
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096700400205037570/0/3130332e3231392e33362e302f32322d3332203d3e203536303431.roa
File: 3130332e3231392e33362e302f32322d3332203d3e203536303431.roa (raw, json)
Hash identifier: Hq0hZTyQQ5FQtDz59K2Zq2ZtTRPVUznk2o2LxDY7rlw=
Subject key identifier: 87:BD:62:AE:B6:7F:6D:23:B2:34:EC:29:FE:68:55:C7:FC:85:DF:21
Certificate issuer: /CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
Certificate serial: 556B2A5F272C577952C8B55ECD9B075D2B37370B
Authority key identifier: 94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/3130332e3231392e33362e302f32322d3332203d3e203536303431.roa
Signing time: Wed 15 Apr 2026 07:40:58 +0000
ROA not before: Wed 15 Apr 2026 07:35:58 +0000
ROA not after: Wed 14 Apr 2027 07:40:58 +0000
asID: 56041
IP address blocks: 103.219.36.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl
rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:6b:2a:5f:27:2c:57:79:52:c8:b5:5e:cd:9b:07:5d:2b:37:37:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
Validity
Not Before: Apr 15 07:35:58 2026 GMT
Not After : Apr 14 07:40:58 2027 GMT
Subject: CN=87BD62AEB67F6D23B234EC29FE6855C7FC85DF21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:76:3a:87:ec:0a:b1:56:fe:53:18:ea:10:de:
85:3d:dc:4c:73:b5:14:f7:16:b4:e6:66:cf:25:77:
ed:ba:0d:f6:8b:39:8f:f4:26:2f:18:b9:c3:1e:49:
10:2e:86:4e:6c:44:d4:67:09:79:94:ef:be:e3:cc:
68:18:11:ad:8e:79:f0:24:b4:ed:70:a5:25:ef:e2:
0d:b2:72:d3:3c:d4:41:07:8e:4d:22:6c:b1:c6:58:
c6:47:a1:87:aa:0b:c9:a1:ed:41:a7:c6:32:23:ae:
b0:e8:9a:74:43:18:40:f2:03:1f:94:15:e2:11:dc:
d4:61:c2:af:8d:55:29:83:64:85:9f:de:38:61:e9:
31:40:cc:e2:3d:13:f0:a3:7d:07:0f:6e:4a:b5:0e:
86:3c:dd:69:e9:d4:db:e9:04:cc:a7:fd:1b:da:e5:
71:9e:67:24:41:c8:93:a5:07:21:66:45:a2:6c:ee:
90:e5:a3:12:ae:27:0e:71:45:92:49:64:c2:41:9a:
d0:52:55:91:8f:3e:c8:c2:08:b3:a5:52:9b:ab:9f:
a1:0b:ba:f4:dd:b8:67:bb:ee:e7:89:e6:cb:4e:51:
ee:e4:06:b7:5e:8a:49:e1:b1:86:b8:9d:8d:33:a9:
87:0d:ef:76:8b:2c:af:b7:61:8a:9a:91:63:0f:37:
02:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BD:62:AE:B6:7F:6D:23:B2:34:EC:29:FE:68:55:C7:FC:85:DF:21
X509v3 Authority Key Identifier:
keyid:94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/3130332e3231392e33362e302f32322d3332203d3e203536303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.219.36.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:2e:ee:b7:cf:53:73:f0:d0:25:7b:1e:d5:f1:ac:63:5c:72:
ff:b7:aa:0d:29:04:f5:b8:f0:cb:c8:11:a7:e3:88:00:03:3f:
05:00:94:53:37:b8:06:4d:ab:6c:d1:39:a0:e6:84:00:3e:f9:
19:7e:a8:9b:db:72:cb:06:4f:74:86:89:a6:1d:a4:56:c3:bf:
9a:bb:01:30:86:3f:d6:ba:fc:96:48:13:f7:2e:19:05:dd:96:
71:df:c2:a6:d8:58:29:04:d1:c1:47:c3:ef:9b:66:d4:01:df:
78:5b:58:de:ab:58:a7:70:7d:54:23:a1:d9:fd:c6:33:cd:47:
bb:59:87:de:be:7e:6b:82:f7:4d:dc:10:b3:2f:1d:44:f8:42:
4a:59:6e:50:f4:b8:5e:c6:6f:27:f2:a7:7a:45:a8:77:13:8f:
63:a5:09:d3:c2:03:c6:03:7b:aa:0b:4e:26:24:66:fd:46:59:
f5:35:73:58:b3:88:50:b2:1d:d2:6d:ad:94:4e:81:d2:13:7a:
4b:9c:7f:c9:ce:f2:79:11:8c:ab:64:d9:60:54:e0:b1:72:c5:
2c:4c:f7:a4:2f:dd:f1:3b:b0:f1:9e:9f:ec:80:f2:be:d4:25:
f6:e0:6d:22:c1:71:f2:a4:fa:c3:3f:23:58:b9:2a:45:5d:4a:
b9:a8:1e:ab
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:16:29 2026 by rpki-client