
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS10206.roa
File: AS10206.roa (raw, json)
Hash identifier: JrSzkLWEov6OGP9IjCE/ZCUlDSdfbsp28TJeE5P112I=
Subject key identifier: C5:0E:19:DA:A8:68:72:5A:2D:98:2E:30:78:7E:09:05:08:AA:3A:E1
Certificate issuer: /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Certificate serial: 315DA973D0F4DE09C7A0B1841680F78FB99F4404
Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS10206.roa
Signing time: Thu 04 Jun 2026 07:07:05 +0000
ROA not before: Thu 04 Jun 2026 07:02:05 +0000
ROA not after: Thu 03 Jun 2027 07:07:05 +0000
asID: 10206
IP address blocks: 103.251.240.0/24 maxlen: 24
103.251.241.0/24 maxlen: 24
2408:8001:e800::/37 maxlen: 37
2408:8779::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:24:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:5d:a9:73:d0:f4:de:09:c7:a0:b1:84:16:80:f7:8f:b9:9f:44:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Validity
Not Before: Jun 4 07:02:05 2026 GMT
Not After : Jun 3 07:07:05 2027 GMT
Subject: CN=C50E19DAA868725A2D982E30787E090508AA3AE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:6c:2b:f2:51:94:eb:0d:45:29:0c:be:38:
fe:eb:8d:3d:1d:ad:a6:07:c9:e5:a0:2b:7e:fa:bd:
78:6d:6f:79:d2:2c:79:15:92:3b:d8:52:4f:6c:66:
78:51:4d:78:7d:2c:6d:b6:1a:55:a2:2f:98:36:7d:
a5:f4:9d:74:29:04:97:28:92:3d:8e:9f:9e:f0:dc:
41:24:64:4a:ee:38:4c:e1:d9:42:96:99:ba:ed:e1:
bf:72:d0:51:95:3e:a0:3c:1f:54:c9:32:fb:73:33:
80:1e:04:e1:cd:b1:dd:47:f3:e4:57:6a:5d:89:bb:
d8:75:7d:a3:ee:7a:93:19:de:02:9b:b2:3c:cd:aa:
86:77:f7:3a:b8:f5:15:f7:b1:ae:cc:61:1c:d5:66:
a3:af:90:ce:59:1a:ec:12:15:62:b6:01:a0:a1:e1:
06:30:49:89:d1:c8:40:21:06:ab:c5:c4:c0:d3:f2:
e4:39:1f:31:e9:1e:66:0b:fd:6e:0b:5e:07:05:59:
a3:fc:bb:22:3e:32:38:6d:48:92:e5:5e:99:03:b0:
b4:a7:4b:4b:22:4f:d9:f6:4a:03:24:df:08:5a:38:
06:8e:cf:6b:0c:9b:0d:f7:c4:12:e4:b0:1c:b8:b0:
af:40:84:35:6b:5c:8f:89:9b:ad:48:56:b4:2f:ed:
7e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0E:19:DA:A8:68:72:5A:2D:98:2E:30:78:7E:09:05:08:AA:3A:E1
X509v3 Authority Key Identifier:
keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS10206.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.251.240.0/23
IPv6:
2408:8001:e800::/37
2408:8779::/34
Signature Algorithm: sha256WithRSAEncryption
05:93:1d:91:6f:87:d2:cf:0b:27:84:a7:97:28:24:79:d1:c0:
43:ed:db:53:f0:ad:b7:94:d7:2e:79:6a:67:28:92:d1:06:44:
b0:01:3b:2e:d6:31:a6:fe:76:08:15:14:c6:c8:0e:08:30:44:
c0:1e:d7:4b:4b:25:2b:8c:fb:b3:e0:d8:ad:01:95:18:7a:9f:
a1:3a:43:5e:f6:16:e5:f6:b0:4b:8a:90:07:bf:b6:81:f9:b5:
7c:ab:d2:b4:9b:26:84:a8:b6:cc:1f:5f:27:d1:45:9e:d2:fc:
24:5d:42:7e:45:51:d6:cc:e9:e9:67:f5:6f:9b:67:c7:20:4f:
c6:42:5c:34:7c:2d:c4:30:4c:d9:43:b2:bb:5d:68:bb:64:43:
ea:cb:5f:f2:2f:89:41:f1:b1:d7:dc:8e:3f:fa:0e:de:b4:d5:
fd:a4:e1:f1:4d:ab:b7:ce:5c:24:77:39:e4:7b:fc:85:80:d0:
04:9c:3e:94:e7:fe:f0:b5:af:d5:51:1c:da:8b:ae:f3:13:15:
41:b5:af:f7:2a:89:ed:1d:43:19:ad:ec:65:38:59:d2:c4:77:
3c:09:3e:f2:71:16:78:a1:b6:a8:82:ed:10:48:65:c1:50:6f:
0a:03:bb:cf:be:5b:eb:b5:79:a9:0e:6c:94:f2:13:bf:26:f9:
89:68:e4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:17:19 2026 by rpki-client