
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704155977842691/0/3130332e35392e3131362e302f32322d3332203d3e203536303436.roa
File: 3130332e35392e3131362e302f32322d3332203d3e203536303436.roa (raw, json)
Hash identifier: z/8kNskWsFn8k8HuWnULgvgDX6UnX61lg4tmI5mSyNI=
Subject key identifier: 66:AB:E4:F6:63:A1:02:40:6E:28:2A:5F:B9:EF:E6:5A:ED:11:EE:04
Certificate issuer: /CN=A85A1C61546E7F0064133F83A79B3D7456C0703F
Certificate serial: 6F88E6DA5106F3671205EAB7E52014801E8F89A9
Authority key identifier: A8:5A:1C:61:54:6E:7F:00:64:13:3F:83:A7:9B:3D:74:56:C0:70:3F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/3130332e35392e3131362e302f32322d3332203d3e203536303436.roa
Signing time: Wed 15 Apr 2026 07:52:55 +0000
ROA not before: Wed 15 Apr 2026 07:47:55 +0000
ROA not after: Wed 14 Apr 2027 07:52:55 +0000
asID: 56046
IP address blocks: 103.59.116.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 15:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:88:e6:da:51:06:f3:67:12:05:ea:b7:e5:20:14:80:1e:8f:89:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A85A1C61546E7F0064133F83A79B3D7456C0703F
Validity
Not Before: Apr 15 07:47:55 2026 GMT
Not After : Apr 14 07:52:55 2027 GMT
Subject: CN=66ABE4F663A102406E282A5FB9EFE65AED11EE04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:08:47:66:ba:31:78:ed:42:29:f7:b4:56:f4:
26:c0:81:f8:a9:bf:23:5f:29:9f:c6:93:0f:79:4e:
14:77:38:06:da:ce:10:08:5d:50:ff:23:bf:43:b7:
20:99:e4:0f:ac:c1:6f:27:2e:a1:b4:ee:56:92:e6:
69:c5:60:e4:59:74:0c:af:6f:a9:f9:9f:7d:4b:4a:
d5:4a:1b:6b:f0:d1:02:57:cd:84:b4:fd:d9:75:f0:
be:a2:61:86:99:c6:85:55:9d:00:4f:0b:df:73:97:
cf:0b:49:81:06:f8:42:6a:b1:b9:c9:1e:e2:12:f9:
c9:d9:6b:bd:01:e3:1c:e2:e1:c8:16:6e:6e:16:1e:
4e:d2:f9:72:8f:be:bd:48:90:ec:eb:89:05:9a:cd:
8e:19:f4:c2:1e:50:3b:73:68:cf:4e:1a:d9:56:52:
05:8a:b6:d5:0d:7d:be:ff:48:c7:4f:72:2f:ad:d4:
90:70:53:36:14:91:8d:fc:73:43:d6:95:0c:86:62:
2a:10:2b:d7:e2:5f:00:a0:cb:8c:29:c9:82:4c:fa:
8b:08:b0:dd:90:f9:39:51:10:5f:9f:d1:cc:c2:74:
23:39:df:9e:dd:e2:e5:30:22:a7:96:d7:9b:b5:5d:
3d:22:bd:3b:21:bf:03:4d:f2:61:48:37:7b:76:d5:
af:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AB:E4:F6:63:A1:02:40:6E:28:2A:5F:B9:EF:E6:5A:ED:11:EE:04
X509v3 Authority Key Identifier:
keyid:A8:5A:1C:61:54:6E:7F:00:64:13:3F:83:A7:9B:3D:74:56:C0:70:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/3130332e35392e3131362e302f32322d3332203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.59.116.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:e5:29:01:1e:8a:57:7b:a0:ec:69:e6:15:90:f8:e6:15:6d:
21:50:bc:5b:54:ef:81:60:7a:fa:b1:39:f0:7f:ab:19:d5:2a:
03:a6:57:ed:64:37:71:e5:d8:71:8d:e4:20:26:45:f9:39:02:
6b:14:a4:1b:19:db:d8:ae:01:84:ad:a8:a1:2a:9a:f3:94:c7:
77:38:cf:4b:31:9a:d7:65:b7:7f:10:11:bd:df:6c:bb:fe:23:
d6:05:93:42:48:61:43:11:bb:fe:9e:35:66:82:b4:e3:a4:17:
b9:bf:07:8c:fb:4b:5b:bb:40:25:49:b3:05:89:19:e9:a5:b1:
ea:0d:df:b6:22:10:16:c4:6c:89:e4:11:40:c6:47:36:bc:7a:
8c:9f:21:9e:59:f1:43:44:35:0a:32:a0:9f:9b:ce:18:98:e8:
a7:c7:74:9a:86:95:b1:11:f9:c1:60:7b:e1:91:6d:bf:9e:1e:
5f:97:5e:bf:d1:c3:4a:12:12:2b:f3:38:a5:ad:c2:df:c5:ec:
0e:24:cd:fe:e9:27:25:4c:ed:42:4c:99:0c:67:ea:5e:f8:a0:
72:6d:46:9e:dc:5b:a2:05:fc:4e:b0:42:e3:22:93:10:c3:35:
7a:4c:5a:4c:56:e2:62:f0:5e:8b:92:42:e9:30:e4:85:42:61:
e0:f2:60:73
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 07:29:49 2026 by rpki-client