
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096700400205037570/0/3130332e3231392e33322e302f32322d3332203d3e203536303431.roa
File: 3130332e3231392e33322e302f32322d3332203d3e203536303431.roa (raw, json)
Hash identifier: rLWGREJ9nji3Oorbvdg7tTAoZn7v999fkb8uYyetyjc=
Subject key identifier: BA:0C:03:7E:AC:70:FA:92:2E:7A:A8:D7:A7:FC:31:E8:46:87:3F:9C
Certificate issuer: /CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
Certificate serial: 549613A716AC3329ABC2C90A1D67885391BF7840
Authority key identifier: 94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/3130332e3231392e33322e302f32322d3332203d3e203536303431.roa
Signing time: Wed 15 Apr 2026 07:40:58 +0000
ROA not before: Wed 15 Apr 2026 07:35:58 +0000
ROA not after: Wed 14 Apr 2027 07:40:58 +0000
asID: 56041
IP address blocks: 103.219.32.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl
rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:96:13:a7:16:ac:33:29:ab:c2:c9:0a:1d:67:88:53:91:bf:78:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
Validity
Not Before: Apr 15 07:35:58 2026 GMT
Not After : Apr 14 07:40:58 2027 GMT
Subject: CN=BA0C037EAC70FA922E7AA8D7A7FC31E846873F9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ab:6c:90:b2:00:7f:a8:6a:07:53:f8:5d:f1:
e4:14:a2:22:9e:f2:7f:7a:60:90:20:78:79:18:34:
7b:50:f2:76:40:b0:71:f6:27:40:81:50:25:f0:2e:
b1:fb:7e:91:9c:e0:65:e6:5a:1d:33:e6:8b:63:02:
cd:be:d6:94:06:19:20:7f:81:66:89:f6:86:40:c3:
9c:61:66:1b:06:6c:c0:5c:d8:47:5f:6d:5f:66:74:
c1:b3:3e:f6:18:50:84:00:d1:b3:47:ed:e6:df:f4:
25:99:10:4d:85:6b:fe:c5:62:63:d3:76:0c:23:0b:
d6:96:14:1b:5a:28:01:bd:1a:9e:61:c7:94:12:2a:
64:b7:8d:e0:52:70:11:ca:f7:ca:f7:1c:10:d7:c3:
94:85:c2:9b:78:cf:82:ad:20:59:18:18:b0:9d:72:
c5:80:c8:d0:78:32:96:50:6c:46:70:f8:c0:11:ab:
bb:d7:89:23:34:43:53:47:d2:6e:cb:ce:29:dc:9f:
41:bb:f0:47:fe:e6:5a:d7:5d:23:2f:95:d1:01:c3:
56:d3:75:68:c0:26:6b:b3:7d:a6:5e:d0:40:a6:71:
81:26:a0:4e:c2:12:9c:7f:b0:fe:71:65:0d:63:cc:
a5:d9:6a:73:f6:06:f6:70:f8:14:67:ac:f9:50:7b:
17:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0C:03:7E:AC:70:FA:92:2E:7A:A8:D7:A7:FC:31:E8:46:87:3F:9C
X509v3 Authority Key Identifier:
keyid:94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/3130332e3231392e33322e302f32322d3332203d3e203536303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.219.32.0/22
Signature Algorithm: sha256WithRSAEncryption
49:5a:2e:0c:86:c1:7e:ee:37:4f:0f:af:73:cb:5a:64:78:20:
45:89:5e:b0:98:ff:a5:5d:4c:4d:17:d4:0d:b9:19:e7:1d:2b:
90:36:4a:3f:a6:a2:d4:0e:28:c2:0e:f1:86:08:6f:ab:53:af:
b7:fa:49:59:9e:79:ef:74:f7:47:21:01:1e:76:e5:80:0a:21:
b8:11:c2:02:0b:f9:91:fd:62:83:18:ce:aa:83:a7:1e:aa:1b:
bb:0d:03:aa:93:db:b0:23:91:39:9d:20:8a:be:84:41:7c:7e:
91:5c:ed:a9:d8:c3:35:b6:70:91:eb:d8:bb:f3:72:05:8c:3a:
79:8c:64:d8:b3:95:19:a4:54:e7:9d:63:49:75:85:50:32:3c:
8d:78:a7:31:72:34:ef:25:d0:c1:a1:07:e4:cd:06:bd:de:b1:
92:74:82:69:18:e9:e0:d4:e7:bb:0b:60:51:6f:35:17:5a:ab:
7d:60:22:cf:99:37:44:9f:f3:af:77:06:8a:77:d4:34:a7:e8:
bd:04:ac:93:82:48:55:4a:ce:6a:3c:f0:e3:56:5b:e6:35:c6:
39:87:30:44:2c:58:4c:92:37:94:22:b7:3d:de:26:37:fb:33:
1e:b8:59:f3:fe:10:8e:a2:64:a1:ce:ec:f0:13:62:f6:10:d6:
3a:9a:3c:7a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:17:22 2026 by rpki-client