:C4:72:9E:2A:08:20:9C:DB:07:E7:BD:65:37:19:8F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/3130332e3233362e3132322e302f32342d3234203d3e2030.roa
Signing time: Wed 15 Apr 2026 06:59:05 +0000
ROA not before: Wed 15 Apr 2026 06:54:05 +0000
ROA not after: Wed 14 Apr 2027 06:59:05 +0000
asID: 0
IP address blocks: 103.236.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.crl
rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 17:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:d3:b4:85:77:d0:b4:92:4f:2b:f9:e4:f0:2f:2a:6b:27:49:89:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=526198C6FEC4729E2A08209CDB07E7BD6537198F
Validity
Not Before: Apr 15 06:54:05 2026 GMT
Not After : Apr 14 06:59:05 2027 GMT
Subject: CN=E3C27E65FA1274EBABF060D062169ED14EACA832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f7:c9:04:a7:6b:2e:33:33:ed:2e:a3:81:e5:
54:6b:6c:f2:4e:1d:e1:c4:14:26:c4:a4:35:76:17:
2f:75:20:ba:ff:de:c9:6a:ef:8d:67:96:a8:73:7b:
27:78:a4:b6:90:71:41:c8:f3:ca:e7:c9:59:a2:8d:
53:f3:a9:65:87:8e:e8:89:7a:e5:d4:60:6e:23:8c:
57:4a:f6:1c:2d:c5:17:8e:0f:b2:ca:67:2f:fe:cf:
78:a9:5c:4c:cb:af:88:f2:31:ef:c2:e6:f8:7b:3d:
04:d4:b8:0d:bf:b6:4b:4e:b6:91:5d:f0:e1:e9:d1:
18:bc:3e:04:24:69:7f:ed:2e:36:85:29:cd:51:d7:
d5:8e:69:38:f3:21:55:1a:fa:1d:3c:63:cf:9b:55:
d8:c5:1a:6f:7f:b3:e0:34:8b:66:c8:cd:43:6d:f9:
76:3a:18:e5:9d:52:8b:6d:4a:2a:94:86:63:b2:d4:
67:d6:23:38:a3:8e:e9:08:7e:01:9f:91:12:ec:5e:
2a:88:eb:dc:72:fa:44:9e:02:d1:b2:4e:30:e0:e1:
6f:9b:69:2b:5d:e4:43:87:90:79:aa:fa:b0:78:32:
7b:50:2b:1b:5d:6c:d5:00:12:f1:74:19:a8:34:b6:
9c:17:7c:a8:1c:ce:72:24:df:c1:78:70:26:10:23:
2c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C2:7E:65:FA:12:74:EB:AB:F0:60:D0:62:16:9E:D1:4E:AC:A8:32
X509v3 Authority Key Identifier:
keyid:52:61:98:C6:FE:C4:72:9E:2A:08:20:9C:DB:07:E7:BD:65:37:19:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/3130332e3233362e3132322e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.122.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:54:ad:20:77:fc:20:2f:9a:ed:dc:90:1a:ee:da:f9:7d:a3:
29:bc:ab:ed:2e:4b:1b:05:3e:13:55:05:da:89:0a:9c:12:5a:
03:2c:9f:71:ca:8c:c8:c5:3c:db:81:9b:2c:3e:1c:bf:a4:ee:
c4:59:86:67:42:b2:59:14:28:86:b9:d7:0f:6a:99:0b:6b:95:
03:1a:55:50:3f:87:d0:aa:8c:8b:43:dd:5a:40:9e:9f:25:42:
df:d0:a9:8f:f0:57:02:24:b8:92:e6:5b:70:a9:1c:87:27:dd:
e4:09:50:8f:09:93:2b:c7:96:0d:c5:fc:f1:f8:d9:fb:2d:90:
e6:f4:ea:17:9e:9f:0b:37:a5:19:96:52:4c:c1:01:e9:28:a3:
99:60:42:0b:0b:3a:24:09:9c:58:6e:be:3a:47:9a:6c:7a:df:
9a:5a:eb:e1:0b:bd:f9:a8:40:70:6d:4c:5b:eb:09:23:8d:2f:
18:48:a1:9b:91:cc:d1:81:4e:c0:0a:7b:b7:82:54:f7:5e:8a:
9b:66:6f:b1:8d:d8:e5:4b:91:54:de:81:e6:76:45:1b:96:3e:
44:01:b1:80:d0:cd:a0:61:8a:e7:7c:df:40:b4:6e:8a:d1:cc:
a2:88:b7:e7:43:35:57:93:1c:bc:db:8d:28:4b:94:85:fb:d3:
fe:75:77:07
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUctO0hXfQtJJPK/nk8C8qaydJiTEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTI2MTk4QzZGRUM0NzI5RTJBMDgyMDlDREIwN0U3QkQ2
NTM3MTk4RjAeFw0yNjA0MTUwNjU0MDVaFw0yNzA0MTQwNjU5MDVaMDMxMTAvBgNV
BAMTKEUzQzI3RTY1RkExMjc0RUJBQkYwNjBEMDYyMTY5RUQxNEVBQ0E4MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF98kEp2suMzPtLqOB5VRrbPJO
HeHEFCbEpDV2Fy91ILr/3slq741nlqhzeyd4pLaQcUHI88rnyVmijVPzqWWHjuiJ
euXUYG4jjFdK9hwtxReOD7LKZy/+z3ipXEzLr4jyMe/C5vh7PQTUuA2/tktOtpFd
8OHp0Ri8PgQkaX/tLjaFKc1R19WOaTjzIVUa+h08Y8+bVdjFGm9/s+A0i2bIzUNt
+XY6GOWdUottSiqUhmOy1GfWIzijjukIfgGfkRLsXiqI69xy+kSeAtGyTjDg4W+b
aStd5EOHkHmq+rB4MntQKxtdbNUAEvF0Gag0tpwXfKgcznIk38F4cCYQIyxjAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQU48J+ZfoSdOur8GDQYhae0U6sqDIwHwYDVR0j
BBgwFoAUUmGYxv7Ecp4qCCCc2wfnvWU3GY8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjY4OTMyMDY4MjU4NjExNC8wLzUyNjE5OEM2RkVDNDcyOUUyQTA4MjA5Q0RCMDdF
N0JENjUzNzE5OEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTI2MTk4QzZGRUM0NzI5RTJBMDgyMDlDREIwN0U3QkQ2NTM3MTk4Ri5jZXIw
gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2Njg5MzIwNjgyNTg2MTE0LzAvMzEzMDMzMmUzMjMz
MzYyZTMxMzIzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
Z+x6MA0GCSqGSIb3DQEBCwUAA4IBAQCMVK0gd/wgL5rt3JAa7tr5faMpvKvtLksb
BT4TVQXaiQqcEloDLJ9xyozIxTzbgZssPhy/pO7EWYZnQrJZFCiGudcPapkLa5UD
GlVQP4fQqoyLQ91aQJ6fJULf0KmP8FcCJLiS5ltwqRyHJ93kCVCPCZMrx5YNxfzx
+Nn7LZDm9OoXnp8LN6UZllJMwQHpKKOZYEILCzokCZxYbr46R5pset+aWuvhC735
qEBwbUxb6wkjjS8YSKGbkczRgU7ACnu3glT3XoqbZm+xjdjlS5FU3oHmdkUblj5E
AbGA0M2gYYrnfN9AtG6K0cyiiLfnQzVXkxy8240oS5SF+9P+dXcH
-----END CERTIFICATE-----
Generated at Thu Apr 16 22:36:08 2026 by rpki-client