
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096700400205037570/0/3130332e33362e3230382e302f32322d3332203d3e2034383337.roa
File: 3130332e33362e3230382e302f32322d3332203d3e2034383337.roa (raw, json)
Hash identifier: 6Kk8anRGGcyDebTFWlv/ymR0kPxhO2tNsW9AZ20S/xA=
Subject key identifier: EC:76:4D:42:BF:8E:F6:B8:64:C9:D7:EA:56:21:7A:62:3A:B1:B4:EC
Certificate issuer: /CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
Certificate serial: 0A9CCC853140D83CE03183C8FC74DE3936643DB5
Authority key identifier: 94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/3130332e33362e3230382e302f32322d3332203d3e2034383337.roa
Signing time: Wed 15 Apr 2026 07:40:58 +0000
ROA not before: Wed 15 Apr 2026 07:35:58 +0000
ROA not after: Wed 14 Apr 2027 07:40:58 +0000
asID: 4837
IP address blocks: 103.36.208.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl
rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:9c:cc:85:31:40:d8:3c:e0:31:83:c8:fc:74:de:39:36:64:3d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
Validity
Not Before: Apr 15 07:35:58 2026 GMT
Not After : Apr 14 07:40:58 2027 GMT
Subject: CN=EC764D42BF8EF6B864C9D7EA56217A623AB1B4EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:49:95:79:b0:1e:8a:19:2b:43:2e:13:e4:61:
19:bb:bd:53:e6:46:94:fb:c4:1b:35:f3:61:d5:a0:
7f:07:ff:06:ed:55:d9:02:5f:46:c1:af:a1:c3:2f:
ed:ba:1a:41:b9:a1:51:3e:80:72:f8:7c:58:61:bc:
a3:e9:f7:83:ab:cc:c0:db:c9:31:a2:b3:86:ab:ac:
79:ff:d4:61:1e:34:76:89:6d:d5:60:39:12:d6:2c:
cc:ec:1e:1b:a1:0c:48:3d:53:36:93:91:a7:27:18:
f6:50:c3:8b:5d:99:f0:62:af:e1:81:91:dc:a4:ff:
be:1d:1d:0d:47:92:12:83:0d:0f:a6:92:fa:d6:42:
70:e4:62:fa:32:96:2d:e0:0e:b0:64:80:83:92:f6:
ab:6d:a3:b4:90:16:bd:fe:3b:31:d5:f6:ec:17:06:
dc:fb:ae:1a:79:4c:ea:3a:2e:d8:f1:35:81:e1:2f:
8b:bc:dc:ad:79:76:84:11:fb:46:b2:73:3b:12:32:
c9:2e:1c:38:bb:fd:24:03:30:27:3c:c4:aa:1b:30:
19:ee:04:7e:43:bb:40:3f:22:bc:69:1b:47:3f:8c:
3b:8e:b1:37:a1:25:0f:c1:a0:45:08:ec:83:23:fe:
5d:2d:3e:d1:e2:6b:96:09:5c:05:4f:52:ae:78:a5:
e8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:76:4D:42:BF:8E:F6:B8:64:C9:D7:EA:56:21:7A:62:3A:B1:B4:EC
X509v3 Authority Key Identifier:
keyid:94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/3130332e33362e3230382e302f32322d3332203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.36.208.0/22
Signature Algorithm: sha256WithRSAEncryption
72:18:aa:0d:68:09:7c:6d:c8:e5:2b:b5:18:72:46:d3:e0:0a:
9e:36:3a:4d:ad:24:82:9c:df:61:5f:63:0e:1f:23:7a:98:b0:
1c:97:f4:db:f8:70:05:ea:5f:6d:9b:28:27:78:01:01:de:e3:
46:cf:79:ca:42:be:8f:49:58:d5:4c:1e:04:aa:4a:1a:77:b9:
3b:48:0f:ec:4b:62:ca:cb:ca:70:be:46:15:ef:8f:c6:51:b9:
a8:1d:14:9f:0a:95:6a:c1:f7:76:ba:4d:8f:78:57:c5:52:af:
07:8e:1f:e6:d0:57:41:e5:db:12:0b:93:1a:f5:be:21:ca:2a:
17:e4:e3:4f:a8:88:ea:07:fc:fe:f2:5b:97:a7:9a:4a:b9:64:
17:6b:1a:c6:4d:0c:00:26:11:98:11:b8:15:64:49:b6:79:d6:
10:5a:23:3a:03:bf:69:cd:f2:bd:8c:08:c0:f6:9c:88:63:8d:
bf:07:b3:a9:98:84:54:25:96:c0:5f:2c:bd:a1:d2:e7:61:98:
aa:08:8a:54:73:43:04:37:24:c3:61:34:be:3e:52:b9:40:8d:
3e:c3:e7:36:98:6b:52:00:df:22:ec:cc:f6:57:58:32:9d:dd:
5d:7c:01:30:41:16:c6:06:24:b7:cf:09:18:1c:9b:88:1b:0b:
36:00:3e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:21:07 2026 by rpki-client