
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704155977842691/0/3130332e3231392e32342e302f32322d3332203d3e203536303436.roa
File: 3130332e3231392e32342e302f32322d3332203d3e203536303436.roa (raw, json)
Hash identifier: LUJrThvOU4gKzLEtKBQ4hTtnmPaX8XkwYRZk3puZR5o=
Subject key identifier: DF:61:C5:2B:9E:4A:CA:65:50:68:07:01:9B:FC:AD:BF:AA:2C:63:2C
Certificate issuer: /CN=A85A1C61546E7F0064133F83A79B3D7456C0703F
Certificate serial: 539C9E2544C66769EC057FD40C6AEAFCE6306F60
Authority key identifier: A8:5A:1C:61:54:6E:7F:00:64:13:3F:83:A7:9B:3D:74:56:C0:70:3F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/3130332e3231392e32342e302f32322d3332203d3e203536303436.roa
Signing time: Wed 15 Apr 2026 07:52:55 +0000
ROA not before: Wed 15 Apr 2026 07:47:55 +0000
ROA not after: Wed 14 Apr 2027 07:52:55 +0000
asID: 56046
IP address blocks: 103.219.24.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 15:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:9c:9e:25:44:c6:67:69:ec:05:7f:d4:0c:6a:ea:fc:e6:30:6f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A85A1C61546E7F0064133F83A79B3D7456C0703F
Validity
Not Before: Apr 15 07:47:55 2026 GMT
Not After : Apr 14 07:52:55 2027 GMT
Subject: CN=DF61C52B9E4ACA65506807019BFCADBFAA2C632C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f0:cc:e7:20:27:a9:d4:3a:0d:32:25:d0:11:
aa:0d:41:b7:f4:10:66:f7:ca:38:b6:b8:7a:22:3c:
55:14:97:7f:74:5e:de:62:b3:52:08:d4:d3:2c:99:
b0:88:e4:e5:2a:39:71:fc:89:26:ee:15:10:00:50:
28:8e:28:3a:39:6e:53:ff:9b:4c:b3:53:bd:1d:db:
12:81:77:08:00:11:f0:03:21:0c:cb:bf:00:23:b7:
06:bc:3e:96:40:38:72:9d:cb:8f:9c:a4:d7:ad:82:
e5:75:ea:24:b9:7b:ef:47:44:5c:1d:ca:96:f4:b5:
95:3e:7a:ad:d4:3d:00:aa:9f:68:12:85:90:d6:dd:
a8:66:65:22:dd:76:92:e4:b9:2e:a3:75:0a:36:fc:
4a:80:58:58:52:3c:57:23:4e:b6:7d:cb:de:3d:a2:
c1:50:89:13:f8:e4:80:54:75:a7:cb:a0:a0:89:87:
c6:e1:90:6a:15:33:e8:74:a0:59:b9:78:eb:f4:be:
09:1f:29:d5:49:02:f7:c3:8e:b6:05:9e:11:ea:74:
bf:97:b2:c8:8d:4e:ee:66:c0:98:b0:62:34:ee:3a:
9b:cd:56:9a:12:f6:dc:1b:39:3e:28:da:f3:b8:dc:
1f:26:57:c1:b8:1b:6a:7e:64:25:51:fb:24:77:b3:
7c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:61:C5:2B:9E:4A:CA:65:50:68:07:01:9B:FC:AD:BF:AA:2C:63:2C
X509v3 Authority Key Identifier:
keyid:A8:5A:1C:61:54:6E:7F:00:64:13:3F:83:A7:9B:3D:74:56:C0:70:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/3130332e3231392e32342e302f32322d3332203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.219.24.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:8b:fd:6d:67:e7:0b:e1:16:60:63:86:0a:28:b0:b5:c1:a2:
cd:b1:92:4f:43:60:e1:c2:db:f6:bf:7c:0c:e4:23:39:ac:63:
46:ac:ea:c1:68:ed:d5:c7:79:9d:2a:32:42:da:bb:f3:8f:ea:
49:3f:05:3c:b6:32:fd:bd:fb:24:8e:5b:fe:81:a7:89:40:f8:
93:d8:18:ac:2f:21:29:da:7a:f4:29:e5:4e:af:ea:79:52:f8:
3a:ed:20:2c:a8:c0:30:01:64:d3:db:56:af:cd:5f:24:79:0b:
c1:62:e3:ac:07:a0:c1:12:72:5d:63:2a:f4:4e:4a:8f:37:ba:
88:3e:c6:a5:24:13:f7:cd:94:92:d8:8f:8a:d4:6e:d5:47:84:
7c:8f:43:fa:7a:ad:2d:22:4b:fa:86:e1:b8:d7:2b:a0:12:0c:
8b:24:00:84:9e:cf:5c:f1:a7:60:d1:ff:a8:52:6b:31:f4:f2:
d0:7c:9d:e8:8a:12:0b:99:54:18:b1:91:49:9f:c5:f2:2c:0f:
f2:87:c3:2f:96:a3:a1:ef:cd:0f:b4:12:5f:da:85:aa:9f:7a:
de:2f:79:9e:ac:74:35:ab:d5:90:57:f2:43:f7:03:ab:27:31:
b0:84:75:4d:15:2b:66:5f:15:37:c8:ea:19:72:a3:f7:ed:dd:
77:ff:48:8d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:20:15 2026 by rpki-client