
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130342e3235322e302f32322d3232203d3e203633353339.roa
File: 3130332e3130342e3235322e302f32322d3232203d3e203633353339.roa (raw, json)
Hash identifier: o+tGxD34udiiMnnHfOOlowCZ5/a8leLfBtmuXzRepFY=
Subject key identifier: 86:CB:65:DF:D0:92:A3:EC:A6:FD:8F:95:89:C5:28:63:C3:15:DD:E9
Certificate issuer: /CN=BC1F9CBB5FF6063230D45B596F2D0E6D94338815
Certificate serial: 565472B68DA354C9315ACBEBBA2C5092D6979B7E
Authority key identifier: BC:1F:9C:BB:5F:F6:06:32:30:D4:5B:59:6F:2D:0E:6D:94:33:88:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130342e3235322e302f32322d3232203d3e203633353339.roa
Signing time: Thu 16 Apr 2026 02:55:37 +0000
ROA not before: Thu 16 Apr 2026 02:50:37 +0000
ROA not after: Thu 15 Apr 2027 02:55:37 +0000
asID: 63539
IP address blocks: 103.104.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.crl
rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 14:49:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:54:72:b6:8d:a3:54:c9:31:5a:cb:eb:ba:2c:50:92:d6:97:9b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC1F9CBB5FF6063230D45B596F2D0E6D94338815
Validity
Not Before: Apr 16 02:50:37 2026 GMT
Not After : Apr 15 02:55:37 2027 GMT
Subject: CN=86CB65DFD092A3ECA6FD8F9589C52863C315DDE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:0e:e7:af:69:b6:28:20:9d:5e:9b:72:5f:
e8:74:4f:a0:c2:01:93:64:02:d4:f3:45:41:82:e8:
b8:73:ac:82:0b:bf:9f:60:e6:c3:53:c6:fa:3c:4f:
7d:35:e6:7f:1d:57:9c:39:e9:0b:ae:fe:fc:8c:40:
a8:78:bf:7e:ff:90:7f:59:64:7b:02:d0:60:22:b6:
ee:d5:72:09:47:55:84:70:b2:a9:33:7f:59:b1:42:
ae:f7:f9:ef:b4:d5:cb:da:9d:aa:39:d1:a1:07:60:
d0:01:30:65:07:e3:de:2a:97:be:ef:04:c3:0d:b1:
ab:80:4a:32:ba:80:1e:93:df:da:2c:24:ef:de:ef:
5b:fc:39:34:4f:9a:bd:b0:18:df:e5:42:b5:37:9b:
df:94:45:95:ea:c0:10:54:7a:13:17:fa:ab:17:04:
22:38:56:0c:a9:1d:0d:48:8a:f1:28:fb:45:78:20:
35:5c:ec:74:bc:f6:37:a0:a9:f7:77:4b:92:72:8a:
f1:6e:b8:9f:82:9b:d8:30:68:63:7b:5c:4c:d1:c7:
3d:f5:01:71:40:9e:a6:57:bb:ee:f5:b5:67:6a:49:
52:17:da:95:bd:d5:ce:47:67:ee:8e:8a:d4:bf:d1:
ac:2d:f1:da:fb:32:69:6e:10:b2:e7:4d:d6:1d:3d:
b7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CB:65:DF:D0:92:A3:EC:A6:FD:8F:95:89:C5:28:63:C3:15:DD:E9
X509v3 Authority Key Identifier:
keyid:BC:1F:9C:BB:5F:F6:06:32:30:D4:5B:59:6F:2D:0E:6D:94:33:88:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130342e3235322e302f32322d3232203d3e203633353339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.104.252.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:16:6c:05:da:49:b7:38:c9:4c:cf:89:70:30:f2:53:1f:a2:
