
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096700400205037570/0/3130332e3231392e33322e302f32322d3332203d3e203538343631.roa
File: 3130332e3231392e33322e302f32322d3332203d3e203538343631.roa (raw, json)
Hash identifier: XQjhRzo/rx/IDy+A+cvqn5D7gzFqFUImFbNjlJhG0Jk=
Subject key identifier: 2E:8E:01:8D:90:EB:2F:B2:8B:67:96:5F:C2:2D:BC:88:D9:44:5F:00
Certificate issuer: /CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
Certificate serial: 38FFEEB88AA1330265E7B552A7F2C6893EBAD413
Authority key identifier: 94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/3130332e3231392e33322e302f32322d3332203d3e203538343631.roa
Signing time: Wed 15 Apr 2026 07:40:57 +0000
ROA not before: Wed 15 Apr 2026 07:35:57 +0000
ROA not after: Wed 14 Apr 2027 07:40:57 +0000
asID: 58461
IP address blocks: 103.219.32.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl
rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:ff:ee:b8:8a:a1:33:02:65:e7:b5:52:a7:f2:c6:89:3e:ba:d4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
Validity
Not Before: Apr 15 07:35:57 2026 GMT
Not After : Apr 14 07:40:57 2027 GMT
Subject: CN=2E8E018D90EB2FB28B67965FC22DBC88D9445F00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:70:ef:af:51:94:8f:ea:99:c4:72:f6:ca:a5:
cf:5c:5b:04:d5:d3:f9:b9:cf:9b:76:6e:cf:47:7b:
90:5c:68:83:26:3d:b9:c1:1d:5a:e5:08:d0:7f:a5:
3c:af:cd:25:11:14:83:fd:c0:a1:41:af:ee:f2:51:
f3:50:00:38:65:9f:a7:29:c2:fc:15:60:c2:4e:17:
1e:a7:3f:f6:03:2a:3b:95:a9:b7:02:d5:89:36:16:
88:c7:54:28:1d:ee:f2:46:b9:b8:66:3f:42:71:5b:
c5:2f:d8:cc:89:22:4f:60:33:e1:ae:bc:ab:83:bc:
0b:08:e0:2b:e9:bf:c9:3b:68:ca:3b:05:75:08:4e:
f0:70:86:e6:6b:f0:40:5f:22:13:89:ef:2e:82:67:
91:3b:c8:59:e1:e8:9a:16:0f:29:ec:a5:a1:c0:25:
52:81:20:1f:fb:75:67:d5:4e:e7:1e:90:2b:31:5e:
70:0f:c1:25:19:4a:04:25:3a:1c:1f:b7:78:25:d1:
92:0c:a6:bf:ca:b9:15:00:dc:bb:03:ce:f2:df:92:
1b:f3:2c:d5:0b:d0:a5:5e:12:d7:d6:c3:2e:46:7f:
58:df:07:31:e9:39:07:d1:76:de:d1:4e:49:e3:f8:
f3:8c:a3:ae:61:2a:8a:34:4a:b9:06:d5:85:22:80:
a5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8E:01:8D:90:EB:2F:B2:8B:67:96:5F:C2:2D:BC:88:D9:44:5F:00
X509v3 Authority Key Identifier:
keyid:94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/3130332e3231392e33322e302f32322d3332203d3e203538343631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.219.32.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:bc:b7:5c:ea:f2:47:05:50:07:bd:06:ed:31:ea:44:96:96:
e6:46:dc:84:8f:40:f7:50:a3:b2:a6:cd:4a:54:7b:5c:00:7d:
6b:e3:d8:48:f7:91:0d:58:6f:2a:96:d0:47:42:d2:98:25:d4:
27:e6:a5:04:b0:61:6a:7f:c2:f5:92:6d:29:1a:e9:e1:53:f5:
e5:63:63:05:ce:9c:d2:8f:5e:a3:1a:37:62:d5:90:95:04:2d:
d6:0b:e6:50:9e:e4:b4:b1:5d:6e:71:f9:20:31:b7:e2:02:b3:
2f:cf:54:9e:ef:39:2e:2f:46:11:a5:5e:6d:f4:8c:30:9c:c5:
a6:55:ad:76:5d:74:a3:85:bb:8c:cd:1f:87:e3:e1:77:bb:04:
e4:13:c8:e2:6c:61:25:08:dc:24:82:db:12:8e:4b:f3:ef:66:
27:ee:e5:26:b3:74:d8:b4:51:3f:af:68:43:99:fe:b6:0d:4e:
65:8f:21:cc:99:5d:6c:63:41:6f:54:79:d4:b9:37:9f:0c:2f:
53:f9:d0:67:5e:ab:dd:d7:e7:38:34:58:c8:31:2e:c2:1c:84:
7b:13:68:b5:58:cd:f7:c5:5b:1d:f4:e9:f7:1b:c5:08:f8:04:
70:e9:6d:f0:d4:d3:24:ff:b1:ab:1e:94:9e:af:f7:b1:56:a5:
c1:37:c3:fc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:30:13 2026 by rpki-client