46:32:01:1f:75:7e:62:33:ea:ca:72:b1:ea:e3:73:8c:b3:87:
f5:e5:d1:a9:04:fd:98:ab:cd:3a:6e:53:60:c7:b7:15:e9:1b:
1e:8f:93:1a:42:c9:12:ed:ab:46:fd:79:ef:ee:19:cc:32:27:
01:2d:84:54:52:d1:a4:f4:cd:db:50:5c:a7:80:47:8a:81:44:
cd:bf:96:a7:d4:a9:f1:07:19:aa:83:ba:cd:fe:33:6f:95:55:
62:45:5d:67:84:84:27:fc:8d:58:c8:c5:43:90:9d:67:b2:91:
a5:42:fa:19:a8:5f:19:4f:15:1e:51:bb:15:b4:f8:ba:8e:ad:
64:bb:d4:1a:63:c8:51:06:76:90:f5:9a:ed:ee:c6:75:fb:5d:
8e:bf:c4:a9:05:1c:5e:f1:ee:c3:27:24:a0:9b:a5:ac:ec:c5:
0d:6c:1a:f2:39:b3:bb:67:43:e2:6d:55:ad:82:1a:98:de:27:
82:9d:c6:f5:c8:de:af:7b:95:63:ca:04:cb:80:14:62:42:32:
70:90:15:21:14:b5:03:77:f4:7c:7e:09:2d:ea:29:74:18:24:
95:79:6f:15:24:e6:8f:a2:44:f5:5d:ff:d2:57:e9:09:25:d1:
d9:29:11:e6
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUVlRyto2jVMkxWsvruixQktaXm34wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkMxRjlDQkI1RkY2MDYzMjMwRDQ1QjU5NkYyRDBFNkQ5
NDMzODgxNTAeFw0yNjA0MTYwMjUwMzdaFw0yNzA0MTUwMjU1MzdaMDMxMTAvBgNV
BAMTKDg2Q0I2NURGRDA5MkEzRUNBNkZEOEY5NTg5QzUyODYzQzMxNURERTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuyw7nr2m2KCCdXptyX+h0T6DC
AZNkAtTzRUGC6LhzrIILv59g5sNTxvo8T3015n8dV5w56Quu/vyMQKh4v37/kH9Z
ZHsC0GAitu7VcglHVYRwsqkzf1mxQq73+e+01cvanao50aEHYNABMGUH494ql77v
BMMNsauASjK6gB6T39osJO/e71v8OTRPmr2wGN/lQrU3m9+URZXqwBBUehMX+qsX
BCI4VgypHQ1IivEo+0V4IDVc7HS89jegqfd3S5JyivFuuJ+Cm9gwaGN7XEzRxz31
AXFAnqZXu+71tWdqSVIX2pW91c5HZ+6OitS/0awt8dr7MmluELLnTdYdPbeHAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUhstl39CSo+ym/Y+VicUoY8MV3ekwHwYDVR0j
BBgwFoAUvB+cu1/2BjIw1FtZby0ObZQziBUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
Njk4NDE4NzI1NDE0NTAyNi8wL0JDMUY5Q0JCNUZGNjA2MzIzMEQ0NUI1OTZGMkQw
RTZEOTQzMzg4MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQkMxRjlDQkI1RkY2MDYzMjMwRDQ1QjU5NkYyRDBFNkQ5NDMzODgxNS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwOTY5ODQxODcyNTQxNDUwMjYvMC8zMTMwMzMyZTMx
MzAzNDJlMzIzNTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzYzMzM1MzMzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmdo/DANBgkqhkiG9w0BAQsFAAOCAQEALRZsBdpJtzjJTM+JcDDy
Ux+iRjIBH3V+YjPqynKx6uNzjLOH9eXRqQT9mKvNOm5TYMe3FekbHo+TGkLJEu2r
Rv157+4ZzDInAS2EVFLRpPTN21Bcp4BHioFEzb+Wp9Sp8QcZqoO6zf4zb5VVYkVd
Z4SEJ/yNWMjFQ5CdZ7KRpUL6GahfGU8VHlG7FbT4uo6tZLvUGmPIUQZ2kPWa7e7G
dftdjr/EqQUcXvHuwyckoJulrOzFDWwa8jmzu2dD4m1VrYIamN4ngp3G9cjer3uV
Y8oEy4AUYkIycJAVIRS1A3f0fH4JLeopdBgklXlvFSTmj6JE9V3/0lfpCSXR2SkR
5g==
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:48:40 2026 by rpki-client